Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MOWhjwLAdmm1oI5tUfEtRxy0UsQ.roa
File: MOWhjwLAdmm1oI5tUfEtRxy0UsQ.roa (raw, json)
Hash identifier: 3VuhfmVdKY6X6SmpBcUitj5pRExMLxGrgtOrydTs6TY=
Subject key identifier: 30:E5:A1:8F:02:C0:76:69:B5:A0:8E:6D:51:F1:2D:47:1C:B4:52:C4
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019634DE35737DD528D2852FFDD44FB9AEF9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MOWhjwLAdmm1oI5tUfEtRxy0UsQ.roa
Signing time: Mon 14 Apr 2025 15:14:59 +0000
ROA not before: Mon 14 Apr 2025 15:14:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215242
IP address blocks: 31.58.250.0/24 maxlen: 24
31.58.251.0/24 maxlen: 24
217.60.251.0/24 maxlen: 24
217.60.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 27 Apr 2025 16:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:34:de:35:73:7d:d5:28:d2:85:2f:fd:d4:4f:b9:ae:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 14 15:14:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30e5a18f02c07669b5a08e6d51f12d471cb452c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:c7:0a:78:a1:01:77:aa:e7:5e:cf:50:c3:c4:
3c:ca:6b:6c:8d:0b:cb:0d:0f:27:17:aa:10:9d:4c:
9d:42:9f:55:a2:f8:24:79:16:02:9f:34:3e:de:fd:
8e:de:35:06:8c:16:c6:78:f0:66:09:6c:3d:d4:33:
29:0e:7f:c6:49:b4:f9:8e:fd:b8:f3:5c:cd:bd:19:
c2:20:25:68:bd:f0:89:3d:9e:75:b1:bd:ba:75:aa:
a4:83:c7:c5:ad:9c:33:d1:a5:70:90:5d:ec:8e:33:
b4:41:45:05:27:c1:16:45:70:d1:42:e1:cc:4d:86:
f6:83:7a:f1:9d:c7:d6:64:ee:3f:0c:c4:97:82:4f:
92:2f:a2:66:df:c1:cb:b2:c1:bd:e0:50:96:cf:85:
c9:f0:a4:8a:af:48:aa:97:ee:e4:9d:9f:3a:3d:65:
2d:ef:1d:1e:bd:2e:bf:b3:19:28:aa:fd:8a:62:ce:
fc:dd:f2:cd:1e:99:9e:30:16:22:d8:26:38:99:d3:
f1:2f:fa:09:73:95:53:83:2c:b1:d1:96:f1:ad:83:
5d:c4:44:57:73:e3:f3:c0:83:4e:0b:44:51:de:ce:
40:18:c7:ba:40:91:a5:a6:a6:e5:74:20:37:b0:f8:
3e:9f:08:fe:d3:fc:96:4b:30:c6:c2:0f:62:d3:61:
e9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E5:A1:8F:02:C0:76:69:B5:A0:8E:6D:51:F1:2D:47:1C:B4:52:C4
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MOWhjwLAdmm1oI5tUfEtRxy0UsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.250.0/23
217.60.251.0/24
217.60.254.0/24
Signature Algorithm: sha256WithRSAEncryption
25:c6:39:0b:ff:c6:dd:84:22:12:a8:23:27:0a:64:35:fd:c6:
d0:b6:21:d2:a9:39:fa:2b:1d:63:bf:77:98:0d:7e:44:ca:f8:
e1:ef:11:ba:bc:e3:f8:29:5d:e7:4b:cd:33:85:48:55:fb:48:
f7:36:7f:b8:8f:ac:bc:ea:80:36:dd:c8:2e:17:89:dc:2b:36:
fb:9e:95:8e:46:53:32:1e:ad:0d:39:44:18:c3:9b:74:73:9d:
63:64:e4:ae:c3:cb:5c:33:f2:73:62:21:21:41:c8:8d:6c:60:
dd:25:9c:4c:63:d9:7e:52:da:8e:9d:fc:cd:6a:03:1c:e3:13:
8d:21:e8:e9:2d:f1:f0:d6:48:5c:42:3c:76:64:ad:55:56:67:
d8:50:74:c5:3e:a7:8f:fa:2f:bf:18:94:c8:9e:a0:4b:59:7f:
13:37:b4:8c:b2:4d:05:e2:27:34:d7:cd:a1:89:cc:80:45:9b:
40:07:ca:ea:95:6a:30:e6:d6:80:3a:cd:b6:44:13:55:73:e1:
e4:ab:22:89:dc:84:84:62:a6:4a:7f:41:ef:5b:26:1f:fd:99:
b0:dc:c7:43:a6:b8:cd:80:3b:1c:c3:03:79:48:95:5e:0f:b7:
7e:40:6e:91:b6:4e:a6:fe:08:a2:89:db:7e:a4:1f:24:7a:a4:
b4:46:2c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:02:33 2025 by rpki-client