Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6C_emQELw2ROLxqBSYCW3qT-dJY.roa
File: 6C_emQELw2ROLxqBSYCW3qT-dJY.roa (raw, json)
Hash identifier: eyhg5PH/GJgWT1zmwkA6bShJk4d857pKoVIh6r6ox94=
Subject key identifier: E8:2F:DE:99:01:0B:C3:64:4E:2F:1A:81:49:80:96:DE:A4:FE:74:96
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01946EE45BA70DC48CB862D7B0B8303B7358
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6C_emQELw2ROLxqBSYCW3qT-dJY.roa
Signing time: Thu 16 Jan 2025 11:34:06 +0000
ROA not before: Thu 16 Jan 2025 11:34:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214024
IP address blocks: 31.56.69.0/24 maxlen: 24
31.56.72.0/24 maxlen: 24
31.56.84.0/24 maxlen: 24
31.56.200.0/24 maxlen: 24
31.56.202.0/24 maxlen: 24
31.57.132.0/24 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.215.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.221.0/24 maxlen: 24
31.57.252.0/24 maxlen: 24
31.57.253.0/24 maxlen: 24
31.57.255.0/24 maxlen: 24
31.58.88.0/24 maxlen: 24
31.58.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Jan 2025 14:35:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6e:e4:5b:a7:0d:c4:8c:b8:62:d7:b0:b8:30:3b:73:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 16 11:34:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e82fde99010bc3644e2f1a81498096dea4fe7496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:64:af:8f:07:3f:7e:c1:33:8e:42:60:ca:62:
18:04:15:ba:f0:f4:6f:31:87:58:72:d8:65:7f:a5:
3c:3b:c0:b9:a8:c1:ec:64:0f:36:04:6b:db:48:86:
34:5c:49:b4:7d:78:2f:f3:50:e9:ec:e8:8c:75:4d:
f4:8d:00:dc:fe:fd:26:02:35:c2:0d:55:cd:c1:68:
4d:ee:19:bf:6d:4c:a9:32:1e:77:90:6f:be:e0:15:
e3:05:ec:63:e1:89:e9:ac:88:67:8d:3d:f5:2f:8c:
0d:ee:eb:a4:19:0b:51:26:31:a8:9b:7c:92:45:6c:
ce:0a:2d:3e:13:82:01:8d:ef:f3:73:77:b2:4d:2a:
dd:0e:36:78:e2:4f:87:23:f4:22:da:98:e9:5a:af:
02:32:33:bf:77:0a:c3:38:4d:86:04:37:03:37:a3:
ad:cd:81:f2:80:5a:fc:d9:e4:92:97:55:ef:0b:99:
df:af:03:13:45:10:71:ce:9d:b6:90:94:93:e5:9c:
14:75:81:f5:7e:0d:0a:9e:27:31:6c:93:47:bf:c3:
c1:ca:9a:0e:f4:a2:fa:3e:39:b2:08:fa:f5:42:46:
f8:86:81:47:b5:53:0d:14:f1:6f:bc:b5:ac:3a:53:
6a:ac:1c:c1:f1:e8:be:ce:2a:65:c1:7f:46:99:6d:
38:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:2F:DE:99:01:0B:C3:64:4E:2F:1A:81:49:80:96:DE:A4:FE:74:96
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6C_emQELw2ROLxqBSYCW3qT-dJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.69.0/24
31.56.72.0/24
31.56.84.0/24
31.56.200.0/24
31.56.202.0/24
31.57.132.0/24
31.57.181.0/24
31.57.215.0/24
31.57.219.0/24
31.57.221.0/24
31.57.252.0/23
31.57.255.0/24
31.58.88.0/23
Signature Algorithm: sha256WithRSAEncryption
37:76:26:04:86:7d:43:21:f8:3b:9e:d5:97:4a:c9:1d:ec:06:
10:bd:c3:06:70:0c:90:c8:21:e7:07:a4:f5:71:e2:11:a1:8d:
11:f1:72:e8:3e:b4:d2:31:58:ed:22:45:a4:34:11:27:24:56:
c6:1d:f5:57:c3:c3:99:1c:15:33:b8:a3:ba:a6:10:97:0b:ac:
a5:33:e7:72:64:5b:b9:86:37:ef:81:40:3a:40:c9:62:47:52:
a6:c6:33:fd:ca:59:e3:22:da:3b:ac:d1:13:6a:e6:c6:61:f3:
aa:b2:a9:34:2c:fc:60:dd:4f:51:95:31:db:82:87:52:4e:57:
54:6f:e9:67:5e:37:8d:5c:6e:6b:4b:eb:30:98:c1:0d:7d:32:
de:ba:00:8b:03:e6:95:6e:84:b6:56:24:5a:88:d3:af:43:fa:
f6:fa:2f:be:d9:8d:06:35:4a:d7:3a:c6:4e:e9:50:d5:4b:3c:
6b:db:c3:2d:fc:63:80:1e:68:57:16:1c:c2:d3:0b:dc:4d:8e:
90:f2:89:48:17:7d:16:3b:b2:e9:99:58:22:6a:2b:a2:0d:74:
37:cf:23:5c:bc:bf:d6:32:db:2c:33:0e:6a:ad:22:07:1b:b5:
bb:37:39:ee:8a:2d:ab:d3:a3:e4:c5:0b:b3:96:64:ed:60:76:
e4:07:10:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:01:15 2025 by rpki-client