Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0iRrUdf9RzFLMDR6Y1279ieejnQ.roa
File: 0iRrUdf9RzFLMDR6Y1279ieejnQ.roa (raw, json)
Hash identifier: cPV5hrOsKGdXSFM+fPtBnlblNLUYUo5RjlFsuBbUxKk=
Subject key identifier: D2:24:6B:51:D7:FD:47:31:4B:30:34:7A:63:5D:BB:F6:27:9E:8E:74
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019432E692C6108783EF5E229BB6925BBFAB
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0iRrUdf9RzFLMDR6Y1279ieejnQ.roa
Signing time: Sat 04 Jan 2025 19:59:19 +0000
ROA not before: Sat 04 Jan 2025 19:59:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214024
IP address blocks: 31.56.59.0/24 maxlen: 24
31.56.67.0/24 maxlen: 24
31.56.69.0/24 maxlen: 24
31.56.72.0/24 maxlen: 24
31.56.84.0/24 maxlen: 24
31.56.88.0/24 maxlen: 24
31.56.120.0/24 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.122.0/24 maxlen: 24
31.56.123.0/24 maxlen: 24
31.56.126.0/24 maxlen: 24
31.56.200.0/24 maxlen: 24
31.56.202.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.132.0/24 maxlen: 24
31.57.133.0/24 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.215.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.221.0/24 maxlen: 24
31.57.252.0/24 maxlen: 24
31.57.253.0/24 maxlen: 24
31.57.255.0/24 maxlen: 24
31.58.88.0/24 maxlen: 24
31.58.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Jan 2025 15:42:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:32:e6:92:c6:10:87:83:ef:5e:22:9b:b6:92:5b:bf:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 4 19:59:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2246b51d7fd47314b30347a635dbbf6279e8e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1a:0e:b0:48:3b:60:2a:ee:d2:24:5d:f6:1e:
60:c0:41:1b:e3:6a:64:92:b2:47:c2:9e:2a:63:08:
14:02:90:c4:55:d3:5f:1f:a4:e6:50:05:e3:c7:07:
1f:61:9c:35:b2:b6:5d:f3:18:3d:2f:88:81:d6:07:
0b:d8:de:3b:e2:b8:29:f5:fe:b0:a6:b6:bf:f9:f5:
5e:29:08:7f:de:e6:2a:27:a4:78:5f:29:da:2c:68:
22:33:93:d5:ea:50:e5:96:3b:8c:8b:1a:df:55:7e:
9d:5c:70:26:b0:8b:fe:b2:56:73:87:8f:07:03:ec:
c4:76:07:7d:54:f5:df:4b:a4:68:af:15:51:fd:17:
4e:42:c2:66:89:c6:e6:8e:20:db:5e:2d:0b:18:ce:
fc:8d:23:a0:e7:06:d2:9c:ed:de:7c:e7:39:98:31:
dc:e7:d5:6e:a2:3c:05:ad:9d:cf:97:36:8d:f1:99:
06:d7:fe:01:10:2a:33:b4:c0:ef:7f:52:1b:c4:2c:
4a:0a:3f:4c:1a:1f:9c:27:fa:21:12:d5:5b:a3:2c:
01:ac:cc:d8:f5:a4:24:f7:be:9a:57:8a:28:d4:ce:
0e:a9:14:a8:fe:63:8b:5d:f0:6b:43:4c:eb:43:af:
1b:d4:6f:95:aa:4a:56:82:15:03:67:f4:c3:27:1a:
d5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:24:6B:51:D7:FD:47:31:4B:30:34:7A:63:5D:BB:F6:27:9E:8E:74
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0iRrUdf9RzFLMDR6Y1279ieejnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.59.0/24
31.56.67.0/24
31.56.69.0/24
31.56.72.0/24
31.56.84.0/24
31.56.88.0/24
31.56.120.0/22
31.56.126.0/24
31.56.200.0/24
31.56.202.0/24
31.57.104.0/21
31.57.132.0/23
31.57.181.0/24
31.57.215.0/24
31.57.219.0/24
31.57.221.0/24
31.57.252.0/23
31.57.255.0/24
31.58.88.0/23
Signature Algorithm: sha256WithRSAEncryption
98:35:39:41:4e:94:3b:1b:da:40:5c:48:d4:c3:63:8f:1c:6d:
2a:02:c5:83:a6:34:ae:6f:73:ac:3b:7b:d0:35:67:7f:2b:de:
8b:06:b3:4e:b8:01:b2:97:d2:62:f8:73:3a:20:20:f7:e0:20:
16:ed:28:9b:bc:b3:4e:5a:c7:cc:db:bc:01:63:e5:2d:86:42:
dc:93:49:f4:c1:b5:f8:fc:78:fc:d9:91:8b:fb:11:5c:44:c7:
61:42:89:91:0e:75:9f:6a:a0:1e:08:e0:b2:6e:cf:d7:ae:60:
59:c4:d4:4f:32:1b:c6:7c:b5:a7:91:d7:fb:b6:5a:d3:d9:61:
93:47:60:55:67:f7:cd:f1:2a:e4:a1:c2:ea:9e:ff:75:03:18:
4e:91:f7:d6:a9:fc:9b:73:7a:6f:53:6e:bf:56:eb:a6:d0:b8:
8e:89:5c:e6:98:bd:91:8c:0d:1e:93:d5:d0:3b:58:54:cd:39:
64:d4:54:2d:f0:07:27:f3:e2:83:25:75:b0:06:fa:bd:3b:26:
ba:14:7e:f2:73:bc:7e:d4:3f:35:51:2b:fc:81:03:51:74:b2:
9d:1d:f5:87:e8:ac:58:2e:c0:81:8a:97:45:da:32:c6:35:97:
64:67:1b:21:22:ad:66:88:eb:54:1d:84:6d:69:67:cc:1d:35:
94:a7:ff:bd
-----BEGIN CERTIFICATE-----
MIIFajCCBFKgAwIBAgISAZQy5pLGEIeD714im7aSW7+rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMTA0MTk1OTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjI0NmI1MWQ3ZmQ0NzMxNGIzMDM0N2E2MzVkYmJmNjI3OWU4ZTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BoOsEg7YCru0iRd9h5gwEEb42pk
krJHwp4qYwgUApDEVdNfH6TmUAXjxwcfYZw1srZd8xg9L4iB1gcL2N474rgp9f6w
pra/+fVeKQh/3uYqJ6R4XynaLGgiM5PV6lDlljuMixrfVX6dXHAmsIv+slZzh48H
A+zEdgd9VPXfS6RorxVR/RdOQsJmicbmjiDbXi0LGM78jSOg5wbSnO3efOc5mDHc
59VuojwFrZ3PlzaN8ZkG1/4BECoztMDvf1IbxCxKCj9MGh+cJ/ohEtVboywBrMzY
9aQk976aV4oo1M4OqRSo/mOLXfBrQ0zrQ68b1G+VqkpWghUDZ/TDJxrVYQIDAQAB
o4ICdjCCAnIwHQYDVR0OBBYEFNIka1HX/UcxSzA0emNdu/Ynno50MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvMGlSclVkZjlSekZMTURSNlkxMjc5aWVlam5RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGLBggrBgEFBQcBBwEB/wR8MHoweAQCAAEwcgMEAB84OwME
AB84QwMEAB84RQMEAB84SAMEAB84VAMEAB84WAMEAh84eAMEAB84fgMEAB84yAME
AB84ygMEAx85aAMEAR85hAMEAB85tQMEAB851wMEAB852wMEAB853QMEAR85/AME
AB85/wMEAR86WDANBgkqhkiG9w0BAQsFAAOCAQEAmDU5QU6UOxvaQFxI1MNjjxxt
KgLFg6Y0rm9zrDt70DVnfyveiwazTrgBspfSYvhzOiAg9+AgFu0om7yzTlrHzNu8
AWPlLYZC3JNJ9MG1+Px4/NmRi/sRXETHYUKJkQ51n2qgHgjgsm7P165gWcTUTzIb
xny1p5HX+7Za09lhk0dgVWf3zfEq5KHC6p7/dQMYTpH31qn8m3N6b1Nuv1brptC4
jolc5pi9kYwNHpPV0DtYVM05ZNRULfAHJ/PigyV1sAb6vTsmuhR+8nO8ftQ/NVEr
/IEDUXSynR31h+isWC7AgYqXRdoyxjWXZGcbISKtZojrVB2EbWlnzB01lKf/vQ==
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:11 2025 by rpki-client