Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mP15E-0gyAWo98N9n-Mq39OLQYc.roa
File: mP15E-0gyAWo98N9n-Mq39OLQYc.roa (raw, json)
Hash identifier: 5mRd0ffXKhwQuE5OiTuBQr6gX5VySmVUMDFUAYU/77I=
Subject key identifier: 98:FD:79:13:ED:20:C8:05:A8:F7:C3:7D:9F:E3:2A:DF:D3:8B:41:87
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194D069DF426AF423E2781264785021BA5D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mP15E-0gyAWo98N9n-Mq39OLQYc.roa
Signing time: Tue 04 Feb 2025 10:03:06 +0000
ROA not before: Tue 04 Feb 2025 10:03:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215224
IP address blocks: 31.56.1.0/24 maxlen: 24
31.57.144.0/24 maxlen: 24
31.57.231.0/24 maxlen: 24
217.60.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Feb 2025 11:57:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d0:69:df:42:6a:f4:23:e2:78:12:64:78:50:21:ba:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 4 10:03:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98fd7913ed20c805a8f7c37d9fe32adfd38b4187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:96:cc:af:7e:7a:eb:4c:c4:ab:c8:aa:a1:09:
74:0c:c2:1b:1c:b5:9a:d1:2f:71:f0:92:59:23:49:
9a:35:ee:fb:00:e3:6a:a5:41:5c:19:ef:9f:23:94:
a2:c3:2d:47:2c:a7:2d:18:ac:44:47:51:e9:77:83:
05:8b:3c:93:3a:58:7c:1d:88:09:9e:f9:e7:a4:2f:
ee:db:de:cd:1e:5d:4c:90:ed:fc:a0:73:d6:8b:1c:
a3:21:86:16:34:1b:7d:67:4d:46:85:07:ae:d4:32:
3d:7e:c8:3f:a7:ec:34:01:4e:ce:dd:76:50:f8:07:
1d:66:ea:46:22:d1:20:db:ef:b5:b2:d0:d5:49:ce:
e4:4f:0e:00:65:78:32:22:77:1e:8c:8b:27:07:c3:
07:34:60:65:2b:34:22:fd:06:8c:31:49:a8:de:c3:
68:35:7d:4d:eb:be:40:cf:a8:54:5f:3f:82:2c:ab:
b2:98:1d:80:32:8c:91:7a:b5:bf:ca:96:7a:d8:bc:
7c:94:f0:f2:ff:0f:97:72:9b:11:5a:53:33:c2:2f:
9b:b0:f6:a9:1f:de:74:5e:8e:fc:83:46:c8:3c:d5:
13:9b:9f:1a:ac:48:f8:1e:13:b0:74:1b:98:01:bc:
b2:7c:f1:3f:de:1a:34:82:cd:c2:e2:50:3a:b5:1c:
7f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FD:79:13:ED:20:C8:05:A8:F7:C3:7D:9F:E3:2A:DF:D3:8B:41:87
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mP15E-0gyAWo98N9n-Mq39OLQYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.1.0/24
31.57.144.0/24
31.57.231.0/24
217.60.254.0/24
Signature Algorithm: sha256WithRSAEncryption
07:7a:51:46:6a:e8:00:5a:6e:72:dc:d2:14:ae:cf:c3:04:9a:
8b:ca:9c:8e:eb:20:ac:a9:93:f7:29:14:e9:98:4b:b5:60:28:
4c:6c:88:73:f0:7c:b8:93:52:32:92:86:fc:b5:c2:d1:d0:4d:
29:40:78:e5:ae:2a:ec:cc:d1:25:c7:95:a0:4e:10:26:b7:ae:
4b:e1:d1:f8:b2:7b:1a:38:04:64:cb:16:17:3b:04:f7:12:a9:
51:64:4b:17:7d:90:25:2f:a7:e7:b8:d8:60:79:71:ab:28:40:
2a:cf:13:6e:6c:38:eb:c3:b5:67:46:7b:dd:5e:2d:68:4c:56:
e2:ee:ba:96:c4:0e:4c:d6:3b:83:53:89:b5:0f:35:a6:cb:45:
22:08:e2:88:38:fa:de:4c:ea:2f:bf:aa:db:d5:41:a9:df:e5:
a3:ff:69:22:4a:e3:28:c0:b8:f3:98:c2:e6:e2:85:9d:96:dd:
d6:2f:e2:79:41:6f:ca:29:6f:8f:c4:49:f0:8f:1f:7b:bb:90:
39:cf:f9:df:c3:b9:d5:a7:c9:a6:57:96:61:70:35:ce:2c:f7:
be:c6:09:aa:e7:59:ee:5c:86:22:fb:44:d0:12:96:dd:a0:bf:
dc:0d:27:b8:63:af:ef:a3:73:52:7d:6e:f0:5f:27:d2:19:a9:
03:5f:e1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:08:22 2025 by rpki-client