Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5bTMJchhVTd8UhZN4Xt7jAN6OsQ.roa
File: 5bTMJchhVTd8UhZN4Xt7jAN6OsQ.roa (raw, json)
Hash identifier: vVQXEWb6TIbk6HDMT4/NmrHAnDJYFpmci/U1M9Kqryo=
Subject key identifier: E5:B4:CC:25:C8:61:55:37:7C:52:16:4D:E1:7B:7B:8C:03:7A:3A:C4
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193BF18F001F6312C323FC7D70D8223CCFB
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5bTMJchhVTd8UhZN4Xt7jAN6OsQ.roa
Signing time: Fri 13 Dec 2024 08:18:22 +0000
ROA not before: Fri 13 Dec 2024 08:18:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.50.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.62.0/24 maxlen: 24
31.56.85.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.156.0/24 maxlen: 24
31.57.65.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.146.0/23 maxlen: 24
31.57.166.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.204.0/24 maxlen: 24
31.57.207.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.58.130.0/24 maxlen: 24
31.58.131.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.167.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Dec 2024 16:13:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bf:18:f0:01:f6:31:2c:32:3f:c7:d7:0d:82:23:cc:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 13 08:18:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5b4cc25c86155377c52164de17b7b8c037a3ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c1:32:92:c0:26:46:48:5a:e5:99:6b:a5:69:
56:76:58:7b:ae:ce:60:d9:63:80:c6:e5:4a:ef:0c:
1b:b0:2d:d4:14:be:05:f0:fe:39:72:8c:a1:2f:b8:
c1:94:8c:55:de:e2:12:58:2e:57:dc:14:ed:46:9b:
fe:33:56:8b:3e:8c:61:70:83:0f:76:4c:f1:9c:5f:
0c:e3:29:bf:24:87:26:49:8e:b1:8d:7d:48:4f:67:
da:20:80:4d:b0:53:02:b2:01:59:4e:1c:65:c8:3e:
18:46:7f:b7:c9:4d:f8:af:45:6a:67:1f:bc:41:d0:
f9:27:b5:94:78:35:e4:86:4e:a3:ad:7c:4f:a3:57:
fa:4a:70:27:31:b4:67:62:a9:b6:87:67:05:f6:1d:
07:7d:c1:e4:ce:7b:36:2e:43:09:b8:15:8b:2b:25:
81:b6:fa:19:98:56:c7:2c:b2:22:e5:c9:c5:15:57:
f0:17:83:b1:57:f1:0c:25:db:61:12:1c:95:12:d9:
56:89:6a:9b:ba:2f:37:71:e0:71:35:bb:8e:30:2a:
4d:d5:ef:9a:f0:db:2b:96:21:c0:1f:a2:b5:70:32:
7f:0a:08:c4:86:87:6a:b7:5a:bb:36:67:3e:6f:ef:
23:fd:2c:59:f1:28:bd:72:09:c6:eb:43:20:29:18:
79:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B4:CC:25:C8:61:55:37:7C:52:16:4D:E1:7B:7B:8C:03:7A:3A:C4
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5bTMJchhVTd8UhZN4Xt7jAN6OsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.50.0/23
31.56.57.0/24
31.56.62.0/24
31.56.85.0/24
31.56.89.0/24
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.156.0/24
31.57.65.0/24
31.57.132.0/23
31.57.146.0/23
31.57.166.0/24
31.57.176.0/21
31.57.188.0/24
31.57.192.0/22
31.57.200.0/23
31.57.204.0/24
31.57.207.0/24
31.57.232.0/22
31.58.130.0/23
31.58.152.0/22
31.58.167.0/24
31.59.96.0/22
31.59.112.0/22
31.59.184.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:28:49:75:0b:e5:09:60:3a:bc:c7:0d:a7:58:95:e9:95:ee:
57:47:28:06:c5:c6:f4:a5:8b:13:25:f0:f6:5e:29:e2:36:97:
de:d7:a1:49:c6:da:17:8d:23:9a:1b:c3:50:8c:57:50:e1:67:
2c:d0:68:34:b3:d9:a4:8d:4c:36:fc:46:4c:71:a9:f6:30:63:
19:b6:99:3e:0a:c9:7f:17:8f:ad:84:42:c1:f6:cd:1e:f0:26:
ed:ab:fc:fc:dc:9e:d0:b5:c3:66:72:55:c1:3a:db:93:16:39:
a5:89:60:18:9e:23:87:3a:7a:71:16:d4:f8:c6:86:71:92:70:
bc:ca:f1:09:be:d8:4b:e0:95:87:42:12:91:27:09:fa:80:3b:
df:64:00:ef:18:d8:16:07:b6:e1:d8:33:9a:51:ec:6a:d2:1b:
ec:85:c1:6b:cd:42:72:b5:d9:e4:12:be:38:56:db:07:b8:ae:
39:b3:5e:c7:ac:fe:c2:17:fa:5d:fd:38:ba:8b:58:08:fb:fc:
1c:a3:23:a0:5c:66:09:e0:b9:14:60:dc:6b:06:6c:6f:df:d2:
95:84:f2:dd:7b:50:59:81:35:72:2a:d3:6c:c9:59:1d:bf:22:
bb:f8:72:a8:b0:21:05:74:2e:5f:97:80:da:35:f2:ee:27:32:
d5:77:f9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:09 2025 by rpki-client