Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IFFuJ_pUyE6bz9t_RZtTXFejoRM.roa
File: IFFuJ_pUyE6bz9t_RZtTXFejoRM.roa (raw, json)
Hash identifier: gyVk7p5bFr2cNFXhe3WubE9MNLH1LGueXenBX4VbEJk=
Subject key identifier: 20:51:6E:27:FA:54:C8:4E:9B:CF:DB:7F:45:9B:53:5C:57:A3:A1:13
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019354D4C5123EABDD98226AB07C91CC8977
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IFFuJ_pUyE6bz9t_RZtTXFejoRM.roa
Signing time: Fri 22 Nov 2024 17:04:10 +0000
ROA not before: Fri 22 Nov 2024 17:04:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 31.56.112.0/21 maxlen: 24
31.56.114.0/23 maxlen: 23
31.56.118.0/23 maxlen: 23
31.57.11.0/24 maxlen: 24
31.57.131.0/24 maxlen: 24
31.57.150.0/24 maxlen: 24
31.57.176.0/24 maxlen: 24
31.57.178.0/24 maxlen: 24
31.57.179.0/24 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.182.0/24 maxlen: 24
31.57.183.0/24 maxlen: 24
31.57.194.0/24 maxlen: 24
31.57.224.0/22 maxlen: 23
31.57.252.0/22 maxlen: 23
31.58.59.0/24 maxlen: 24
31.58.129.0/24 maxlen: 24
31.58.142.0/24 maxlen: 24
31.58.146.0/24 maxlen: 24
31.58.152.0/22 maxlen: 22
31.58.167.0/24 maxlen: 24
31.58.176.0/22 maxlen: 22
31.58.200.0/22 maxlen: 22
31.58.216.0/22 maxlen: 22
31.58.240.0/22 maxlen: 22
31.58.252.0/22 maxlen: 22
31.59.41.0/24 maxlen: 24
31.59.56.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.58.0/24 maxlen: 24
31.59.64.0/22 maxlen: 22
31.59.80.0/22 maxlen: 22
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.124.0/22 maxlen: 22
31.59.176.0/22 maxlen: 22
31.59.180.0/22 maxlen: 22
31.59.184.0/22 maxlen: 22
31.59.188.0/22 maxlen: 22
31.59.192.0/22 maxlen: 22
31.59.216.0/22 maxlen: 24
31.59.228.0/24 maxlen: 24
31.59.229.0/24 maxlen: 24
31.59.231.0/24 maxlen: 24
31.59.244.0/24 maxlen: 24
31.59.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Nov 2024 09:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:d4:c5:12:3e:ab:dd:98:22:6a:b0:7c:91:cc:89:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 22 17:04:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=20516e27fa54c84e9bcfdb7f459b535c57a3a113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:15:99:6a:de:07:27:e6:61:a6:2a:0c:94:7e:
73:df:d8:c6:ad:17:8f:97:d2:21:50:7c:18:63:25:
bf:6d:92:36:45:d7:5a:44:a1:95:e0:d8:b0:24:3a:
ac:bc:1b:76:72:15:87:ce:49:27:c4:f5:f8:72:51:
5a:6a:77:a3:01:e0:20:eb:fe:ac:2a:0a:4f:35:dd:
c8:9d:0a:bd:7f:84:42:ba:a3:e8:3b:56:6b:ad:da:
e2:23:90:f6:bf:d2:9e:1e:41:af:55:4a:f4:9c:d9:
1e:8a:35:90:27:a7:3e:3d:b6:14:e2:69:49:fb:cc:
26:0e:ad:4d:e3:77:9d:3d:1c:b3:b4:b0:d8:81:a9:
90:41:fc:50:2e:00:1b:59:78:db:96:11:20:97:54:
e8:a3:29:57:9b:01:ec:6e:9a:d0:f9:7d:1c:c6:b9:
8d:d3:04:87:60:93:ac:a5:29:b9:7a:77:f0:e6:ec:
a7:35:70:64:91:dd:97:38:7f:38:ca:05:09:98:49:
11:a6:80:de:f5:00:0f:31:21:e4:04:6b:b0:96:a8:
70:25:6d:4b:9b:84:c0:74:a6:3b:8f:32:2f:28:37:
1a:81:fd:63:b1:b1:15:1d:11:19:20:06:e8:3e:28:
27:b8:84:7b:7f:c2:72:05:3f:d8:05:ce:04:bc:37:
d6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:51:6E:27:FA:54:C8:4E:9B:CF:DB:7F:45:9B:53:5C:57:A3:A1:13
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IFFuJ_pUyE6bz9t_RZtTXFejoRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.112.0/21
31.57.11.0/24
31.57.131.0/24
31.57.150.0/24
31.57.176.0/24
31.57.178.0/23
31.57.181.0-31.57.183.255
31.57.194.0/24
31.57.224.0/22
31.57.252.0/22
31.58.59.0/24
31.58.129.0/24
31.58.142.0/24
31.58.146.0/24
31.58.152.0/22
31.58.167.0/24
31.58.176.0/22
31.58.200.0/22
31.58.216.0/22
31.58.240.0/22
31.58.252.0/22
31.59.41.0/24
31.59.56.0-31.59.58.255
31.59.64.0/22
31.59.80.0/22
31.59.96.0/22
31.59.112.0/22
31.59.124.0/22
31.59.176.0-31.59.195.255
31.59.216.0/22
31.59.228.0/23
31.59.231.0/24
31.59.244.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:53:c5:4b:6c:1d:fa:ca:06:78:a6:c0:a4:6b:c3:e4:d5:9b:
7e:aa:3a:03:92:09:10:c8:87:c5:25:de:16:5f:83:eb:ab:c8:
a4:65:b5:b4:db:f4:b8:8d:a7:99:ea:cb:51:ec:27:2d:9b:82:
48:90:74:2e:b9:c5:37:d3:7e:9e:6c:b7:e8:d5:ee:95:08:4b:
85:1a:6c:fe:8b:1a:03:5e:b8:38:68:0b:83:fc:63:56:12:d3:
7f:e7:3e:d3:8b:20:24:65:d9:e7:2f:95:f3:b5:b6:78:00:6c:
71:03:2f:18:2b:b2:81:96:03:e1:7f:37:eb:5a:37:b5:4d:f4:
cc:30:74:71:fd:d0:0f:fe:cb:c0:09:be:be:4f:7c:bf:fa:6b:
46:2f:72:08:11:de:0a:9c:be:bb:9b:1d:b8:3b:e8:1d:df:07:
1d:95:f3:90:53:d0:6d:64:9b:fe:2c:ea:be:63:04:35:35:20:
b2:7b:9c:d2:23:81:50:d7:eb:e5:e1:a6:39:22:4f:fd:72:4c:
ea:e1:c4:f6:20:78:1e:19:d2:57:ec:34:dd:78:b3:bd:09:9d:
31:6c:ee:41:15:cd:39:cf:79:00:4d:51:3f:b9:50:26:61:8e:
1a:da:fc:18:a2:d5:68:af:86:44:70:dc:4b:58:67:5b:06:f9:
5e:14:96:aa
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgISAZNU1MUSPqvdmCJqsHyRzIl3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMTIyMTcwNDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDUxNmUyN2ZhNTRjODRlOWJjZmRiN2Y0NTliNTM1YzU3YTNhMTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxWZat4HJ+ZhpioMlH5z39jGrReP
l9IhUHwYYyW/bZI2RddaRKGV4NiwJDqsvBt2chWHzkknxPX4clFaanejAeAg6/6s
KgpPNd3InQq9f4RCuqPoO1ZrrdriI5D2v9KeHkGvVUr0nNkeijWQJ6c+PbYU4mlJ
+8wmDq1N43edPRyztLDYgamQQfxQLgAbWXjblhEgl1TooylXmwHsbprQ+X0cxrmN
0wSHYJOspSm5enfw5uynNXBkkd2XOH84ygUJmEkRpoDe9QAPMSHkBGuwlqhwJW1L
m4TAdKY7jzIvKDcagf1jsbEVHREZIAboPignuIR7f8JyBT/YBc4EvDfWVwIDAQAB
o4IC5jCCAuIwHQYDVR0OBBYEFCBRbif6VMhOm8/bf0WbU1xXo6ETMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvSUZGdUpfcFV5RTZiejl0X1JadFRYRmVqb1JNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIH7BggrBgEFBQcBBwEB/wSB6zCB6DCB5QQCAAEwgd4DBAMf
OHADBAAfOQsDBAAfOYMDBAAfOZYDBAAfObADBAEfObIwDAMEAB85tQMEAx85sAME
AB85wgMEAh854AMEAh85/AMEAB86OwMEAB86gQMEAB86jgMEAB86kgMEAh86mAME
AB86pwMEAh86sAMEAh86yAMEAh862AMEAh868AMEAh86/AMEAB87KTAMAwQDHzs4
AwQAHzs6AwQCHztAAwQCHztQAwQCHztgAwQCHztwAwQCHzt8MAwDBAQfO7ADBAIf
O8ADBAIfO9gDBAEfO+QDBAAfO+cDBAEfO/QwDQYJKoZIhvcNAQELBQADggEBAHtT
xUtsHfrKBnimwKRrw+TVm36qOgOSCRDIh8Ul3hZfg+uryKRltbTb9LiNp5nqy1Hs
Jy2bgkiQdC65xTfTfp5st+jV7pUIS4UabP6LGgNeuDhoC4P8Y1YS03/nPtOLICRl
2ecvlfO1tngAbHEDLxgrsoGWA+F/N+taN7VN9MwwdHH90A/+y8AJvr5PfL/6a0Yv
cggR3gqcvrubHbg76B3fBx2V85BT0G1km/4s6r5jBDU1ILJ7nNIjgVDX6+Xhpjki
T/1yTOrhxPYgeB4Z0lfsNN14s70JnTFs7kEVzTnPeQBNUT+5UCZhjhra/Bii1Wiv
hkRw3EtYZ1sG+V4Ulqo=
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:14 2025 by rpki-client