Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FuqlACDMRzwVLKIb5PoYSJk1nV0.roa
File: FuqlACDMRzwVLKIb5PoYSJk1nV0.roa (raw, json)
Hash identifier: zYqHkz+rtV4X9cfqHgt89ULTJhHoR1bvM9glu+BIKU8=
Subject key identifier: 16:EA:A5:00:20:CC:47:3C:15:2C:A2:1B:E4:FA:18:48:99:35:9D:5D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193892CBDFD70A3DC2F19E57D7D7186C853
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FuqlACDMRzwVLKIb5PoYSJk1nV0.roa
Signing time: Mon 02 Dec 2024 21:00:30 +0000
ROA not before: Mon 02 Dec 2024 21:00:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.120.0/22 maxlen: 24
31.56.127.0/24 maxlen: 24
31.57.65.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.146.0/23 maxlen: 24
31.57.166.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.204.0/24 maxlen: 24
31.57.228.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.58.129.0/24 maxlen: 24
31.58.130.0/24 maxlen: 24
31.58.131.0/24 maxlen: 24
31.58.150.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.59.68.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Dec 2024 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:89:2c:bd:fd:70:a3:dc:2f:19:e5:7d:7d:71:86:c8:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 2 21:00:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16eaa50020cc473c152ca21be4fa184899359d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fd:d0:35:fa:e0:c1:aa:38:00:dd:0e:df:8f:
9a:33:37:d7:9e:cb:eb:54:61:29:26:42:41:06:3f:
b3:01:9c:da:a5:22:30:45:fe:73:34:c2:70:ab:af:
06:37:c2:11:d6:95:83:d0:15:27:f4:1d:0e:a8:35:
f7:87:bd:d6:75:51:42:41:bb:89:bb:a1:b4:d2:66:
f6:96:98:82:f3:0f:83:e6:9f:c7:b1:47:9d:17:af:
96:91:c2:5e:4f:58:a4:1c:56:69:b3:66:4d:71:23:
61:9e:a1:10:bf:98:9a:09:86:54:c0:b5:90:92:54:
10:ab:ca:1e:ed:24:00:74:e5:41:66:67:8e:fc:1f:
7a:d7:34:e5:7c:d7:f6:87:09:59:b1:60:67:aa:b2:
dd:cd:7b:7e:2b:de:b4:2a:78:0f:da:55:91:50:b0:
6a:26:c9:45:78:09:cb:71:c0:6f:c4:fb:0a:58:aa:
14:a2:11:7a:ea:c0:a3:81:9a:d7:88:d8:e0:2d:f2:
dc:81:a1:cc:c1:4b:38:31:c9:3b:d4:78:8a:59:8b:
4f:73:2a:e3:3b:78:15:3e:63:bc:8c:20:48:ae:c1:
6e:01:32:05:70:46:04:f7:7f:b2:7d:93:70:77:e5:
a8:e6:92:44:3d:35:2e:4a:c0:f8:3e:e1:81:a0:66:
ca:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:EA:A5:00:20:CC:47:3C:15:2C:A2:1B:E4:FA:18:48:99:35:9D:5D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FuqlACDMRzwVLKIb5PoYSJk1nV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.89.0/24
31.56.104.0/21
31.56.120.0/22
31.56.127.0/24
31.57.65.0/24
31.57.132.0/23
31.57.146.0/23
31.57.166.0/24
31.57.176.0/21
31.57.188.0/24
31.57.192.0/22
31.57.204.0/24
31.57.228.0/24
31.57.232.0/22
31.58.129.0-31.58.131.255
31.58.150.0/24
31.58.152.0/22
31.59.68.0/24
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.184.0/22
Signature Algorithm: sha256WithRSAEncryption
21:d9:79:b5:2d:95:47:5a:25:d8:94:e6:ec:5b:89:e4:5b:f9:
e4:14:43:15:82:5f:2d:6d:27:06:26:4f:cc:6c:1e:3f:eb:07:
ff:7d:11:a6:e3:32:45:11:89:5e:3d:ab:f8:93:e6:a6:e3:23:
c7:df:2a:db:88:9f:92:23:da:ac:87:f9:e6:ee:92:66:e8:40:
a0:98:a6:ae:11:0d:50:3f:02:79:0f:73:2d:99:05:1c:e5:47:
b3:73:da:31:bb:56:22:dc:19:90:4a:ad:74:a3:8f:82:3b:df:
aa:d1:b7:89:f0:56:c9:79:ed:6d:40:3f:7f:d4:cf:01:3e:37:
ca:2a:b4:41:03:9e:da:94:85:b9:c1:2f:b2:c3:c6:2c:b9:b8:
b4:64:5e:8c:c8:8a:9c:09:d4:e4:f0:5b:7a:2c:a0:13:53:86:
9a:83:7d:c5:19:82:6a:c6:b9:60:79:01:42:8e:65:53:7c:c3:
09:45:49:87:ce:5e:7f:b0:7d:94:e9:36:21:e0:44:6c:d4:0e:
f4:e3:94:0d:ac:64:ad:e7:e7:c2:9c:83:04:7e:aa:19:06:71:
e3:5d:dc:84:2d:8a:b0:99:26:0c:16:87:58:a2:5a:10:68:c1:
1c:99:b6:fa:60:f5:01:58:9b:f8:80:ad:de:ec:c0:a9:f0:1f:
b3:79:d8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:48:50 2025 by rpki-client