Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HMM4WOrVK3wik2FThlZ9qzvSupM.roa
File: HMM4WOrVK3wik2FThlZ9qzvSupM.roa (raw, json)
Hash identifier: ydi3ZtpdtnY4XFkWRS5Xp8Virvodn49lBB7wi9C9exY=
Subject key identifier: 1C:C3:38:58:EA:D5:2B:7C:22:93:61:53:86:56:7D:AB:3B:D2:BA:93
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019571869550E66A8976C58541EE9040710A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HMM4WOrVK3wik2FThlZ9qzvSupM.roa
Signing time: Fri 07 Mar 2025 16:53:20 +0000
ROA not before: Fri 07 Mar 2025 16:53:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 31.56.73.0/24 maxlen: 24
31.57.153.0/24 maxlen: 24
31.57.236.0/24 maxlen: 24
31.58.43.0/24 maxlen: 24
31.58.128.0/24 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.162.0/24 maxlen: 24
31.58.164.0/24 maxlen: 24
31.58.166.0/24 maxlen: 24
31.59.88.0/24 maxlen: 24
31.59.122.0/24 maxlen: 24
31.59.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Mar 2025 16:34:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:71:86:95:50:e6:6a:89:76:c5:85:41:ee:90:40:71:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 7 16:53:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1cc33858ead52b7c2293615386567dab3bd2ba93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0b:2a:27:2f:ef:c5:55:53:e4:c4:de:54:63:
a6:a7:99:0d:23:33:92:0f:7d:93:13:c4:eb:63:dc:
94:50:b3:74:2d:b9:57:79:d1:67:76:8c:84:28:21:
51:b1:26:ad:0e:77:e0:9d:7e:cf:66:55:3e:a5:a2:
89:24:1e:45:17:c8:a8:79:23:90:06:93:2b:c5:5d:
c4:93:db:ad:5b:d7:78:88:ea:71:75:2b:37:5d:fe:
58:12:f4:86:6e:36:a9:dd:5b:61:7e:2b:6a:6a:00:
b2:04:9c:62:dd:fb:11:b8:c7:d4:cd:5f:ef:57:4f:
a2:e1:ef:17:d1:40:ba:35:31:30:fe:37:5b:03:e6:
ab:11:ee:a1:a1:a7:28:a3:5e:1d:b7:a5:c8:d7:11:
8b:a5:91:ed:c3:80:20:fb:49:3c:b1:2d:b2:cd:e2:
98:67:ed:8a:95:f4:45:02:cc:cf:9a:fb:5f:54:f4:
7d:cc:8c:aa:10:d7:65:c4:98:b6:4a:b8:63:6a:fd:
5d:df:69:d5:73:e2:7a:23:cc:a5:63:d2:49:ca:ed:
1c:11:b2:64:b8:93:d3:f8:7a:11:1b:54:2d:88:cb:
75:9d:c7:cc:36:6b:af:3b:5f:1f:8f:b5:3e:56:b4:
36:fa:34:37:57:b4:82:a3:f2:45:79:ab:de:6c:d5:
49:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C3:38:58:EA:D5:2B:7C:22:93:61:53:86:56:7D:AB:3B:D2:BA:93
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HMM4WOrVK3wik2FThlZ9qzvSupM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.73.0/24
31.57.153.0/24
31.57.236.0/24
31.58.43.0/24
31.58.128.0/24
31.58.153.0/24
31.58.162.0/24
31.58.164.0/24
31.58.166.0/24
31.59.88.0/24
31.59.122.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:ca:7d:f0:fc:b8:06:b1:b6:c4:e5:26:7e:45:00:ef:20:c6:
c0:46:10:0d:51:ae:03:ec:ee:c2:c4:b8:a8:22:24:a5:75:b7:
e4:6d:9b:8b:c0:56:86:44:a4:cf:f8:25:81:14:30:a9:46:b4:
6b:49:e4:f2:d0:9e:d5:f6:e8:c6:57:d1:30:17:97:dd:d2:56:
3b:15:ed:b4:61:4b:e4:58:ae:ce:a3:75:b9:26:c4:01:ea:ea:
6e:0d:2f:84:86:20:bb:8f:d2:4f:e4:b2:41:16:79:cc:2f:1e:
23:ba:73:ce:8b:35:1f:7e:c6:a7:0e:da:75:12:13:e4:46:66:
ad:38:08:00:a5:1c:16:16:c2:82:60:33:cc:50:26:f8:28:0d:
c3:88:5d:3f:17:13:9c:ab:1f:41:ca:2f:28:83:e9:d9:02:cc:
d4:79:78:64:14:0a:17:2b:df:9b:34:93:ef:84:3e:80:36:36:
2b:4d:3d:c9:b7:ca:6f:03:9f:a2:97:41:16:30:94:df:06:ca:
f2:e1:99:7e:e2:3d:c3:5a:cc:4f:b1:8e:6c:6e:d1:46:80:d6:
09:f2:00:50:d5:0e:1f:cc:95:73:d8:cb:1b:70:bc:ba:76:dc:
4e:c9:a5:06:70:56:11:38:51:2b:d7:ad:12:ed:cc:46:ca:cb:
27:c0:cf:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:57:01 2025 by rpki-client