Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GqnpmGIkntV7-d1nyPVIPWBW8ts.roa
File: GqnpmGIkntV7-d1nyPVIPWBW8ts.roa (raw, json)
Hash identifier: 442hUPNtb5az/1kWpYRrcYctXTJpwvSTxpj3AvdNH/I=
Subject key identifier: 1A:A9:E9:98:62:24:9E:D5:7B:F9:DD:67:C8:F5:48:3D:60:56:F2:DB
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019500E4B2DE88677AA81BF397FDE7F1C39E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GqnpmGIkntV7-d1nyPVIPWBW8ts.roa
Signing time: Thu 13 Feb 2025 19:59:02 +0000
ROA not before: Thu 13 Feb 2025 19:59:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44382
IP address blocks: 31.56.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Feb 2025 07:04:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:00:e4:b2:de:88:67:7a:a8:1b:f3:97:fd:e7:f1:c3:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 13 19:59:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1aa9e99862249ed57bf9dd67c8f5483d6056f2db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0b:22:6a:96:c2:d2:c5:63:9d:65:66:99:cd:
e7:12:e1:1b:f3:12:f6:cd:92:8d:3d:94:70:8d:35:
ad:c7:78:25:6c:96:a7:93:d4:23:d5:11:4a:8f:dc:
18:90:6d:85:65:f3:11:00:73:cd:1c:81:f3:c0:ef:
61:da:47:cc:bd:e4:b3:df:d9:ff:8b:e3:ed:72:51:
8d:1b:58:46:d7:7f:43:cf:8c:05:9c:90:a8:53:97:
86:e2:3f:b9:88:3c:2f:a6:68:00:bd:6f:c6:9a:e1:
50:58:8a:06:4c:85:69:11:e1:19:c8:9f:d6:fc:26:
8d:e1:01:b4:f4:cd:e0:40:95:89:54:bc:03:7f:9c:
bf:b5:9b:0a:1f:94:e0:ef:0d:48:40:a7:43:0a:40:
3f:0a:99:7a:b9:54:3d:cb:39:91:a7:d7:d3:7e:62:
86:73:17:0e:94:15:bf:e4:55:4f:6d:54:82:0b:0a:
49:1c:e5:87:4b:7e:65:d5:92:65:68:66:94:10:7d:
17:f9:ea:0f:38:dc:a1:9b:88:e9:ba:d8:76:17:0c:
ac:ae:87:86:da:c0:4e:7d:aa:18:7c:2e:52:52:f4:
c1:3e:37:c6:88:7c:3e:cf:72:6a:5f:06:11:70:ff:
49:c6:91:93:bd:74:d6:78:51:89:32:85:37:5d:ce:
50:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A9:E9:98:62:24:9E:D5:7B:F9:DD:67:C8:F5:48:3D:60:56:F2:DB
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GqnpmGIkntV7-d1nyPVIPWBW8ts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.85.0/24
Signature Algorithm: sha256WithRSAEncryption
89:72:9d:ca:24:57:9d:01:9c:35:f2:6f:d0:ed:fc:ef:9a:3f:
4b:d9:8e:0c:7a:53:d1:db:36:af:3e:6e:2b:cd:89:28:d6:48:
af:e1:56:ca:fa:4b:92:74:19:ad:0f:ae:87:2b:b2:02:f2:75:
04:e5:46:3e:0e:1f:55:37:59:4d:f3:71:09:0a:6f:30:a0:2d:
49:2d:03:21:c0:5c:c1:d2:6f:75:07:b6:ec:34:2a:fb:ba:23:
6a:fc:6f:bd:ec:b8:fb:f5:c9:05:4a:ab:97:fa:97:2b:f9:00:
6d:41:a2:e9:ee:e6:a1:f0:5c:f0:d0:68:23:b4:7e:36:b0:42:
d8:bb:b7:9f:29:b3:93:2b:60:ba:2f:d7:c4:8a:f2:8a:20:67:
a2:41:62:87:9c:63:4b:1b:39:61:81:8c:0c:89:09:1d:f7:dd:
05:d3:ed:74:1f:f6:82:01:57:12:76:79:c9:29:73:c1:b6:73:
39:0a:36:19:cc:cf:74:9b:25:69:b8:5c:f9:7a:b1:9b:2e:10:
9b:a0:82:36:49:13:5b:64:6e:c8:5b:8c:2c:ba:4c:0e:40:7f:
ff:c0:40:89:cf:b8:32:2d:78:8c:15:83:f6:68:d4:44:70:d4:
08:f7:9c:5f:bb:a2:63:fc:a7:5a:65:db:a8:4b:c8:61:f4:ab:
30:e7:4f:00
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZUA5LLeiGd6qBvzl/3n8cOeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMjEzMTk1OTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYWE5ZTk5ODYyMjQ5ZWQ1N2JmOWRkNjdjOGY1NDgzZDYwNTZmMmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwsiapbC0sVjnWVmmc3nEuEb8xL2
zZKNPZRwjTWtx3glbJank9Qj1RFKj9wYkG2FZfMRAHPNHIHzwO9h2kfMveSz39n/
i+PtclGNG1hG139Dz4wFnJCoU5eG4j+5iDwvpmgAvW/GmuFQWIoGTIVpEeEZyJ/W
/CaN4QG09M3gQJWJVLwDf5y/tZsKH5Tg7w1IQKdDCkA/Cpl6uVQ9yzmRp9fTfmKG
cxcOlBW/5FVPbVSCCwpJHOWHS35l1ZJlaGaUEH0X+eoPONyhm4jputh2FwysroeG
2sBOfaoYfC5SUvTBPjfGiHw+z3JqXwYRcP9JxpGTvXTWeFGJMoU3Xc5QRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBqp6ZhiJJ7Ve/ndZ8j1SD1gVvLbMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvR3FucG1HSWtudFY3LWQxbnlQVklQV0JXOHRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzhVMA0G
CSqGSIb3DQEBCwUAA4IBAQCJcp3KJFedAZw18m/Q7fzvmj9L2Y4MelPR2zavPm4r
zYko1kiv4VbK+kuSdBmtD66HK7IC8nUE5UY+Dh9VN1lN83EJCm8woC1JLQMhwFzB
0m91B7bsNCr7uiNq/G+97Lj79ckFSquX+pcr+QBtQaLp7uah8Fzw0GgjtH42sELY
u7efKbOTK2C6L9fEivKKIGeiQWKHnGNLGzlhgYwMiQkd990F0+10H/aCAVcSdnnJ
KXPBtnM5CjYZzM90myVpuFz5erGbLhCboII2SRNbZG7IW4wsukwOQH//wECJz7gy
LXiMFYP2aNREcNQI95xfu6Jj/KdaZduoS8hh9Ksw508A
-----END CERTIFICATE-----
Generated at Fri Apr 18 09:48:29 2025 by rpki-client