Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WxUZ5SSPpLP2QgBhp5E-rG2ADFk.roa
File: WxUZ5SSPpLP2QgBhp5E-rG2ADFk.roa (raw, json)
Hash identifier: 1Pkoz2pKCWb21sYkGt9lWoqWwoyXbE27kBhIjRXjHvI=
Subject key identifier: 5B:15:19:E5:24:8F:A4:B3:F6:42:00:61:A7:91:3E:AC:6D:80:0C:59
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193A604A609E16F8C6DF1871D58F9DD1272
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WxUZ5SSPpLP2QgBhp5E-rG2ADFk.roa
Signing time: Sun 08 Dec 2024 11:25:42 +0000
ROA not before: Sun 08 Dec 2024 11:25:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214746
IP address blocks: 31.59.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 08 Dec 2024 11:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a6:04:a6:09:e1:6f:8c:6d:f1:87:1d:58:f9:dd:12:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 8 11:25:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b1519e5248fa4b3f6420061a7913eac6d800c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c8:a2:73:64:18:ba:98:36:15:ea:4e:d1:7f:
26:17:2b:65:0f:b2:e4:1e:2b:92:e6:f4:5a:17:de:
5a:87:72:65:49:6f:23:f5:94:de:36:71:b3:c3:88:
ca:23:6b:0a:73:77:44:43:4e:d6:5e:31:b7:2a:4b:
71:d1:7b:8d:a7:c2:b7:e8:a9:e1:8e:96:c4:77:3c:
25:a7:b6:8e:7c:05:d0:42:25:97:14:5d:08:9d:ba:
bc:78:57:00:e6:c0:e9:e8:31:82:23:dd:0a:77:14:
39:5b:83:99:c8:ee:32:a5:d5:ff:e5:20:e2:28:82:
37:e0:3d:c4:e5:da:89:af:b6:bf:17:a6:40:52:91:
3d:ba:14:aa:3f:d1:12:ce:fb:eb:19:2e:df:a9:f0:
68:e8:15:33:ad:64:5b:c8:4d:90:14:67:d6:e4:89:
51:d1:54:cb:42:54:cc:9c:40:27:19:19:6b:89:ba:
10:e1:29:f7:6e:35:07:a9:db:b5:8f:88:60:6a:8d:
ad:35:14:ec:c2:a9:ff:02:49:c9:b0:c4:93:1f:02:
a4:a5:53:30:9a:ac:99:0d:34:89:8b:df:f0:54:1c:
8e:13:80:8b:e6:da:b1:cf:8d:8e:85:62:74:2b:06:
79:92:10:ef:a3:e2:b7:81:96:98:5c:d1:cc:dd:cb:
4c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:15:19:E5:24:8F:A4:B3:F6:42:00:61:A7:91:3E:AC:6D:80:0C:59
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WxUZ5SSPpLP2QgBhp5E-rG2ADFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.113.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:a2:a3:b2:2f:f2:88:68:b4:78:b8:a6:c4:63:a1:36:5c:12:
ff:d1:01:56:6a:89:4b:b6:9e:37:52:e7:1e:8f:16:75:9b:1a:
f5:dc:58:4c:a3:94:e4:fe:2b:c3:7b:32:d7:7d:7c:9b:bf:54:
b0:00:f8:81:2a:39:b6:d9:ef:4a:c1:f3:59:c4:e1:d4:d4:70:
f1:19:b0:7b:5f:f9:24:f5:e3:22:d1:cf:a4:32:6f:fb:e5:8e:
8f:74:9d:83:8e:ba:07:8a:7e:fb:32:85:49:1d:90:89:4f:61:
0d:58:ba:5f:3d:6b:5f:8b:49:ef:41:fe:aa:49:31:b8:07:48:
4f:a6:c0:01:52:f0:cd:10:64:d4:d2:30:66:7d:b9:eb:bc:a8:
41:2e:ba:2e:54:b6:1b:9e:fd:27:fa:fe:10:b0:20:33:82:07:
ca:86:0f:7c:e2:07:25:d7:60:b7:db:f6:37:1a:40:c4:9b:57:
75:13:69:d1:f8:1d:ac:67:85:eb:32:e2:10:db:b0:dc:63:ac:
72:10:48:08:6f:22:8d:99:24:5b:4c:24:ea:b0:16:30:f0:6c:
ef:52:bd:55:2d:03:49:b3:e0:f4:04:d0:72:89:15:cd:8c:55:
f6:6b:27:51:e8:5e:3a:99:6b:8c:f4:ec:c0:5f:2c:72:3d:67:
b5:11:19:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 14:05:48 2025 by rpki-client