Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Guhbz5XFJJmhm-6E4wLBlpoKwn4.roa
File: Guhbz5XFJJmhm-6E4wLBlpoKwn4.roa (raw, json)
Hash identifier: dk620BgrQMyopQeZqP9e2YmVMYBa4v+roJUYPQQLz/I=
Subject key identifier: 1A:E8:5B:CF:95:C5:24:99:A1:9B:EE:84:E3:02:C1:96:9A:0A:C2:7E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196D817F509F343C5C215E57CF194EFED2D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Guhbz5XFJJmhm-6E4wLBlpoKwn4.roa
Signing time: Fri 16 May 2025 07:56:10 +0000
ROA not before: Fri 16 May 2025 07:56:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 31.56.86.0/24 maxlen: 24
31.57.92.0/23 maxlen: 24
31.57.122.0/24 maxlen: 24
31.57.124.0/24 maxlen: 24
31.57.125.0/24 maxlen: 24
31.57.140.0/24 maxlen: 24
31.57.162.0/23 maxlen: 23
31.57.164.0/23 maxlen: 23
31.57.180.0/24 maxlen: 24
31.57.196.0/24 maxlen: 24
31.57.221.0/24 maxlen: 24
31.58.41.0/24 maxlen: 24
31.58.42.0/24 maxlen: 24
31.58.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 17 May 2025 17:52:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:17:f5:09:f3:43:c5:c2:15:e5:7c:f1:94:ef:ed:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 16 07:56:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ae85bcf95c52499a19bee84e302c1969a0ac27e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:50:4a:a9:30:18:42:1f:30:9b:50:b8:24:9e:
23:91:2b:43:b6:88:a8:1c:f8:22:f0:e7:1a:38:e0:
8a:ac:7c:0d:0e:5a:db:dc:1a:25:ee:96:00:fe:54:
7d:90:6f:3e:7a:73:ce:e0:73:28:19:a5:f0:2a:ca:
f1:be:e8:94:8d:db:a9:78:73:5d:24:dc:73:8c:9a:
b1:04:b7:2a:47:28:f1:3f:be:b4:b6:b1:4d:a2:e2:
5e:69:b7:93:32:33:a6:b7:a1:2c:96:dd:83:65:a7:
b1:1b:9c:e8:bc:07:54:66:f0:dc:43:8b:59:33:05:
18:3d:78:bb:42:00:16:be:7c:e7:aa:5c:f1:86:97:
42:eb:f3:46:0c:02:50:c6:67:4f:74:3e:13:78:11:
44:8f:81:00:2e:92:33:5d:18:06:91:45:d9:0a:9c:
2c:60:57:c6:53:c4:26:c0:0b:a0:9d:ed:ec:03:f5:
b5:5e:6a:f0:17:4f:8f:5d:f3:3b:8a:00:59:7c:f0:
ed:9c:88:61:e3:2e:0a:3e:2d:18:23:1e:f5:ff:d0:
12:aa:ee:41:77:e8:0e:38:dc:df:3b:5a:d0:4d:9c:
72:9b:74:fc:37:53:fb:d5:db:2a:93:04:4f:02:dc:
17:53:66:12:32:17:0f:1f:a5:43:5f:68:f5:ea:ef:
0e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E8:5B:CF:95:C5:24:99:A1:9B:EE:84:E3:02:C1:96:9A:0A:C2:7E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Guhbz5XFJJmhm-6E4wLBlpoKwn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.86.0/24
31.57.92.0/23
31.57.122.0/24
31.57.124.0/23
31.57.140.0/24
31.57.162.0-31.57.165.255
31.57.180.0/24
31.57.196.0/24
31.57.221.0/24
31.58.41.0-31.58.42.255
31.58.48.0/24
Signature Algorithm: sha256WithRSAEncryption
63:af:e4:bf:50:4b:84:9c:4a:fb:35:e4:ed:f5:e4:5d:1c:27:
cd:a7:ce:9a:6a:f5:58:58:4e:12:87:b5:3e:1a:d1:84:bd:41:
4b:00:20:60:70:14:c1:d3:b0:3e:e4:e3:a7:b2:d5:71:8a:cc:
21:2f:7d:83:98:34:e3:62:57:ea:48:00:b1:35:e2:d0:9a:ae:
75:8f:a6:14:55:59:d9:7b:a6:3d:81:24:f4:1e:77:3b:38:a5:
c7:f0:27:31:b2:5d:0a:83:04:31:6f:e0:89:fd:74:17:91:6d:
bd:eb:e8:9b:1d:fd:ab:c1:8a:93:84:d2:7a:f6:ab:33:ca:8a:
6c:c3:f5:76:b0:71:11:c7:26:7e:97:8b:70:55:ba:49:e9:1b:
12:5d:a4:b5:5b:58:84:03:8f:1b:18:df:28:67:c6:f8:91:8e:
fe:b5:06:63:c9:d6:60:d0:10:f4:c7:d1:8a:9c:7c:f8:db:5a:
8d:f0:90:90:0f:ec:80:cf:47:58:42:87:ca:44:3a:ac:1a:ca:
25:0a:3f:b1:45:79:a1:a1:b4:50:1a:2c:ef:4f:7b:85:13:d4:
0e:08:a9:fe:1c:6a:5a:24:77:a7:85:c0:6e:8c:87:00:69:9a:
d0:80:d6:19:dc:75:79:64:bd:df:85:31:61:fd:5b:7a:73:62:
38:d4:5b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 04:06:17 2025 by rpki-client