Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6cxqaWTpBGy2MDGXTikzhQGxycQ.roa
File: 6cxqaWTpBGy2MDGXTikzhQGxycQ.roa (raw, json)
Hash identifier: d5bvyfUQF30hQmFC+VH6SuVOyQP6diB6LdX4CGUlxws=
Subject key identifier: E9:CC:6A:69:64:E9:04:6C:B6:30:31:97:4E:29:33:85:01:B1:C9:C4
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019371A26C8226FA034805B79CDC515E19A2
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6cxqaWTpBGy2MDGXTikzhQGxycQ.roa
Signing time: Thu 28 Nov 2024 07:18:10 +0000
ROA not before: Thu 28 Nov 2024 07:18:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 31.56.112.0/21 maxlen: 24
31.56.114.0/23 maxlen: 23
31.56.118.0/23 maxlen: 23
31.57.11.0/24 maxlen: 24
31.57.131.0/24 maxlen: 24
31.57.150.0/24 maxlen: 24
31.57.176.0/24 maxlen: 24
31.57.178.0/24 maxlen: 24
31.57.179.0/24 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.182.0/24 maxlen: 24
31.57.183.0/24 maxlen: 24
31.57.194.0/24 maxlen: 24
31.57.224.0/22 maxlen: 23
31.57.252.0/22 maxlen: 23
31.58.59.0/24 maxlen: 24
31.58.142.0/24 maxlen: 24
31.58.146.0/24 maxlen: 24
31.58.152.0/22 maxlen: 22
31.58.167.0/24 maxlen: 24
31.58.176.0/22 maxlen: 22
31.58.200.0/22 maxlen: 22
31.58.216.0/22 maxlen: 22
31.58.240.0/22 maxlen: 22
31.58.252.0/22 maxlen: 22
31.59.41.0/24 maxlen: 24
31.59.56.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.58.0/24 maxlen: 24
31.59.64.0/22 maxlen: 22
31.59.80.0/22 maxlen: 22
31.59.124.0/22 maxlen: 22
31.59.176.0/22 maxlen: 22
31.59.180.0/22 maxlen: 22
31.59.188.0/22 maxlen: 22
31.59.192.0/22 maxlen: 22
31.59.216.0/22 maxlen: 24
31.59.228.0/24 maxlen: 24
31.59.229.0/24 maxlen: 24
31.59.231.0/24 maxlen: 24
31.59.244.0/24 maxlen: 24
31.59.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 30 Nov 2024 18:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:71:a2:6c:82:26:fa:03:48:05:b7:9c:dc:51:5e:19:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 28 07:18:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9cc6a6964e9046cb63031974e29338501b1c9c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:98:0a:2f:1f:d3:19:28:2f:7d:bc:56:d7:2c:
fb:e2:07:69:81:56:44:0b:cd:26:72:84:d7:27:a6:
bd:14:6d:4d:c0:50:fc:70:37:c4:f9:98:6e:14:f3:
55:ba:59:41:1f:3d:18:02:eb:92:3d:28:76:59:b9:
86:c3:28:c1:32:f3:20:21:8b:96:ae:27:4f:59:e6:
18:69:31:23:d8:7d:28:cd:ad:59:88:4a:9e:30:c7:
9d:fd:55:d3:05:d9:77:e1:e8:53:13:10:5e:91:02:
c5:87:aa:53:55:3c:fa:70:b7:44:03:5a:cc:14:93:
d2:25:b9:82:82:b8:2a:a3:bf:e5:ae:bd:73:c6:d6:
0e:97:05:9b:f9:63:de:e2:e8:fd:8d:a1:fd:ed:0e:
60:e9:83:5f:f0:8b:d4:31:13:b1:52:2c:de:c1:c5:
a1:4a:fc:0e:10:cd:ff:7a:51:4f:e1:34:87:f1:bb:
59:42:bd:69:06:d9:1c:24:63:cf:4d:d8:16:63:69:
f7:39:91:a2:53:da:d2:f7:e7:05:28:83:d5:3a:60:
c5:64:f0:d8:1f:85:ce:34:82:c4:fd:28:ea:45:33:
83:89:3a:83:cc:14:6f:38:6e:fa:5a:dd:ea:07:1c:
63:5b:3b:dc:1f:1e:6a:c1:dc:2a:90:fd:e6:79:0d:
e3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:CC:6A:69:64:E9:04:6C:B6:30:31:97:4E:29:33:85:01:B1:C9:C4
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6cxqaWTpBGy2MDGXTikzhQGxycQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.112.0/21
31.57.11.0/24
31.57.131.0/24
31.57.150.0/24
31.57.176.0/24
31.57.178.0/23
31.57.181.0-31.57.183.255
31.57.194.0/24
31.57.224.0/22
31.57.252.0/22
31.58.59.0/24
31.58.142.0/24
31.58.146.0/24
31.58.152.0/22
31.58.167.0/24
31.58.176.0/22
31.58.200.0/22
31.58.216.0/22
31.58.240.0/22
31.58.252.0/22
31.59.41.0/24
31.59.56.0-31.59.58.255
31.59.64.0/22
31.59.80.0/22
31.59.124.0/22
31.59.176.0/21
31.59.188.0-31.59.195.255
31.59.216.0/22
31.59.228.0/23
31.59.231.0/24
31.59.244.0/23
Signature Algorithm: sha256WithRSAEncryption
63:e1:15:d7:d1:98:06:85:f5:51:66:38:cf:4e:0e:f4:e8:06:
c6:8f:de:d3:fd:85:d7:3f:e7:cb:b0:6d:4f:ed:16:9e:b9:3d:
61:a0:4e:c3:a4:0f:e3:cb:b3:8f:5f:c0:28:ca:41:1f:e0:d7:
43:bf:89:7e:f4:da:15:cc:ca:5b:7b:b8:38:04:39:a9:f9:72:
bc:97:1b:23:49:03:61:1d:d9:da:67:ec:d6:c6:50:4c:ae:3d:
4a:f4:e8:f4:f5:33:39:1a:29:f4:02:ed:ee:7b:a2:c6:e2:2a:
66:54:5a:60:dd:a3:c6:12:a3:b1:28:82:30:b9:7c:17:33:a5:
35:3d:8f:55:2f:10:36:1e:9c:3d:f0:d9:5e:bb:27:2e:e5:03:
1d:3d:7a:9a:2d:b1:86:ca:5d:43:48:fa:f2:62:31:74:a5:9e:
ab:9a:63:a4:bf:ca:76:cb:78:44:36:bc:f2:ce:45:cf:72:59:
c4:c1:74:0a:6c:a7:96:3f:c3:06:07:2a:aa:d9:7f:c3:52:cd:
93:f8:1d:4f:cb:b9:b7:19:0a:a2:18:77:25:d7:d5:6d:74:51:
9c:1e:1f:c3:bc:96:15:bc:fc:33:06:34:80:2e:61:c2:33:a4:
c3:fb:5d:d9:3f:d6:9e:15:e0:a9:23:74:6d:33:bd:71:f0:1e:
5f:93:b9:5c
-----BEGIN CERTIFICATE-----
MIIFzjCCBLagAwIBAgISAZNxomyCJvoDSAW3nNxRXhmiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMTI4MDcxODEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOWNjNmE2OTY0ZTkwNDZjYjYzMDMxOTc0ZTI5MzM4NTAxYjFjOWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5gKLx/TGSgvfbxW1yz74gdpgVZE
C80mcoTXJ6a9FG1NwFD8cDfE+ZhuFPNVullBHz0YAuuSPSh2WbmGwyjBMvMgIYuW
ridPWeYYaTEj2H0oza1ZiEqeMMed/VXTBdl34ehTExBekQLFh6pTVTz6cLdEA1rM
FJPSJbmCgrgqo7/lrr1zxtYOlwWb+WPe4uj9jaH97Q5g6YNf8IvUMROxUizewcWh
SvwOEM3/elFP4TSH8btZQr1pBtkcJGPPTdgWY2n3OZGiU9rS9+cFKIPVOmDFZPDY
H4XONILE/SjqRTODiTqDzBRvOG76Wt3qBxxjWzvcHx5qwdwqkP3meQ3j5QIDAQAB
o4IC2jCCAtYwHQYDVR0OBBYEFOnMamlk6QRstjAxl04pM4UBscnEMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvNmN4cWFXVHBCR3kyTURHWFRpa3poUUd4eWNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHvBggrBgEFBQcBBwEB/wSB3zCB3DCB2QQCAAEwgdIDBAMf
OHADBAAfOQsDBAAfOYMDBAAfOZYDBAAfObADBAEfObIwDAMEAB85tQMEAx85sAME
AB85wgMEAh854AMEAh85/AMEAB86OwMEAB86jgMEAB86kgMEAh86mAMEAB86pwME
Ah86sAMEAh86yAMEAh862AMEAh868AMEAh86/AMEAB87KTAMAwQDHzs4AwQAHzs6
AwQCHztAAwQCHztQAwQCHzt8AwQDHzuwMAwDBAIfO7wDBAIfO8ADBAIfO9gDBAEf
O+QDBAAfO+cDBAEfO/QwDQYJKoZIhvcNAQELBQADggEBAGPhFdfRmAaF9VFmOM9O
DvToBsaP3tP9hdc/58uwbU/tFp65PWGgTsOkD+PLs49fwCjKQR/g10O/iX702hXM
ylt7uDgEOan5cryXGyNJA2Ed2dpn7NbGUEyuPUr06PT1MzkaKfQC7e57osbiKmZU
WmDdo8YSo7EogjC5fBczpTU9j1UvEDYenD3w2V67Jy7lAx09epotsYbKXUNI+vJi
MXSlnquaY6S/ynbLeEQ2vPLORc9yWcTBdApsp5Y/wwYHKqrZf8NSzZP4HU/LubcZ
CqIYdyXX1W10UZweH8O8lhW8/DMGNIAuYcIzpMP7Xdk/1p4V4KkjdG0zvXHwHl+T
uVw=
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:48:57 2025 by rpki-client