Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zQ5-1Xpcl7lbyb_Ssv59OWxSaJY.roa
File: zQ5-1Xpcl7lbyb_Ssv59OWxSaJY.roa (raw, json)
Hash identifier: rVWZgnHDvIe97gpxZEEUnCsVjxJSZ9cnqs+hzfTK+Ow=
Subject key identifier: CD:0E:7E:D5:7A:5C:97:B9:5B:C9:BF:D2:B2:FE:7D:39:6C:52:68:96
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196068C25BC5ED5AFFFF420C0DF48576CA8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zQ5-1Xpcl7lbyb_Ssv59OWxSaJY.roa
Signing time: Sat 05 Apr 2025 15:22:50 +0000
ROA not before: Sat 05 Apr 2025 15:22:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212335
IP address blocks: 31.58.142.0/23 maxlen: 24
31.58.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Apr 2025 11:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:06:8c:25:bc:5e:d5:af:ff:f4:20:c0:df:48:57:6c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 5 15:22:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd0e7ed57a5c97b95bc9bfd2b2fe7d396c526896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:44:4d:c1:11:b3:41:bd:de:ed:9e:bf:c7:fa:
65:be:ae:01:7c:83:3d:05:ea:4c:d6:68:76:b5:96:
ac:1f:e1:4f:d2:28:84:a0:30:6e:e5:87:07:9b:d7:
71:26:f0:fe:fd:43:21:bc:56:3e:f5:90:9d:87:e7:
57:4a:03:b3:52:22:c5:c8:5a:ef:46:e5:21:5c:e3:
d8:cc:a6:96:9e:07:f7:d5:3a:b0:59:65:ae:82:c9:
4b:48:9f:79:12:2e:9a:21:f8:0a:47:d4:d9:fb:d2:
88:2b:31:1a:c0:70:af:cc:79:41:58:0d:77:26:6c:
cf:a3:c0:5f:dc:24:ce:de:3b:67:6f:51:ac:1a:f2:
d1:28:0c:75:20:72:76:95:43:74:14:38:e2:9a:f6:
99:65:1a:23:1b:f7:58:30:da:ec:82:c7:f0:5c:57:
33:8c:85:e3:a6:00:40:c7:01:d1:71:99:cf:9b:d4:
94:c4:1d:96:38:35:ea:d2:3e:43:e5:67:d7:1b:6f:
59:e7:8d:4a:2d:f4:64:2f:93:7d:1e:e6:2b:7c:1e:
04:b3:23:3d:24:1e:e4:6a:34:57:54:c0:94:19:2c:
2b:5c:9b:43:a1:27:ec:06:0d:4a:db:22:42:9a:55:
fa:6f:4a:55:34:92:12:bf:4e:65:92:62:cd:e2:64:
16:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0E:7E:D5:7A:5C:97:B9:5B:C9:BF:D2:B2:FE:7D:39:6C:52:68:96
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zQ5-1Xpcl7lbyb_Ssv59OWxSaJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.142.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:ac:9b:14:97:2a:ea:6f:17:07:d3:9c:3b:ef:f0:5d:3e:ef:
b9:ff:a5:8f:5a:42:1e:95:20:94:8f:ec:37:a9:10:40:4e:fd:
58:3e:3c:92:0e:23:14:a5:2c:62:cb:b6:30:0e:3e:c2:19:84:
d6:de:d6:3f:ea:d0:6d:cd:fb:61:fa:eb:f4:38:b2:57:a8:40:
6d:e0:d0:c8:17:71:e1:94:3e:2d:c0:11:a7:ba:1b:2a:62:d9:
08:2c:44:46:cf:0e:49:e3:bf:59:06:e8:82:9e:3f:1b:7b:51:
1e:99:b0:c6:52:47:53:e1:a8:50:1e:66:38:f9:a4:70:ca:63:
ca:02:63:27:c7:56:d0:47:81:c6:ba:33:a2:3a:6d:56:cf:a5:
79:6a:91:2b:60:3d:67:2d:a3:a0:63:f4:25:6c:67:a4:a5:e5:
e8:c3:49:d7:03:2e:30:33:14:d9:da:74:22:b9:af:39:50:2e:
ea:18:d5:6b:4e:f3:6d:63:24:9a:cf:6e:8a:35:ef:95:bc:51:
ca:44:60:0f:16:96:05:5e:e5:f1:9f:0b:88:eb:c3:f5:22:30:
21:83:ea:12:e3:1b:c1:1c:52:65:f5:0a:4e:c2:07:40:56:fc:
31:58:ce:ce:a2:0f:54:7d:5c:bb:27:da:c6:7d:7c:e0:da:fd:
9d:71:95:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:51:36 2025 by rpki-client