Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/w42mx9jNwj75ozrF-jupiUZNSxI.roa
File: w42mx9jNwj75ozrF-jupiUZNSxI.roa (raw, json)
Hash identifier: JKIcoOn7B7LtxPyVEgyKC79+4Ni3sFD27MX85vIFvmU=
Subject key identifier: C3:8D:A6:C7:D8:CD:C2:3E:F9:A3:3A:C5:FA:3B:A9:89:46:4D:4B:12
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195892B97FCEBF7A835CF22EFE32CE451FB
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/w42mx9jNwj75ozrF-jupiUZNSxI.roa
Signing time: Wed 12 Mar 2025 07:04:50 +0000
ROA not before: Wed 12 Mar 2025 07:04:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 31.56.141.0/24 maxlen: 24
31.57.155.0/24 maxlen: 24
31.57.160.0/24 maxlen: 24
31.57.226.0/24 maxlen: 24
31.59.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Mar 2025 13:53:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:89:2b:97:fc:eb:f7:a8:35:cf:22:ef:e3:2c:e4:51:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 12 07:04:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c38da6c7d8cdc23ef9a33ac5fa3ba989464d4b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f3:34:ca:aa:87:8d:5c:16:d9:a1:8d:c1:76:
98:a1:f4:b6:a0:c0:17:1c:71:ee:44:08:1a:c7:32:
22:56:bf:4d:86:83:95:a0:b9:66:f9:ab:83:60:a2:
1c:52:31:84:97:7e:bc:d8:7e:88:e6:63:91:72:e8:
7c:b1:05:b6:f1:bf:74:ca:64:00:f9:4b:64:50:24:
0c:8c:63:00:16:e4:7f:15:36:70:4d:a7:a2:83:18:
f2:27:f2:ae:c7:94:b7:7b:ad:57:fe:cf:a6:19:17:
8c:91:79:c9:59:7f:20:a5:b9:7f:8d:dc:2f:b2:65:
ef:f7:09:91:4d:91:fe:fc:34:b2:da:28:71:17:25:
d1:9f:8e:37:04:4d:1f:c0:67:3f:87:47:e5:8c:63:
8c:ce:29:17:f5:b4:7b:bc:c5:e3:3d:0a:f2:ab:96:
90:fb:9b:f8:98:80:6c:02:59:18:da:07:71:d6:3a:
de:bb:e2:37:fc:56:e6:3b:f0:33:32:02:23:f4:0e:
38:fc:ef:ec:62:c5:c8:16:24:e6:9e:f7:92:a7:e7:
41:11:23:df:99:9f:f0:7e:5c:4e:ac:e3:c3:dc:cc:
59:22:13:06:57:a3:97:4c:0b:51:18:b4:8a:18:68:
98:d2:0a:07:c9:2f:1d:42:b0:de:72:6c:f6:0f:5d:
b2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8D:A6:C7:D8:CD:C2:3E:F9:A3:3A:C5:FA:3B:A9:89:46:4D:4B:12
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/w42mx9jNwj75ozrF-jupiUZNSxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.141.0/24
31.57.155.0/24
31.57.160.0/24
31.57.226.0/24
31.59.99.0/24
Signature Algorithm: sha256WithRSAEncryption
46:07:2a:0a:28:1f:6e:3d:14:9e:95:af:6d:35:36:e5:24:e5:
aa:01:41:2c:b5:f4:39:f5:22:6e:2f:18:3c:f0:4e:40:9a:c3:
58:57:bc:15:e5:2a:e3:a0:16:0f:67:ea:55:fe:52:ad:35:d9:
60:fb:ed:a4:1c:a4:1d:56:f1:32:d5:a4:49:e6:50:e0:45:f6:
24:ac:d5:7b:07:7c:77:31:94:93:13:5b:fe:f0:b9:4f:07:44:
4a:df:36:99:61:44:5e:4d:20:b6:50:ca:59:ce:34:8f:95:4c:
ed:70:b1:b2:19:a5:ab:38:57:96:38:99:27:04:af:08:0a:99:
36:03:a9:d1:7f:d0:2b:92:c0:52:13:7d:9b:d1:00:9a:04:85:
e5:05:92:d7:d6:47:57:2a:dd:d6:a1:6c:34:4b:ac:23:8b:3b:
bf:9a:4c:08:a5:00:64:97:c7:0e:c8:23:5a:cd:34:7d:09:90:
e7:fb:18:43:5d:66:a7:40:10:31:8e:b1:2f:33:fc:85:f4:34:
17:8c:64:df:22:0c:de:bb:ee:cf:b6:da:7f:cd:87:8b:f4:86:
e6:21:2c:46:d6:4a:8e:e9:a1:39:ec:4f:b5:3b:be:e0:d4:29:
15:7c:e5:fe:04:ee:1c:84:28:31:4f:23:7d:2b:18:b0:52:84:
ab:4a:54:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:58:03 2025 by rpki-client