Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/v98srRg53V6B3gMmP5eMZvaViz0.roa
File: v98srRg53V6B3gMmP5eMZvaViz0.roa (raw, json)
Hash identifier: a3OxkK6/LKjycwFxxwzfNE4xdUrORvkqXg+U7/HY47s=
Subject key identifier: BF:DF:2C:AD:18:39:DD:5E:81:DE:03:26:3F:97:8C:66:F6:95:8B:3D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019628FDBEE0968728A7FEDC6F8C91D506A5
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/v98srRg53V6B3gMmP5eMZvaViz0.roa
Signing time: Sat 12 Apr 2025 07:54:00 +0000
ROA not before: Sat 12 Apr 2025 07:54:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215071
IP address blocks: 31.57.249.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 13 Apr 2025 14:15:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:28:fd:be:e0:96:87:28:a7:fe:dc:6f:8c:91:d5:06:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 12 07:54:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bfdf2cad1839dd5e81de03263f978c66f6958b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:66:86:50:a2:64:9c:42:db:b5:cb:27:4c:0b:
17:16:0e:7a:d5:ed:93:0c:c7:44:5c:48:d7:46:35:
06:2f:b9:d8:50:48:57:de:c3:a3:e3:33:ef:1f:72:
19:18:03:e7:5c:a5:2b:35:12:f9:e3:61:a4:6f:6e:
8d:ff:30:05:ee:e6:2a:9e:90:c2:76:d3:aa:af:4b:
54:5b:1d:58:79:c0:a9:61:bb:2d:8e:5d:de:d4:27:
7d:d9:1a:57:24:7e:ec:22:9c:c4:df:c8:12:ab:61:
20:9b:50:8e:e7:9d:6e:c8:33:f0:a5:ea:11:ca:28:
c6:55:2f:f6:46:fe:19:41:b6:5a:53:86:12:dd:78:
61:ba:61:b4:de:a1:6e:6d:1b:6b:a7:e3:a6:23:20:
eb:50:05:8e:da:e6:59:dc:b5:c2:17:93:22:f8:86:
3f:0e:fd:a7:82:43:65:bc:55:e6:73:76:d0:f4:55:
b2:84:52:50:88:e6:81:47:ea:82:b4:83:ab:4e:ce:
76:d2:2d:48:be:36:ec:3a:4f:16:85:e3:f7:f9:12:
a4:09:d2:8d:6f:a5:78:f8:a1:a9:45:e6:c1:71:df:
25:63:2e:78:97:d6:3d:0d:6c:30:55:f2:a8:55:0e:
4b:65:03:dd:16:82:1d:ca:ea:b5:2a:0f:74:57:ed:
9c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:DF:2C:AD:18:39:DD:5E:81:DE:03:26:3F:97:8C:66:F6:95:8B:3D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/v98srRg53V6B3gMmP5eMZvaViz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.249.0-31.57.251.255
Signature Algorithm: sha256WithRSAEncryption
9e:3f:c4:cb:f0:92:d4:ad:32:0b:23:bd:6f:ba:c2:65:c2:96:
a1:30:07:e5:6f:bf:b1:a2:c6:af:a2:52:c4:bb:cc:0d:d2:d9:
55:16:87:d9:20:b0:1d:48:35:bd:f3:69:c3:43:e6:4e:f0:54:
9b:39:44:0b:2f:84:0b:9f:cd:ea:41:fb:0d:bb:08:83:50:0b:
71:2c:33:88:90:44:04:fc:78:84:3f:4e:f1:e9:0c:92:88:e9:
8d:7d:7d:c5:9f:34:44:f3:c9:2d:e6:0a:65:75:4c:94:cc:5d:
95:2b:68:42:a5:41:00:36:fb:e9:35:08:a4:17:a8:3b:8d:82:
ee:6b:12:7f:87:5b:c1:43:e4:0e:28:fb:78:52:5e:aa:6b:99:
9c:3d:e9:d5:21:50:91:f0:fe:c2:f3:b1:f3:b7:88:3b:04:39:
47:7a:b3:32:69:7d:fc:91:97:aa:62:8e:f7:e8:d6:f8:7b:a2:
17:29:c9:8c:77:db:a9:5c:58:48:80:36:f9:07:b0:96:f8:fa:
1c:41:6d:83:c9:2c:65:ae:79:4e:1f:fa:c4:ae:6e:7b:68:c2:
eb:15:7b:52:42:fe:f3:d2:e1:f2:3c:42:1e:f2:fe:98:5a:a4:
ad:e8:22:90:53:f7:33:fc:a0:3a:ed:3b:05:a7:ef:82:a3:45:
aa:4e:0a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:50:14 2025 by rpki-client