Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/reR1FX8-9YDg1WWZoAbThHAZ9NA.roa
File: reR1FX8-9YDg1WWZoAbThHAZ9NA.roa (raw, json)
Hash identifier: +BixXleYxe8iGyfFEvVKXp9QEHXjymvOGoZz1S7flf4=
Subject key identifier: AD:E4:75:15:7F:3E:F5:80:E0:D5:65:99:A0:06:D3:84:70:19:F4:D0
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193B5D96289EC35FFF2543FE54F976AD61A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/reR1FX8-9YDg1WWZoAbThHAZ9NA.roa
Signing time: Wed 11 Dec 2024 13:12:22 +0000
ROA not before: Wed 11 Dec 2024 13:12:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60117
IP address blocks: 31.56.76.0/24 maxlen: 24
31.58.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b5:d9:62:89:ec:35:ff:f2:54:3f:e5:4f:97:6a:d6:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 11 13:12:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ade475157f3ef580e0d56599a006d3847019f4d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3a:e6:5a:f9:23:5c:d8:a5:db:42:b3:a7:6e:
d6:5d:ae:1d:9a:81:de:3a:5b:4c:72:e9:5d:6c:b8:
13:0c:47:c5:5f:1b:23:56:97:ce:0a:6c:5e:19:47:
37:61:6c:cc:47:75:91:bb:ac:6a:21:d6:06:f8:97:
2f:57:ba:3f:aa:e6:92:62:86:8f:86:bd:8d:ad:23:
7e:97:91:2e:3c:09:11:2c:fc:f7:04:59:a1:37:ea:
34:33:bf:c0:8a:fc:c7:2e:fc:55:81:ba:25:78:04:
d8:3d:4a:f0:18:f5:15:d4:94:67:34:22:b9:56:83:
5b:70:ed:4a:23:ea:69:9d:30:c5:2a:5f:fb:ba:d4:
50:04:5f:15:7c:f4:ea:55:7d:04:e6:3b:28:04:64:
56:a0:71:b8:29:6f:4d:ed:55:22:59:41:32:c5:cf:
61:36:60:34:18:b0:59:2c:1c:89:9d:c8:bb:44:c9:
2d:58:86:bb:de:66:aa:d1:f9:7c:57:3a:69:b3:63:
10:4a:ac:d8:61:28:36:fb:19:81:ba:98:2e:24:af:
b1:f9:f2:31:5d:5d:f8:0c:cd:97:71:4a:7b:9b:2c:
a2:98:46:1e:f9:ab:93:aa:24:15:34:c7:68:d1:ec:
17:28:77:b3:1c:67:cd:db:62:b7:83:c4:81:01:eb:
af:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E4:75:15:7F:3E:F5:80:E0:D5:65:99:A0:06:D3:84:70:19:F4:D0
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/reR1FX8-9YDg1WWZoAbThHAZ9NA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.76.0/24
31.58.143.0/24
Signature Algorithm: sha256WithRSAEncryption
80:b1:e2:85:99:39:c5:1d:fe:eb:87:8d:8c:a7:4a:bd:1d:8f:
72:d1:ac:64:7b:a6:71:1f:82:5c:dc:a0:19:74:97:74:96:24:
46:fe:94:cb:bd:1d:a2:f9:00:f3:aa:15:e1:26:79:b7:88:88:
5f:bd:c1:43:d1:2f:0c:ee:6c:d7:21:32:10:25:ce:9c:9a:9b:
ad:6e:a4:cd:98:3f:d0:2a:f7:3c:64:10:69:36:81:f5:b9:e8:
7d:e0:6e:d7:03:12:4a:13:d3:a8:c5:fb:f8:f4:99:30:83:82:
78:d5:5b:d6:3c:ab:2c:d7:89:91:a3:f5:db:95:13:56:98:fc:
e1:57:11:f8:df:d4:29:68:13:94:df:23:a9:ab:76:e7:b0:d0:
57:5a:6b:4a:6f:b6:53:86:15:71:6f:e6:da:0f:ae:e2:22:c1:
d4:01:71:07:68:e1:48:71:b3:b7:bc:b7:03:83:9d:fb:e8:a3:
63:73:71:42:f5:cd:25:ec:47:4d:d0:4c:1e:bd:d6:e6:7f:83:
0c:71:20:03:43:a8:1c:dd:c6:b4:4d:8b:4a:a3:43:3b:93:2d:
d9:13:f1:7d:18:8f:ec:a1:35:30:24:e8:51:10:2e:b6:50:56:
b3:21:8d:7f:e4:59:86:ad:69:0f:ed:30:80:98:c7:94:25:e7:
08:25:9b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:03:53 2025 by rpki-client