Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1f7UpYYSK57F_6jnFCYzw2TVhto.roa
File: 1f7UpYYSK57F_6jnFCYzw2TVhto.roa (raw, json)
Hash identifier: aubjXOeRVG6VPgP+Ulf8eh57ZAk6Ok5bXW0Q8ewrRjw=
Subject key identifier: D5:FE:D4:A5:86:12:2B:9E:C5:FF:A8:E7:14:26:33:C3:64:D5:86:DA
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193B5D78E8353091EFB2A0EDB9ADD36D001
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1f7UpYYSK57F_6jnFCYzw2TVhto.roa
Signing time: Wed 11 Dec 2024 13:10:22 +0000
ROA not before: Wed 11 Dec 2024 13:10:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 31.56.112.0/21 maxlen: 24
31.57.11.0/24 maxlen: 24
31.57.131.0/24 maxlen: 24
31.57.150.0/24 maxlen: 24
31.57.176.0/24 maxlen: 24
31.57.178.0/24 maxlen: 24
31.57.179.0/24 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.182.0/24 maxlen: 24
31.57.183.0/24 maxlen: 24
31.57.194.0/24 maxlen: 24
31.57.224.0/22 maxlen: 23
31.57.252.0/22 maxlen: 23
31.58.59.0/24 maxlen: 24
31.58.142.0/24 maxlen: 24
31.58.146.0/24 maxlen: 24
31.58.176.0/22 maxlen: 22
31.58.200.0/22 maxlen: 22
31.58.216.0/22 maxlen: 22
31.58.240.0/22 maxlen: 22
31.58.252.0/22 maxlen: 22
31.59.14.0/24 maxlen: 24
31.59.30.0/24 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.56.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.58.0/24 maxlen: 24
31.59.64.0/22 maxlen: 22
31.59.80.0/22 maxlen: 22
31.59.97.0/24 maxlen: 24
31.59.124.0/22 maxlen: 22
31.59.176.0/22 maxlen: 22
31.59.180.0/22 maxlen: 22
31.59.188.0/22 maxlen: 22
31.59.192.0/22 maxlen: 22
31.59.216.0/22 maxlen: 24
31.59.228.0/24 maxlen: 24
31.59.229.0/24 maxlen: 24
31.59.231.0/24 maxlen: 24
31.59.244.0/24 maxlen: 24
31.59.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Dec 2024 07:09:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b5:d7:8e:83:53:09:1e:fb:2a:0e:db:9a:dd:36:d0:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 11 13:10:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5fed4a586122b9ec5ffa8e7142633c364d586da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:10:bb:20:77:ad:98:82:e1:44:e4:12:99:8b:
5c:dc:f9:7c:8d:e8:00:98:5d:68:fb:7a:16:97:c6:
e7:4b:f6:00:f5:e8:f8:af:26:90:51:17:d6:7a:2e:
6c:ae:c5:5a:12:fb:78:78:df:d3:f5:ee:99:e4:ad:
a4:b2:95:64:ff:49:16:4a:3d:66:f9:6e:c5:56:a5:
f6:99:26:d7:a3:23:7f:7d:75:c6:8d:21:af:19:07:
b6:1b:9a:2a:43:17:3d:23:01:b9:b1:4b:41:d6:86:
ff:49:3e:e5:6d:59:dc:12:d8:e4:b9:f5:74:5c:2b:
88:e8:59:0a:e8:1e:e0:7f:95:00:c3:2f:33:1c:11:
cb:63:d5:71:7b:2e:39:87:89:23:c3:41:5f:fc:80:
a0:87:5d:57:c0:0b:6f:b9:79:14:6a:75:ce:c1:8f:
c1:ca:47:de:c2:ed:20:08:7f:17:d2:77:e3:60:1c:
89:1c:2b:4a:83:b2:2b:d5:0e:eb:bf:49:5b:9f:da:
a1:6c:c3:cf:7a:22:39:8b:63:ee:80:c9:c0:be:84:
eb:51:27:b3:c9:0f:c2:8f:a0:70:83:1c:f4:59:ba:
be:91:c5:f5:78:3d:cf:44:35:93:6f:aa:68:70:f2:
72:8b:b5:f3:2c:e9:bf:db:2a:65:cd:fc:b2:74:4b:
96:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FE:D4:A5:86:12:2B:9E:C5:FF:A8:E7:14:26:33:C3:64:D5:86:DA
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1f7UpYYSK57F_6jnFCYzw2TVhto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.112.0/21
31.57.11.0/24
31.57.131.0/24
31.57.150.0/24
31.57.176.0/24
31.57.178.0/23
31.57.181.0-31.57.183.255
31.57.194.0/24
31.57.224.0/22
31.57.252.0/22
31.58.59.0/24
31.58.142.0/24
31.58.146.0/24
31.58.176.0/22
31.58.200.0/22
31.58.216.0/22
31.58.240.0/22
31.58.252.0/22
31.59.14.0/24
31.59.30.0/24
31.59.41.0/24
31.59.56.0-31.59.58.255
31.59.64.0/22
31.59.80.0/22
31.59.97.0/24
31.59.124.0/22
31.59.176.0/21
31.59.188.0-31.59.195.255
31.59.216.0/22
31.59.228.0/23
31.59.231.0/24
31.59.244.0/23
Signature Algorithm: sha256WithRSAEncryption
40:da:8a:8c:6b:46:f4:fe:ac:ff:a1:95:cd:89:36:90:b6:1f:
cf:58:f1:1e:15:78:8e:67:98:cf:a8:7e:b1:52:b2:af:a8:95:
5c:66:12:fc:f3:d3:cd:38:87:09:ca:6f:c1:eb:bf:9f:12:ec:
7e:9d:53:df:b5:da:65:de:19:ed:73:c7:df:a8:2e:a1:81:26:
35:4f:3b:0b:fd:1e:9b:7d:e2:1a:f3:9c:c8:e6:72:bb:24:3f:
be:ec:1e:8d:97:f4:40:47:70:c9:31:a0:bb:aa:c6:11:30:89:
f1:9a:74:da:ce:13:e7:f9:71:15:bf:61:76:8f:11:a6:ce:ad:
b3:7c:4f:fe:77:0d:e1:1a:57:98:41:0c:5f:63:1b:8b:57:ce:
ec:5c:88:7e:0c:f0:94:2f:a8:31:61:c5:d4:b5:eb:e6:de:22:
82:39:12:0d:e5:db:60:32:d2:54:f0:24:53:c0:a1:c1:46:16:
df:ca:c4:62:48:e2:dd:1e:02:44:91:9d:e6:84:87:0e:0a:0d:
0a:c0:40:9d:c9:f8:e3:2a:e1:78:5f:3f:f8:a5:66:99:0d:95:
8b:93:d4:7a:07:da:d6:c3:1a:93:1d:53:37:1b:87:6c:1e:0d:
da:26:46:b2:bf:a5:c1:fa:fb:de:9e:14:8c:ce:42:55:ba:48:
f9:8a:05:91
-----BEGIN CERTIFICATE-----
MIIF1DCCBLygAwIBAgISAZO1146DUwke+yoO25rdNtABMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMjExMTMxMDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNWZlZDRhNTg2MTIyYjllYzVmZmE4ZTcxNDI2MzNjMzY0ZDU4NmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBC7IHetmILhROQSmYtc3Pl8jegA
mF1o+3oWl8bnS/YA9ej4ryaQURfWei5srsVaEvt4eN/T9e6Z5K2kspVk/0kWSj1m
+W7FVqX2mSbXoyN/fXXGjSGvGQe2G5oqQxc9IwG5sUtB1ob/ST7lbVncEtjkufV0
XCuI6FkK6B7gf5UAwy8zHBHLY9Vxey45h4kjw0Ff/ICgh11XwAtvuXkUanXOwY/B
ykfewu0gCH8X0nfjYByJHCtKg7Ir1Q7rv0lbn9qhbMPPeiI5i2PugMnAvoTrUSez
yQ/Cj6Bwgxz0Wbq+kcX1eD3PRDWTb6pocPJyi7XzLOm/2yplzfyydEuWFQIDAQAB
o4IC4DCCAtwwHQYDVR0OBBYEFNX+1KWGEiuexf+o5xQmM8Nk1YbaMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvMWY3VXBZWVNLNTdGXzZqbkZDWXp3MlRWaHRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIH1BggrBgEFBQcBBwEB/wSB5TCB4jCB3wQCAAEwgdgDBAMf
OHADBAAfOQsDBAAfOYMDBAAfOZYDBAAfObADBAEfObIwDAMEAB85tQMEAx85sAME
AB85wgMEAh854AMEAh85/AMEAB86OwMEAB86jgMEAB86kgMEAh86sAMEAh86yAME
Ah862AMEAh868AMEAh86/AMEAB87DgMEAB87HgMEAB87KTAMAwQDHzs4AwQAHzs6
AwQCHztAAwQCHztQAwQAHzthAwQCHzt8AwQDHzuwMAwDBAIfO7wDBAIfO8ADBAIf
O9gDBAEfO+QDBAAfO+cDBAEfO/QwDQYJKoZIhvcNAQELBQADggEBAEDaioxrRvT+
rP+hlc2JNpC2H89Y8R4VeI5nmM+ofrFSsq+olVxmEvzz0804hwnKb8Hrv58S7H6d
U9+12mXeGe1zx9+oLqGBJjVPOwv9Hpt94hrznMjmcrskP77sHo2X9EBHcMkxoLuq
xhEwifGadNrOE+f5cRW/YXaPEabOrbN8T/53DeEaV5hBDF9jG4tXzuxciH4M8JQv
qDFhxdS16+beIoI5Eg3l22Ay0lTwJFPAocFGFt/KxGJI4t0eAkSRneaEhw4KDQrA
QJ3J+OMq4XhfP/ilZpkNlYuT1HoH2tbDGpMdUzcbh2weDdomRrK/pcH6+96eFIzO
QlW6SPmKBZE=
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:48:40 2025 by rpki-client