Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/N_V1qlBDJH9t13QWYO_OybHnADY.roa
File: N_V1qlBDJH9t13QWYO_OybHnADY.roa (raw, json)
Hash identifier: gKdJurCHYZhXf4ymlaP3Cb5EOEZuaQraC9CEExYfyH8=
Subject key identifier: 37:F5:75:AA:50:43:24:7F:6D:D7:74:16:60:EF:CE:C9:B1:E7:00:36
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019428234AB7E27FE56B67CEC58827CA603C
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/N_V1qlBDJH9t13QWYO_OybHnADY.roa
Signing time: Thu 02 Jan 2025 17:49:48 +0000
ROA not before: Thu 02 Jan 2025 17:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57142
IP address blocks: 31.57.198.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 Jan 2025 14:14:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:4a:b7:e2:7f:e5:6b:67:ce:c5:88:27:ca:60:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37f575aa5043247f6dd7741660efcec9b1e70036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b9:49:f4:ff:b9:62:5f:9a:53:6f:c1:fb:eb:
87:93:85:31:19:d9:df:94:62:db:db:24:2f:d8:3a:
3d:82:27:be:4b:62:27:b1:76:99:09:be:95:33:e8:
44:38:29:8f:52:38:0a:57:15:be:0b:2a:26:55:8c:
28:88:aa:7d:3e:9e:2b:29:2a:24:a7:f1:a7:e5:07:
ac:7e:c0:ff:cf:91:60:17:5a:42:81:56:d3:73:21:
c6:0c:f8:78:2e:9b:8a:2e:ff:f3:ec:b0:7d:3c:d7:
3c:92:af:46:18:10:1d:c1:66:d6:4c:ab:2e:9b:a8:
26:63:81:33:38:10:4a:e8:9b:14:ea:d6:10:c7:dd:
43:a4:3a:68:ef:2d:6d:ab:4c:4d:29:2a:fb:a3:1e:
8b:4b:89:c0:8b:0e:47:44:64:2a:ce:95:43:f1:33:
42:53:16:cb:11:54:3e:e7:1d:95:a1:2c:32:dc:19:
70:97:25:b0:f8:4a:65:a2:f8:da:b2:c6:e5:01:13:
b7:67:46:07:41:f6:97:61:19:2a:f9:45:9f:2b:b8:
42:bf:46:29:05:d9:ff:6a:bc:78:14:0b:be:f4:9a:
ae:33:4c:a4:6c:bb:64:95:ea:f0:f5:07:a7:5b:31:
46:2a:b3:b4:69:77:3e:d6:93:cf:80:20:e4:27:ab:
7a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F5:75:AA:50:43:24:7F:6D:D7:74:16:60:EF:CE:C9:B1:E7:00:36
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/N_V1qlBDJH9t13QWYO_OybHnADY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.198.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:85:6c:df:55:46:f9:6f:f2:29:11:26:d1:c6:6a:bc:69:27:
b9:58:eb:81:04:de:5f:b8:97:df:e0:50:9d:4f:3a:81:c6:9a:
12:dc:9b:7f:e3:75:f5:8e:78:14:99:d3:95:c9:0a:19:f7:a2:
c8:fc:7c:7e:30:2f:39:3c:bc:d6:57:8b:f5:e0:fc:dd:42:5f:
5b:d1:8d:bd:32:17:0a:d4:c1:f1:f5:bc:13:8a:d0:cf:48:cf:
25:fe:51:54:bc:02:cb:09:6f:33:15:c5:8e:f5:be:5d:f4:b7:
3b:80:7a:95:6a:04:6f:d9:b8:64:62:59:0e:28:fc:03:55:34:
4e:8b:2f:3e:46:d4:09:b1:8e:4a:a6:0d:d8:1a:67:4f:6f:1a:
a8:9c:a7:73:2e:71:11:45:2a:1f:e8:6a:74:79:76:ac:24:f2:
54:88:2b:8a:4c:c2:c5:74:33:2b:7f:21:2c:0c:fe:54:e0:56:
b3:2a:05:dc:45:70:5c:4c:a9:65:d9:9f:c0:3b:c4:b2:0d:49:
f7:ea:b0:5b:04:da:8e:8f:b2:2a:39:8a:49:85:f2:22:9c:cd:
f0:b1:30:ec:75:bc:c8:c2:be:b6:d7:98:11:c5:6b:ad:79:6c:
c1:57:d9:80:ae:fe:04:b8:bf:5b:a7:2c:a8:dd:10:f2:1f:27:
65:d6:0f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:50:56 2025 by rpki-client