Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ELkBOp8PKGqwBQYi4A4Yat_xwLs.roa
File: ELkBOp8PKGqwBQYi4A4Yat_xwLs.roa (raw, json)
Hash identifier: K9TgvNIrp2V5RmwEqaNDBvEoN9y38a26Evfxnc84E9E=
Subject key identifier: 10:B9:01:3A:9F:0F:28:6A:B0:05:06:22:E0:0E:18:6A:DF:F1:C0:BB
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019425D711F39BBAB23AA3A2A470C93256C1
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ELkBOp8PKGqwBQYi4A4Yat_xwLs.roa
Signing time: Thu 02 Jan 2025 07:07:19 +0000
ROA not before: Thu 02 Jan 2025 07:07:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213660
IP address blocks: 31.57.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:d7:11:f3:9b:ba:b2:3a:a3:a2:a4:70:c9:32:56:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 07:07:19 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=10b9013a9f0f286ab0050622e00e186adff1c0bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4b:50:86:b9:89:75:92:0f:08:a4:ad:94:f3:
53:72:a4:11:0c:c2:00:5a:40:27:2a:65:1a:6d:85:
dc:ef:70:19:08:bc:48:67:31:e3:d5:b0:f1:6c:71:
f0:cd:7b:52:e4:98:3c:b6:39:8f:02:5f:bd:62:e9:
91:49:0c:05:ef:77:03:d2:04:2c:27:b4:b4:e7:37:
3a:88:e9:1c:ce:97:92:38:97:2c:97:20:7b:bb:d7:
76:0f:80:ef:28:ac:25:ce:98:bc:5e:80:c8:0a:a9:
0d:0d:6e:92:84:71:22:ea:d2:e0:ae:32:34:a7:3f:
c7:4b:9f:b6:7c:07:e4:1d:51:5e:3b:f6:29:dd:7f:
35:52:71:ee:51:26:6c:df:f2:a8:6f:b8:ec:8c:82:
d1:49:35:81:a5:d5:87:3f:e1:53:af:1c:e6:ab:ac:
8a:26:4a:d3:60:25:21:f9:a0:f8:f5:fd:22:69:e8:
d7:e3:cc:86:80:c8:4d:99:62:e0:76:57:a4:1e:df:
4e:65:2d:68:e5:c6:77:3d:ad:6e:13:a5:8d:94:b0:
29:70:16:52:e8:df:ba:41:ab:d7:01:8c:8e:ac:a7:
75:09:20:97:38:20:16:1f:aa:88:ba:7b:e3:e7:74:
d4:8e:b8:cd:29:14:66:40:01:d7:7f:2e:c2:96:7e:
8a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B9:01:3A:9F:0F:28:6A:B0:05:06:22:E0:0E:18:6A:DF:F1:C0:BB
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ELkBOp8PKGqwBQYi4A4Yat_xwLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.182.0/24
Signature Algorithm: sha256WithRSAEncryption
54:9c:d1:98:98:5e:2d:49:73:72:2e:3b:3e:ab:7e:0f:a0:b6:
76:9f:86:08:c5:fc:8c:60:8e:8e:24:71:89:39:c1:bf:ba:7d:
20:7e:3e:f5:32:27:35:bc:17:e2:9d:bf:aa:e9:be:27:57:06:
92:07:ce:c3:3d:a0:83:fe:1e:d9:15:11:f9:3a:39:e3:a0:c1:
98:7c:93:7e:c6:3a:49:6d:43:8a:b3:5b:37:a2:ae:0d:89:a6:
f4:f2:75:35:a0:11:c4:2e:2f:b2:1e:a6:c6:2e:a5:53:d4:38:
5b:9c:28:f8:ec:96:1f:61:ce:4f:99:ba:22:94:0c:b5:ab:ac:
53:ac:49:6b:ad:ec:f3:b0:66:a9:a7:7d:f2:7b:15:2a:d5:23:
17:67:8d:8a:8e:ae:2e:30:86:23:be:e7:28:3d:47:c1:9b:ef:
a1:e2:91:82:40:b7:7c:1d:00:8c:f4:84:12:ef:be:f4:72:1c:
76:bf:48:5e:8d:6a:02:a4:bd:4a:c6:7f:df:a4:52:49:04:81:
95:9a:7e:18:eb:8a:3c:84:42:fd:6b:61:28:ad:47:c0:aa:23:
95:1c:20:82:7d:5d:8c:6a:ca:8f:57:ac:b3:48:f6:f0:e9:31:
37:6b:80:0e:9a:fe:ec:7e:70:65:99:2d:d6:04:ea:a6:32:44:
cb:d5:8c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:07:53 2025 by rpki-client