Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CcO4LDdPCP-CrfkpxG9WXR5Vv40.roa
File: CcO4LDdPCP-CrfkpxG9WXR5Vv40.roa (raw, json)
Hash identifier: ITEnc+vy1OQhBpS5O4uhoLNkcBq8V44QZbDAmRSiJ8s=
Subject key identifier: 09:C3:B8:2C:37:4F:08:FF:82:AD:F9:29:C4:6F:56:5D:1E:55:BF:8D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195CD72D70796676A9441660717980C2008
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CcO4LDdPCP-CrfkpxG9WXR5Vv40.roa
Signing time: Tue 25 Mar 2025 13:16:49 +0000
ROA not before: Tue 25 Mar 2025 13:16:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 31.57.11.0/24 maxlen: 24
31.57.99.0/24 maxlen: 24
31.57.131.0/24 maxlen: 24
31.57.150.0/24 maxlen: 24
31.57.200.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.58.147.0/24 maxlen: 24
31.58.226.0/24 maxlen: 24
31.59.107.0/24 maxlen: 24
31.59.120.0/24 maxlen: 24
31.59.136.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Mar 2025 08:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cd:72:d7:07:96:67:6a:94:41:66:07:17:98:0c:20:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 25 13:16:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09c3b82c374f08ff82adf929c46f565d1e55bf8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:02:b8:10:94:a1:6b:86:29:d9:cd:95:79:aa:
66:60:9a:b8:bb:bf:fc:7c:c5:22:6e:fd:fa:61:6e:
84:ea:34:f9:27:b0:a9:e6:7e:86:2d:11:4b:e3:d5:
62:e4:c2:13:fe:9a:3f:14:59:b0:a6:e1:06:f3:35:
21:ec:8c:46:49:e4:c0:01:2b:78:18:56:b5:2c:aa:
a7:97:ad:32:69:89:8d:44:29:a8:f0:c9:ca:f6:ca:
27:d8:3f:9e:ae:24:c1:7d:c0:ce:39:73:4a:4c:5c:
2a:ef:d9:e4:fb:be:ae:bd:a8:e1:38:43:36:9f:6d:
9b:4c:46:3a:9e:1e:0b:80:9d:67:07:2b:06:e8:e3:
89:0e:11:66:0e:39:54:5f:e1:31:75:94:04:46:4e:
6b:56:3b:d1:7a:f0:f3:65:88:39:83:a3:46:9f:86:
67:91:a1:f3:a4:83:ae:e5:1f:cf:49:af:0c:b5:04:
5a:4e:34:05:86:91:e8:0d:04:f9:e1:c6:d7:32:87:
cc:56:c2:d5:3e:72:22:4e:e9:7c:e0:a5:61:e0:f2:
aa:50:60:cc:57:bd:b0:15:b0:28:9d:82:b3:00:21:
c4:31:01:3f:fb:61:e3:03:88:fd:52:b2:6f:af:4e:
3e:03:d5:2b:7e:b0:b8:4c:88:aa:78:4a:b9:a2:92:
72:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C3:B8:2C:37:4F:08:FF:82:AD:F9:29:C4:6F:56:5D:1E:55:BF:8D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CcO4LDdPCP-CrfkpxG9WXR5Vv40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.11.0/24
31.57.99.0/24
31.57.131.0/24
31.57.150.0/24
31.57.200.0/24
31.57.217.0/24
31.58.147.0/24
31.58.226.0/24
31.59.107.0/24
31.59.120.0/24
31.59.136.0/24
Signature Algorithm: sha256WithRSAEncryption
86:fe:08:8e:02:7a:dd:81:e6:57:ce:67:e2:55:5f:ae:36:18:
c8:fb:b2:b2:66:57:1a:57:98:0e:be:07:e9:81:b0:64:9c:49:
dc:44:24:9e:c4:62:0a:43:08:ef:4d:73:e9:9f:6c:e5:4b:52:
e9:c3:eb:4a:56:4e:a5:4f:8f:d8:3f:3b:83:f5:9a:6e:7e:93:
a2:49:e5:ef:d2:7e:ef:2e:10:43:67:b8:d7:28:d4:5a:b3:a0:
90:59:c5:1a:b7:da:21:81:82:34:3b:db:e3:7f:da:5e:02:51:
5d:c7:d0:02:c6:71:a9:00:4c:7f:9e:ae:37:c0:39:76:99:e5:
0b:25:83:30:6a:89:37:34:cb:b7:8d:64:d3:04:09:02:23:0a:
39:3a:b8:68:74:39:4d:40:b9:9d:4a:77:43:fa:d9:23:db:4f:
c9:bb:ac:3f:e0:00:2b:6e:d6:45:e9:3f:ca:96:51:b7:cc:ae:
26:8b:6f:15:8b:a7:2d:1c:67:21:0e:a6:e8:44:3d:14:47:52:
82:25:61:95:0f:46:01:d4:e0:09:45:86:a7:50:ad:7f:21:d7:
2b:af:e7:b1:cf:35:fe:df:de:c4:71:2c:e6:83:41:0d:0d:06:
b3:59:32:e4:ff:8d:54:a1:55:ea:01:e8:85:7f:68:86:a1:8b:
6d:46:22:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:50:48 2025 by rpki-client