Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/G0mNtcVDB2E7mq10z4pcmYSl5es.roa
File: G0mNtcVDB2E7mq10z4pcmYSl5es.roa (raw, json)
Hash identifier: 9v+swYM1n/WzVtSLymEp/7gw+xuYzIGQHA2VYWGmpHw=
Subject key identifier: 1B:49:8D:B5:C5:43:07:61:3B:9A:AD:74:CF:8A:5C:99:84:A5:E5:EB
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194282387C16DDA4AEEA4573805C732ED20
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/G0mNtcVDB2E7mq10z4pcmYSl5es.roa
Signing time: Thu 02 Jan 2025 17:50:04 +0000
ROA not before: Thu 02 Jan 2025 17:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395092
IP address blocks: 31.58.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 Jan 2025 06:40:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:87:c1:6d:da:4a:ee:a4:57:38:05:c7:32:ed:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b498db5c54307613b9aad74cf8a5c9984a5e5eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4b:1d:a0:38:1d:d3:dc:4c:4f:45:8c:1e:d2:
92:70:e8:97:1e:f8:68:25:4a:2b:6b:ab:20:31:0e:
71:fe:93:db:29:e4:86:9f:4b:9a:2e:48:71:51:e2:
62:d7:65:f5:93:8f:7b:33:de:12:96:ba:87:4a:61:
d4:4c:0c:60:e4:10:b8:f2:c5:ef:4e:97:de:d4:67:
12:91:e5:bc:ff:60:df:f3:2b:ec:be:96:d5:5d:0e:
3e:b5:d2:36:0b:63:03:49:35:71:8a:97:53:58:cb:
fc:ae:7a:2a:56:08:0b:bd:71:ae:bc:b6:09:2f:61:
1b:c8:2c:0a:d5:b5:05:d9:9f:76:f3:8d:de:3a:e9:
13:a5:92:77:4d:1a:f7:63:37:b0:85:42:05:c2:a3:
be:70:22:66:a1:c0:59:8c:ed:9e:94:3a:1d:98:4d:
a5:54:83:cc:12:da:41:6e:3a:93:f8:cf:44:0b:73:
fa:9e:05:0a:4a:16:47:51:28:66:6a:c2:40:95:da:
39:a3:84:97:00:71:06:15:1b:ed:15:1f:5c:24:ba:
c0:dc:f4:e1:1e:32:53:7c:2c:f1:61:6f:73:67:c1:
13:2d:cf:3e:d9:11:70:9d:61:98:0e:a5:8f:9b:57:
8b:ba:c2:37:4e:c4:93:b6:da:82:45:3d:50:7a:41:
fe:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:49:8D:B5:C5:43:07:61:3B:9A:AD:74:CF:8A:5C:99:84:A5:E5:EB
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/G0mNtcVDB2E7mq10z4pcmYSl5es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.67.0/24
Signature Algorithm: sha256WithRSAEncryption
92:48:d3:ff:f4:ad:b0:c4:1c:06:44:19:9f:16:53:fc:ea:ee:
d0:34:54:a5:6c:d5:49:2f:a7:90:5d:22:02:fd:7e:29:3b:51:
e8:8c:36:05:13:11:82:b7:14:0c:c5:49:39:85:09:ee:01:77:
66:69:7d:5f:ab:6d:c8:62:fd:3a:28:15:93:07:6d:b2:58:2f:
47:b0:e4:43:a3:33:1d:fd:c0:1f:9d:ae:16:ec:67:50:8d:5b:
34:0b:65:23:5c:95:7d:c4:e3:c3:12:c5:c8:c3:78:e5:4e:43:
36:e7:72:26:37:d8:39:37:e4:db:d0:15:22:39:02:4a:b6:47:
ce:4e:fa:11:2f:28:9c:93:8c:a7:68:ff:c5:f4:08:41:e5:b8:
c4:bc:f7:e8:f2:22:7c:49:a5:b1:86:e7:43:43:49:fc:ca:e1:
99:b4:1f:46:cd:14:46:27:d0:a5:13:b2:0b:80:ba:ca:32:fe:
64:ae:c8:f1:16:ee:d7:9d:94:cb:e8:e3:08:00:b2:70:b6:23:
37:c7:62:15:68:56:e3:e8:46:6b:a9:62:14:b1:8c:b5:c4:86:
ee:2a:94:46:75:5f:48:2d:d4:82:03:5b:14:28:f3:98:67:56:
95:7e:7f:e3:15:2d:16:6d:0b:32:19:1b:95:5e:2a:d1:0e:2a:
25:49:3e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:55:23 2025 by rpki-client