Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FLdcyQ_W-l64XJ0ZrtMF_KgweeI.roa
File: FLdcyQ_W-l64XJ0ZrtMF_KgweeI.roa (raw, json)
Hash identifier: UFyAkMt19S/qUIx4My8PvimQ0aIfoBSoBtpVBYqjGg0=
Subject key identifier: 14:B7:5C:C9:0F:D6:FA:5E:B8:5C:9D:19:AE:D3:05:FC:A8:30:79:E2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01939C3D993A770B369C46DE9CF7F94C7233
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FLdcyQ_W-l64XJ0ZrtMF_KgweeI.roa
Signing time: Fri 06 Dec 2024 13:51:42 +0000
ROA not before: Fri 06 Dec 2024 13:51:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.50.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.85.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.156.0/24 maxlen: 24
31.57.65.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.146.0/23 maxlen: 24
31.57.166.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.204.0/24 maxlen: 24
31.57.228.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.58.130.0/24 maxlen: 24
31.58.131.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 08 Dec 2024 11:27:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9c:3d:99:3a:77:0b:36:9c:46:de:9c:f7:f9:4c:72:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 6 13:51:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14b75cc90fd6fa5eb85c9d19aed305fca83079e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:eb:cb:ea:98:c0:18:f1:13:40:de:2c:c6:97:
c7:52:07:dd:f1:75:db:0e:c6:76:0a:94:d7:ce:56:
4a:d3:56:ce:ff:d8:de:c3:5c:49:69:c1:6d:f2:8a:
6f:1b:bc:14:79:f9:79:ae:55:c7:1f:ff:84:ca:95:
d7:21:63:ed:ca:2f:c8:31:2d:40:e0:d9:03:fc:3f:
c1:02:90:a4:d9:12:c0:07:80:b8:f3:05:18:ab:f7:
6b:54:44:63:e7:74:63:d4:44:d2:8f:8f:c9:15:bb:
71:d6:8d:7a:22:71:49:10:0b:42:20:1c:bc:38:fe:
c5:26:61:59:3c:a8:e9:2c:cb:3d:ec:e7:db:7b:4c:
76:57:69:30:3a:e9:11:79:97:42:25:96:1a:d6:bd:
97:ca:36:57:ab:2d:69:9d:9d:23:71:0d:41:23:b5:
ca:c9:c0:4f:4e:3b:17:7f:00:f8:b1:f1:da:b0:0d:
6a:d2:78:39:80:8b:c9:41:b0:91:c0:d4:1b:b9:a5:
9c:c2:f5:6b:d8:2c:37:05:79:c9:3f:9c:d3:22:e5:
58:d9:52:b3:9f:45:2e:0b:e9:a7:20:a0:63:c8:0e:
fe:ef:89:d1:af:b4:ca:ed:dd:d6:48:ce:32:61:df:
0d:1d:ea:5f:cf:50:9c:21:96:07:ba:01:7f:6d:9f:
18:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B7:5C:C9:0F:D6:FA:5E:B8:5C:9D:19:AE:D3:05:FC:A8:30:79:E2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FLdcyQ_W-l64XJ0ZrtMF_KgweeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.50.0/23
31.56.57.0/24
31.56.85.0/24
31.56.89.0/24
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.156.0/24
31.57.65.0/24
31.57.132.0/23
31.57.146.0/23
31.57.166.0/24
31.57.176.0/21
31.57.188.0/24
31.57.192.0/22
31.57.204.0/24
31.57.228.0/24
31.57.232.0/22
31.58.130.0/23
31.58.152.0/22
31.59.96.0/22
31.59.112.0/22
31.59.184.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:de:25:65:31:3d:9c:ca:1f:d5:ab:a5:35:3e:92:5e:fd:6c:
a5:74:8e:da:db:ad:84:58:52:00:e2:18:9f:a2:66:5e:02:fd:
0b:fb:91:51:cc:60:cc:ef:a6:da:24:3e:cc:0a:7e:90:b1:7d:
79:c6:d0:e1:5c:24:ab:fa:ea:47:1a:9c:b3:8a:0a:43:79:0c:
c4:40:3b:94:96:6c:36:22:6d:db:c2:37:a9:2c:00:46:ee:21:
ab:78:a2:3b:b6:fb:58:c1:59:e1:d8:3e:41:27:06:c9:f6:76:
5b:55:02:58:9c:24:1d:10:a5:c7:2c:dc:8b:61:3c:9a:1b:3b:
4f:54:dc:6d:c2:43:52:64:4e:87:da:9f:90:dd:37:37:d6:8d:
3e:a9:c4:20:5d:44:fb:70:c0:37:af:41:8c:34:1b:91:ef:b0:
b3:c6:15:0e:13:55:45:88:a2:08:b5:b0:d3:8e:0c:95:09:3f:
ef:e1:fd:48:f8:0c:b5:93:11:44:7e:68:21:d5:f8:10:2b:6c:
1d:65:6d:45:fa:23:dd:bc:36:bf:fe:b2:21:a6:6b:79:1a:53:
00:78:a5:0a:f0:a8:b5:2b:8f:07:47:95:d8:52:a8:f9:de:4f:
ef:b1:1f:93:d8:c5:62:9a:6e:db:18:fe:e6:2b:ce:55:bd:13:
96:69:48:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:51:04 2025 by rpki-client