Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5uCrgOkeA4iWGozEeLbZVaSt9DQ.roa
File: 5uCrgOkeA4iWGozEeLbZVaSt9DQ.roa (raw, json)
Hash identifier: ShfKs7Aq6Zb1aWoaDQQPk1/3AuPdymU5318qawaHbuY=
Subject key identifier: E6:E0:AB:80:E9:1E:03:88:96:1A:8C:C4:78:B6:D9:55:A4:AD:F4:34
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193A0A49C9EABFB8E6943F687EB48BD1556
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5uCrgOkeA4iWGozEeLbZVaSt9DQ.roa
Signing time: Sat 07 Dec 2024 10:22:42 +0000
ROA not before: Sat 07 Dec 2024 10:22:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 31.56.112.0/21 maxlen: 24
31.57.11.0/24 maxlen: 24
31.57.131.0/24 maxlen: 24
31.57.150.0/24 maxlen: 24
31.57.176.0/24 maxlen: 24
31.57.178.0/24 maxlen: 24
31.57.179.0/24 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.182.0/24 maxlen: 24
31.57.183.0/24 maxlen: 24
31.57.194.0/24 maxlen: 24
31.57.224.0/22 maxlen: 23
31.57.252.0/22 maxlen: 23
31.58.59.0/24 maxlen: 24
31.58.142.0/24 maxlen: 24
31.58.146.0/24 maxlen: 24
31.58.167.0/24 maxlen: 24
31.58.176.0/22 maxlen: 22
31.58.200.0/22 maxlen: 22
31.58.216.0/22 maxlen: 22
31.58.240.0/22 maxlen: 22
31.58.252.0/22 maxlen: 22
31.59.14.0/24 maxlen: 24
31.59.30.0/24 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.56.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.58.0/24 maxlen: 24
31.59.64.0/22 maxlen: 22
31.59.80.0/22 maxlen: 22
31.59.97.0/24 maxlen: 24
31.59.124.0/22 maxlen: 22
31.59.176.0/22 maxlen: 22
31.59.180.0/22 maxlen: 22
31.59.188.0/22 maxlen: 22
31.59.192.0/22 maxlen: 22
31.59.216.0/22 maxlen: 24
31.59.228.0/24 maxlen: 24
31.59.229.0/24 maxlen: 24
31.59.231.0/24 maxlen: 24
31.59.244.0/24 maxlen: 24
31.59.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Dec 2024 13:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a0:a4:9c:9e:ab:fb:8e:69:43:f6:87:eb:48:bd:15:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 7 10:22:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6e0ab80e91e0388961a8cc478b6d955a4adf434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:56:4e:fc:b8:16:a3:9e:f0:4f:88:19:7b:d6:
47:60:f5:10:47:93:5f:82:15:c1:fe:fc:ce:d8:4e:
e2:8d:75:14:ea:56:d5:a4:4e:b3:e2:27:f1:bc:d6:
8d:63:87:92:05:09:c5:85:6b:17:aa:15:8f:90:6e:
21:66:09:9c:18:25:f6:47:a7:98:93:67:57:09:f2:
93:18:16:06:93:cd:6b:52:7c:e0:75:06:de:c7:8e:
ef:d0:cd:9a:80:65:60:f9:6e:18:01:79:87:3a:fd:
5a:0e:93:24:4f:9a:1b:2c:8a:1c:5a:2e:e4:af:c4:
4f:3e:50:58:ea:7d:08:0a:84:d8:8c:f5:83:40:4c:
c7:2b:91:5e:9d:58:c6:d1:14:24:07:3d:b5:75:e2:
ea:c6:74:d1:58:3f:a4:73:76:1a:31:d8:c2:bd:db:
c6:c3:9e:89:c2:01:f1:a9:ef:4d:1a:43:62:11:54:
54:b6:b7:ad:b1:0a:af:54:9d:6e:84:10:1e:ba:fb:
78:4d:b5:bd:cd:bb:54:64:28:6b:97:d4:79:83:7f:
aa:07:27:07:01:3a:85:d1:41:a6:6b:24:0f:af:1c:
c1:33:10:c5:6c:31:40:d0:87:0b:ce:ed:dd:e7:b2:
25:68:c0:dd:5f:e0:14:c6:2c:05:5b:02:6b:10:09:
f1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E0:AB:80:E9:1E:03:88:96:1A:8C:C4:78:B6:D9:55:A4:AD:F4:34
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5uCrgOkeA4iWGozEeLbZVaSt9DQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.112.0/21
31.57.11.0/24
31.57.131.0/24
31.57.150.0/24
31.57.176.0/24
31.57.178.0/23
31.57.181.0-31.57.183.255
31.57.194.0/24
31.57.224.0/22
31.57.252.0/22
31.58.59.0/24
31.58.142.0/24
31.58.146.0/24
31.58.167.0/24
31.58.176.0/22
31.58.200.0/22
31.58.216.0/22
31.58.240.0/22
31.58.252.0/22
31.59.14.0/24
31.59.30.0/24
31.59.41.0/24
31.59.56.0-31.59.58.255
31.59.64.0/22
31.59.80.0/22
31.59.97.0/24
31.59.124.0/22
31.59.176.0/21
31.59.188.0-31.59.195.255
31.59.216.0/22
31.59.228.0/23
31.59.231.0/24
31.59.244.0/23
Signature Algorithm: sha256WithRSAEncryption
24:0a:64:e4:80:da:f8:10:7d:ef:7b:a0:06:5a:d7:c8:f3:0e:
9c:74:d3:3b:8f:7b:08:7b:9c:ba:ee:2c:77:94:16:b2:2d:a7:
9d:67:24:37:10:df:67:c9:f2:31:a3:d3:79:45:91:ee:70:64:
c8:a4:1f:c8:b4:96:e8:76:81:04:fc:28:cf:e5:5f:08:c9:de:
77:8a:ff:f1:c2:e9:3e:a8:15:56:29:fd:6a:bb:36:a1:d6:8c:
43:1b:2c:c2:88:9b:dc:f3:91:ca:75:03:32:fa:45:82:ea:c8:
b0:35:54:ef:d3:93:80:61:dd:1d:33:9c:be:6f:25:79:7f:1e:
23:89:e9:dd:bc:0d:6d:d6:e2:66:78:dc:10:5d:5a:cc:21:56:
b4:81:96:04:f7:f8:c6:ae:67:ce:14:b0:89:78:67:ef:34:0e:
c3:84:61:86:04:b3:58:50:93:e8:b0:4d:99:e5:f1:40:99:72:
fc:87:22:8a:21:47:45:40:db:ce:84:d4:f1:82:5e:61:ed:95:
98:6a:c0:6c:9f:64:43:47:51:32:26:cc:22:a5:9b:16:60:5f:
a2:b3:7f:93:7f:1c:05:6e:fb:d7:44:6b:61:bf:e7:dd:3c:de:
38:40:66:ca:69:9e:24:bd:bb:6f:9c:c5:df:c9:7e:66:71:83:
37:8b:e7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:48:40 2025 by rpki-client