Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0QMDrAUjl5WHGKHIwiLGWrSLKRg.roa
File: 0QMDrAUjl5WHGKHIwiLGWrSLKRg.roa (raw, json)
Hash identifier: GEcC65I1XUBBvfuQPjLsAZ6bOhY3tNshtpyl6eJFqAE=
Subject key identifier: D1:03:03:AC:05:23:97:95:87:18:A1:C8:C2:22:C6:5A:B4:8B:29:18
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194038869F1B0E7F47D0C55ED7AFC6076D4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0QMDrAUjl5WHGKHIwiLGWrSLKRg.roa
Signing time: Thu 26 Dec 2024 15:14:19 +0000
ROA not before: Thu 26 Dec 2024 15:14:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2914
IP address blocks: 31.56.154.0/24 maxlen: 24
31.56.158.0/24 maxlen: 24
31.56.159.0/24 maxlen: 24
31.56.168.0/24 maxlen: 24
31.56.169.0/24 maxlen: 24
31.56.170.0/24 maxlen: 24
31.56.171.0/24 maxlen: 24
31.56.174.0/24 maxlen: 24
31.56.175.0/24 maxlen: 24
31.57.16.0/22 maxlen: 24
31.57.20.0/22 maxlen: 24
31.57.24.0/22 maxlen: 24
31.57.28.0/22 maxlen: 24
31.57.48.0/22 maxlen: 24
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.92.0/22 maxlen: 24
31.57.96.0/22 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.196.0/22 maxlen: 24
31.58.204.0/22 maxlen: 24
31.58.212.0/22 maxlen: 24
31.58.220.0/22 maxlen: 24
31.58.224.0/22 maxlen: 24
31.59.120.0/22 maxlen: 24
217.60.0.0/18 maxlen: 24
217.60.1.0/24 maxlen: 24
217.60.5.0/24 maxlen: 24
217.60.11.0/24 maxlen: 24
217.60.13.0/24 maxlen: 24
217.60.24.0/24 maxlen: 24
217.60.25.0/24 maxlen: 24
217.60.26.0/24 maxlen: 24
217.60.27.0/24 maxlen: 24
217.60.236.0/24 maxlen: 24
217.60.248.0/24 maxlen: 24
217.60.253.0/24 maxlen: 24
217.60.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 28 Dec 2024 04:57:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:03:88:69:f1:b0:e7:f4:7d:0c:55:ed:7a:fc:60:76:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 26 15:14:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d10303ac052397958718a1c8c222c65ab48b2918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8f:56:d0:d0:ec:d8:04:d2:0e:ad:d9:51:02:
dc:e9:5d:6d:61:67:cd:aa:60:af:9b:a3:0e:30:cc:
1c:63:f0:be:7b:08:7e:d5:34:a8:45:e7:37:7b:35:
3d:84:4a:cc:67:9e:e4:7c:40:8d:c0:30:16:b5:06:
6b:51:ac:87:c1:8c:d3:e3:03:84:cb:57:c7:d0:f4:
ff:1c:25:e7:b9:cd:25:d0:95:ee:66:c3:7a:ca:05:
ca:14:3a:26:21:4b:94:68:13:13:67:00:d9:6f:a8:
5d:e6:fe:da:e5:16:20:bb:1a:78:11:7e:a7:01:b0:
42:24:fa:99:00:a7:be:5e:98:cc:f0:7d:ea:83:a3:
f6:70:7f:a6:12:c9:7e:be:ef:04:af:de:c2:57:3c:
98:11:07:1f:29:31:56:be:a4:09:50:86:35:d9:35:
ab:b6:0e:30:cd:5d:d0:80:ae:18:30:cf:7c:0a:89:
5c:a8:6c:c3:cf:ef:1f:07:88:88:9f:a6:ac:2f:5d:
a6:bb:20:30:bd:a7:4f:64:b3:4d:ee:b4:17:93:69:
dc:c5:0c:30:f6:a9:e8:30:d3:af:09:68:0a:b9:98:
ea:58:a1:9c:b2:23:0a:30:a9:d2:57:d3:90:07:e3:
2f:02:c5:62:99:8d:e2:0e:5e:bc:c4:a8:32:dc:b6:
7b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:03:03:AC:05:23:97:95:87:18:A1:C8:C2:22:C6:5A:B4:8B:29:18
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0QMDrAUjl5WHGKHIwiLGWrSLKRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.154.0/24
31.56.158.0/23
31.56.168.0/22
31.56.174.0/23
31.57.16.0/20
31.57.48.0/20
31.57.92.0-31.57.99.255
31.57.120.0/21
31.58.34.0/23
31.58.196.0/22
31.58.204.0/22
31.58.212.0/22
31.58.220.0-31.58.227.255
31.59.120.0/22
217.60.0.0/18
217.60.236.0/24
217.60.248.0/24
217.60.253.0-217.60.254.255
Signature Algorithm: sha256WithRSAEncryption
9e:3d:dc:2e:81:15:97:7c:74:4b:e2:c4:20:e7:12:ea:c7:a0:
75:02:be:bf:ef:6a:45:19:3f:21:68:07:be:d5:22:12:57:b5:
f8:62:40:ce:6f:43:87:b5:11:a7:9b:73:9c:25:82:e1:eb:1a:
c4:44:c9:62:05:59:1c:c6:23:98:e1:87:67:f2:b9:72:4d:07:
7b:bf:e5:c5:75:9b:88:24:31:c7:90:bc:61:fe:b4:93:31:7b:
db:aa:94:71:fd:d9:0c:cc:86:12:52:de:ba:19:3f:4f:db:c8:
ca:29:0b:16:2c:1d:67:14:71:cc:4b:0f:5e:4c:7d:f1:f7:4e:
68:28:97:a3:63:91:fc:1d:41:ce:e5:75:5d:89:cd:0a:7d:ae:
af:6f:f7:07:d8:d8:d6:84:ce:6d:ff:02:0d:8f:31:4d:d4:be:
6a:06:dd:18:ca:bb:60:07:04:6e:79:bc:de:41:39:ff:73:af:
ee:6f:25:81:6e:0b:ed:64:89:95:8a:24:fd:7c:af:aa:0a:88:
fc:91:91:30:0d:21:e9:f1:18:7c:fe:23:02:00:51:cf:fe:98:
cf:65:81:be:4d:83:fc:e1:41:35:c2:11:60:b3:bb:6f:32:51:
2d:72:43:c0:a0:fe:bf:f5:9e:68:fe:31:08:be:84:51:43:1e:
fd:8d:35:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:48:52 2025 by rpki-client