Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/s94iEKEmkTxMT3Zvkuup3XatGoQ.roa
File: s94iEKEmkTxMT3Zvkuup3XatGoQ.roa (raw, json)
Hash identifier: d8Rut/XieHva+hWvBwY4LTXk3psZUyvBKrhlrn/Mn7c=
Subject key identifier: B3:DE:22:10:A1:26:91:3C:4C:4F:76:6F:92:EB:A9:DD:76:AD:1A:84
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194A83B01E3971BFDC613B10D003C2FF7B9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/s94iEKEmkTxMT3Zvkuup3XatGoQ.roa
Signing time: Mon 27 Jan 2025 14:47:06 +0000
ROA not before: Mon 27 Jan 2025 14:47:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8100
IP address blocks: 31.58.92.0/22 maxlen: 24
31.58.100.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Jan 2025 14:49:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a8:3b:01:e3:97:1b:fd:c6:13:b1:0d:00:3c:2f:f7:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 27 14:47:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3de2210a126913c4c4f766f92eba9dd76ad1a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:11:ae:37:a5:10:9c:f9:38:7d:aa:86:b1:a1:
90:47:3f:cf:0b:5a:32:4d:6e:fc:8a:65:c8:4a:ca:
14:49:c0:aa:ae:20:df:8d:98:c0:a1:c4:ce:66:6d:
74:c7:d2:ea:62:89:ff:9d:32:8e:1e:7c:2c:65:16:
10:ce:8f:30:12:97:40:72:38:44:0a:e5:b3:c6:69:
c0:71:5e:c0:e5:74:1e:38:b1:f2:8c:81:b0:28:82:
26:f8:f3:3e:a2:0c:0c:58:64:33:93:2d:43:06:f8:
43:f7:44:8e:0b:6b:c8:2e:77:63:8f:fe:9e:1e:07:
88:82:37:26:42:4e:e6:c7:a9:93:05:94:70:c4:8a:
94:31:35:f9:7d:a4:32:65:12:d1:38:1d:73:a2:4d:
0c:55:77:c5:ed:b8:7a:75:21:78:ac:b0:ce:4c:6a:
1e:bc:61:74:9e:e9:d3:9f:d9:72:7c:d6:60:d2:b6:
2b:98:49:0d:82:a8:e6:5f:17:6b:1e:ff:c7:2b:49:
af:15:ec:99:f4:49:cc:84:d2:1e:c8:01:f5:b3:4a:
00:57:21:7d:f9:56:15:90:1b:db:55:35:b6:54:bd:
32:ff:46:5e:5d:c6:fa:56:59:c7:9f:58:a3:63:f9:
b3:0b:4d:65:f4:4c:39:ae:60:6d:23:de:2d:59:32:
34:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:DE:22:10:A1:26:91:3C:4C:4F:76:6F:92:EB:A9:DD:76:AD:1A:84
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/s94iEKEmkTxMT3Zvkuup3XatGoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.92.0/22
31.58.100.0/22
Signature Algorithm: sha256WithRSAEncryption
85:54:eb:86:82:ed:c6:23:c9:bc:c4:1f:bf:dc:00:63:2e:ad:
43:c6:2e:d0:85:14:1e:c5:66:30:83:cc:9c:7b:45:ec:eb:c7:
c9:de:ce:24:72:b6:4c:b3:ca:1f:60:a4:90:9b:e5:32:00:03:
75:c8:a4:69:99:c2:9c:11:71:cd:05:71:5a:02:9e:2c:bc:9f:
a2:6d:c8:b6:e8:a0:c2:28:5e:39:d7:5e:cd:f4:36:db:66:4c:
6e:ab:06:16:3a:1f:d8:f8:67:7d:28:4f:75:ac:3a:51:87:02:
e9:85:d6:47:37:93:13:cc:62:8e:de:55:28:29:19:60:24:86:
1c:59:c2:76:43:fa:7a:2f:a6:1b:c1:ff:19:f8:8f:ca:10:ec:
cd:88:ba:11:10:ed:6d:b5:84:e5:97:16:0a:c3:6b:a0:88:7c:
56:e1:3f:cd:ef:57:94:4c:94:fe:92:15:50:96:a3:5e:5f:27:
c1:33:ea:ab:68:5e:4f:b9:0b:84:3c:a4:ec:97:60:f1:9e:66:
ac:cf:4c:c2:94:72:eb:19:ba:61:f8:e7:51:72:ed:cb:85:6f:
72:7c:c9:21:eb:61:af:ee:0b:94:67:34:0e:11:27:fc:cc:1d:
bf:b5:f0:85:84:4f:46:b7:ec:ac:a0:9b:a4:17:9a:fa:80:1e:
4b:bd:28:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 16:06:15 2025 by rpki-client