Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1M8EXXvhJsU4G-CWhDbEY8OAj0Q.roa
File: 1M8EXXvhJsU4G-CWhDbEY8OAj0Q.roa (raw, json)
Hash identifier: Tec8vmppeZtwNY2i4KinVPtti2lVy+NtI/n00l3v2uw=
Subject key identifier: D4:CF:04:5D:7B:E1:26:C5:38:1B:E0:96:84:36:C4:63:C3:80:8F:44
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194541B212712973AC7CAC717EF1E2AB96A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1M8EXXvhJsU4G-CWhDbEY8OAj0Q.roa
Signing time: Sat 11 Jan 2025 06:44:11 +0000
ROA not before: Sat 11 Jan 2025 06:44:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.44.0/24 maxlen: 24
31.56.49.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.74.0/24 maxlen: 24
31.56.75.0/24 maxlen: 24
31.56.88.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.112.0/24 maxlen: 24
31.56.113.0/24 maxlen: 24
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.126.0/24 maxlen: 24
31.56.157.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.133.0/24 maxlen: 24
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.191.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.142.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.163.0/24 maxlen: 24
31.58.230.0/23 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.42.0/24 maxlen: 24
31.59.43.0/24 maxlen: 24
31.59.56.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.97.0/24 maxlen: 24
31.59.108.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.112.0/24 maxlen: 24
31.59.113.0/24 maxlen: 24
31.59.130.0/24 maxlen: 24
31.59.184.0/22 maxlen: 24
31.59.228.0/24 maxlen: 24
31.59.229.0/24 maxlen: 24
31.59.231.0/24 maxlen: 24
31.59.244.0/24 maxlen: 24
31.59.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 11 Jan 2025 20:14:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:54:1b:21:27:12:97:3a:c7:ca:c7:17:ef:1e:2a:b9:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 11 06:44:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4cf045d7be126c5381be0968436c463c3808f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:64:3f:94:01:fa:2e:47:3b:bf:81:91:f7:cd:
d1:be:fc:cc:d4:f5:86:22:3c:da:b7:f9:3a:65:46:
1b:8a:03:27:84:f7:7a:98:02:ea:24:0c:eb:0b:be:
f9:c9:9e:61:38:8c:92:04:9e:37:8b:1c:48:7b:7f:
02:ca:fb:3f:28:07:fb:38:c7:c0:88:fe:df:7d:6d:
51:16:09:3b:21:b8:fc:23:c1:53:2c:ac:67:1d:0a:
cb:20:c5:23:0a:33:35:39:9f:ec:c2:13:13:cd:6a:
c2:49:ca:e9:fb:3f:31:fb:2d:ab:66:f8:35:a5:67:
74:78:f0:af:47:d2:50:34:3d:a6:6a:4a:9b:ed:f0:
01:10:c7:61:e9:7d:07:43:d9:8d:8b:9c:68:5e:fb:
e3:09:a8:00:02:bf:5c:e1:67:3b:72:25:73:8d:db:
2f:da:e1:99:75:d8:6d:9e:0e:e4:8e:f1:c7:96:22:
b8:41:94:17:03:8f:6d:63:b8:df:65:0d:5d:51:89:
cf:c9:ba:1d:21:46:e0:6e:b1:18:f4:74:c9:0b:11:
58:40:03:e5:4c:b2:c1:78:e0:6c:ac:bd:58:75:1e:
6b:48:4a:0a:e7:88:c6:ed:2b:c9:c7:81:21:db:37:
63:c2:d8:d3:25:06:e8:52:3a:38:de:6d:11:ab:58:
a8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CF:04:5D:7B:E1:26:C5:38:1B:E0:96:84:36:C4:63:C3:80:8F:44
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1M8EXXvhJsU4G-CWhDbEY8OAj0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0-31.56.44.255
31.56.49.0/24
31.56.57.0/24
31.56.74.0/23
31.56.88.0/23
31.56.104.0-31.56.115.255
31.56.118.0-31.56.123.255
31.56.126.0/24
31.56.157.0/24
31.56.200.0/22
31.57.104.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.176.0/21
31.57.191.0-31.57.195.255
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.34.0/23
31.58.142.0/24
31.58.152.0/22
31.58.163.0/24
31.58.230.0/23
31.59.41.0-31.59.43.255
31.59.56.0/23
31.59.96.0/22
31.59.108.0/24
31.59.112.0/22
31.59.130.0/24
31.59.184.0/22
31.59.228.0/23
31.59.231.0/24
31.59.244.0/23
Signature Algorithm: sha256WithRSAEncryption
40:31:2b:bb:8f:b2:b1:84:90:a1:cd:68:a9:29:c1:c4:63:7f:
f0:b9:6f:3d:6b:c2:97:91:34:45:14:08:a0:7c:5a:a2:28:6d:
40:e0:34:d0:86:b0:0d:12:57:ce:35:2e:c7:9c:85:76:e0:9d:
c8:54:d2:0d:b7:af:4a:3b:7f:87:a2:91:db:5e:39:f4:52:29:
57:bc:c0:db:6a:e7:fd:d5:64:7a:76:d8:f5:eb:89:ff:05:89:
32:43:1c:f3:ba:cf:96:dd:4b:20:eb:05:b9:6f:9f:c3:45:db:
35:92:7f:94:24:ab:4a:8d:19:96:bb:ca:d1:06:19:21:6b:b2:
b2:ed:a8:3c:c1:18:47:03:1a:d1:1e:fb:4c:6c:a8:66:fd:ab:
65:18:11:b7:fa:43:e5:ad:5c:83:0d:aa:47:21:bb:ee:b3:f7:
65:ae:8c:77:81:64:99:e7:53:db:90:0f:65:87:b5:a1:12:b8:
7a:5a:b5:e8:c8:74:0c:7a:b1:34:a8:89:f0:3b:88:f4:44:0d:
ca:a1:46:6d:43:0b:7c:d0:0a:84:bb:2f:12:b2:03:49:1a:5c:
29:60:76:01:cc:dd:a0:38:bb:42:81:d1:d3:4f:eb:6e:ec:ef:
b5:c7:e2:c4:d2:d2:e3:b5:3f:46:06:2a:da:a3:14:df:f5:ba:
21:ea:d1:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:48:44 2025 by rpki-client