Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0xV0r_KZQpUOKq5Wmr5iirIsgnc.roa
File: 0xV0r_KZQpUOKq5Wmr5iirIsgnc.roa (raw, json)
Hash identifier: 8z2i/1EhS1VkgLyhwBlO3MtLj3C7x0c5Nj52uih+nq0=
Subject key identifier: D3:15:74:AF:F2:99:42:95:0E:2A:AE:56:9A:BE:62:8A:B2:2C:82:77
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019354E62959C8FD4A1C74919DE3598A192A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0xV0r_KZQpUOKq5Wmr5iirIsgnc.roa
Signing time: Fri 22 Nov 2024 17:23:10 +0000
ROA not before: Fri 22 Nov 2024 17:23:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2914
IP address blocks: 31.56.154.0/24 maxlen: 24
31.56.158.0/24 maxlen: 24
31.56.159.0/24 maxlen: 24
31.56.168.0/24 maxlen: 24
31.56.169.0/24 maxlen: 24
31.56.170.0/24 maxlen: 24
31.56.171.0/24 maxlen: 24
31.56.174.0/24 maxlen: 24
31.56.175.0/24 maxlen: 24
31.57.16.0/22 maxlen: 24
31.57.20.0/22 maxlen: 24
31.57.24.0/22 maxlen: 24
31.57.28.0/22 maxlen: 24
31.57.48.0/22 maxlen: 24
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.92.0/22 maxlen: 24
31.57.96.0/22 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.58.196.0/22 maxlen: 24
31.58.204.0/22 maxlen: 24
31.58.208.0/24 maxlen: 24
31.58.209.0/24 maxlen: 24
31.58.210.0/23 maxlen: 24
31.58.212.0/22 maxlen: 24
31.58.220.0/22 maxlen: 24
31.58.224.0/22 maxlen: 24
217.60.0.0/18 maxlen: 24
217.60.245.0/24 maxlen: 24
217.60.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 23 Nov 2024 08:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:e6:29:59:c8:fd:4a:1c:74:91:9d:e3:59:8a:19:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 22 17:23:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d31574aff29942950e2aae569abe628ab22c8277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cc:6f:dd:17:94:ed:bc:2c:50:7c:ea:bc:40:
f3:70:42:eb:25:48:de:eb:9e:ea:90:71:c8:f2:04:
aa:ef:e8:2a:d6:8e:e0:7a:d6:6c:b7:0a:c7:e2:17:
21:e4:b8:33:b8:14:24:60:c4:86:c3:5f:73:af:ed:
18:ad:bb:2c:d8:71:23:d7:3a:b9:63:84:59:7f:99:
64:74:a8:cd:5c:4c:dd:56:b2:22:54:6b:b9:fc:a0:
dd:3e:31:23:d1:37:90:1c:92:e8:66:1d:22:09:6d:
86:31:6b:b0:f2:31:bd:a9:e8:6d:ab:32:e9:b1:33:
03:ff:fa:df:ec:41:8b:a3:b8:35:7f:ff:bb:d1:54:
d2:80:44:36:48:30:d8:b5:67:6e:cb:45:df:52:ca:
89:89:7d:f1:44:dd:2b:dc:f3:f6:ef:d7:42:fa:2e:
c7:a9:24:99:90:c4:de:1d:d8:95:42:67:a6:07:01:
7c:08:93:dd:fb:fb:41:cf:c4:31:ea:8b:ba:6d:d7:
d3:5b:f8:df:07:61:af:9b:79:7d:bd:04:e5:e9:58:
84:6d:de:a3:b2:6b:b6:15:f5:25:ae:89:39:76:0b:
b0:b3:71:82:29:e2:44:59:1d:b2:b9:a9:8e:67:05:
76:56:c8:0e:fd:14:00:1b:30:e3:29:fb:ac:9b:c7:
9a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:15:74:AF:F2:99:42:95:0E:2A:AE:56:9A:BE:62:8A:B2:2C:82:77
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0xV0r_KZQpUOKq5Wmr5iirIsgnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.154.0/24
31.56.158.0/23
31.56.168.0/22
31.56.174.0/23
31.57.16.0/20
31.57.48.0/20
31.57.92.0-31.57.99.255
31.57.120.0/21
31.58.196.0/22
31.58.204.0-31.58.215.255
31.58.220.0-31.58.227.255
217.60.0.0/18
217.60.245.0/24
217.60.248.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:d2:71:c0:9a:49:30:31:b7:6d:0d:3e:f7:d5:09:58:7e:57:
c9:f5:90:f2:c8:d2:53:53:99:4e:48:61:eb:db:ac:58:3b:4c:
c5:2f:05:57:27:67:1a:ce:63:30:08:ac:4a:a4:08:65:f1:50:
33:2f:cd:bd:d5:d1:06:cb:2b:95:f9:c9:54:df:d2:28:5b:f7:
6f:3f:57:43:7c:28:5b:4f:9e:a8:3a:03:c3:05:7a:38:bd:87:
46:fa:83:c1:31:64:43:8d:5e:0c:7f:73:88:36:19:6a:15:ed:
b2:6c:79:ec:fe:b1:39:96:3d:06:07:64:7e:21:11:35:67:8e:
68:80:95:aa:b4:8d:81:2b:6e:7a:68:7d:66:70:fa:1c:af:d1:
3d:78:6d:c8:26:15:29:ca:99:ea:19:17:7c:9c:4a:b4:17:7b:
41:5e:97:04:4c:14:69:93:e7:86:b2:5f:13:45:bc:fe:09:e5:
21:bb:31:ee:16:5c:3d:79:b5:9f:e5:cf:94:20:8d:52:8c:67:
60:c2:f2:c8:3e:50:e6:3f:f8:98:a5:c2:5a:f2:a8:3f:57:45:
13:9d:bf:2c:6e:82:9c:df:03:b3:27:fd:2a:5f:85:bf:f4:b8:
48:b9:cc:3e:5c:03:d6:59:cd:41:92:09:4f:29:03:8e:5e:f0:
e2:85:e7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:16 2025 by rpki-client