Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/B71lhOGRxiR6eYGOK-H6vZc4oKI.roa
File: B71lhOGRxiR6eYGOK-H6vZc4oKI.roa (raw, json)
Hash identifier: etXi0lsALgYYsGLxDLVyeLEtxMpdCsYYHAWDtUvCrUc=
Subject key identifier: 07:BD:65:84:E1:91:C6:24:7A:79:81:8E:2B:E1:FA:BD:97:38:A0:A2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019403886A3F0B8925ACEB339B4785288BA6
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/B71lhOGRxiR6eYGOK-H6vZc4oKI.roa
Signing time: Thu 26 Dec 2024 15:14:19 +0000
ROA not before: Thu 26 Dec 2024 15:14:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 31.56.8.0/21 maxlen: 24
31.56.142.0/23 maxlen: 24
31.56.148.0/22 maxlen: 24
31.57.184.0/22 maxlen: 24
31.59.68.0/24 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
217.60.62.0/24 maxlen: 24
217.60.236.0/24 maxlen: 24
217.60.248.0/24 maxlen: 24
217.60.253.0/24 maxlen: 24
217.60.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:03:88:6a:3f:0b:89:25:ac:eb:33:9b:47:85:28:8b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 26 15:14:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07bd6584e191c6247a79818e2be1fabd9738a0a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d3:ac:58:f1:51:55:d7:c7:37:9f:27:7e:1d:
6e:56:aa:50:18:56:de:93:4d:56:88:3a:44:07:84:
99:1e:58:ed:db:a1:79:9f:b7:9f:b7:a4:40:2f:e7:
f0:81:6c:c0:67:56:0b:4a:26:97:62:92:47:8a:85:
e8:a7:59:1f:e5:ac:a3:a4:27:9b:71:1e:75:06:b2:
94:68:b8:af:dd:03:14:0b:c0:4b:45:b2:33:f7:cc:
73:29:c8:09:b0:fe:34:7c:a9:10:c7:2d:a6:1b:e7:
6e:63:c0:7b:43:e4:f2:fc:86:a1:9d:64:41:a4:a0:
af:43:fa:8f:1d:55:a9:70:05:0e:9e:99:d3:15:9b:
0c:89:fc:ce:99:35:a9:f2:a4:c7:4d:31:cc:0a:a1:
7a:05:ee:32:8f:46:0e:d8:2b:36:92:92:1b:7a:9c:
23:d0:b1:54:e5:ed:d6:50:27:43:6e:e7:f4:fa:45:
e4:96:be:dc:05:54:9f:bb:52:f3:33:ed:9d:08:75:
bc:fe:42:ad:00:f1:18:df:4a:fc:0e:46:13:6b:a4:
18:f0:81:81:10:f8:e8:c4:b5:4c:7f:f8:81:ae:ad:
23:da:1b:12:37:37:39:bd:c3:f4:ec:53:2b:56:81:
35:75:4b:49:4b:6f:81:15:7c:2c:c2:64:b6:39:76:
c8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:BD:65:84:E1:91:C6:24:7A:79:81:8E:2B:E1:FA:BD:97:38:A0:A2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/B71lhOGRxiR6eYGOK-H6vZc4oKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.8.0/21
31.56.142.0/23
31.56.148.0/22
31.57.184.0/22
31.59.68.0/24
31.59.136.0-31.59.175.255
217.60.62.0/24
217.60.236.0/24
217.60.248.0/24
217.60.253.0-217.60.254.255
Signature Algorithm: sha256WithRSAEncryption
8c:74:66:90:e9:3a:97:39:86:de:f3:9e:f0:33:9e:d6:7f:38:
87:62:a1:4b:cc:c3:40:52:36:af:79:53:74:31:05:b8:28:9a:
8c:7e:96:e4:cc:60:e1:ff:7c:07:35:08:a2:32:76:79:f3:91:
4c:c6:47:e6:ce:75:d8:37:44:55:2d:fa:f0:e0:50:35:cd:99:
ab:c2:46:d9:43:94:1e:61:15:b5:c5:6d:a1:6a:54:ad:b4:7f:
9f:87:f9:37:ec:7b:62:22:22:75:2d:23:c6:41:30:54:6a:dc:
4a:fb:ff:ba:57:09:3b:c1:84:c8:70:59:7f:85:8b:78:a9:17:
1a:33:85:d3:d2:33:7f:09:21:1a:18:52:64:38:2d:08:cb:26:
77:37:c6:6f:9c:48:06:9d:c9:7b:62:c9:96:6e:a9:16:13:62:
ce:95:1e:d8:90:0e:ed:f4:8a:c0:bb:ad:f5:ee:38:b3:e8:96:
ac:b7:33:45:b5:9b:87:00:b0:02:a6:92:b8:3f:5b:33:60:0c:
6e:60:e4:5d:e3:1a:85:de:89:24:29:a1:ac:5c:c4:22:81:40:
ac:b0:06:6f:02:1d:d6:14:fe:36:ab:2e:c1:2d:8d:bb:e2:67:
2a:e2:26:a6:48:a5:1c:ad:71:90:d7:e2:c7:ff:d1:3f:7c:e8:
33:1c:5e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:48:40 2025 by rpki-client