Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IXrCVD5Smzu20zMO_mDAMIBrA9Q.roa
File: IXrCVD5Smzu20zMO_mDAMIBrA9Q.roa (raw, json)
Hash identifier: oL+Uv7QbtYzTd7lLI8boyFVkT4Sf7lJ5SE2JXWmrVzc=
Subject key identifier: 21:7A:C2:54:3E:52:9B:3B:B6:D3:33:0E:FE:60:C0:30:80:6B:03:D4
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193582E9DA04C97CD78C1BFE4BF7E19356F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IXrCVD5Smzu20zMO_mDAMIBrA9Q.roa
Signing time: Sat 23 Nov 2024 08:41:10 +0000
ROA not before: Sat 23 Nov 2024 08:41:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2914
IP address blocks: 31.56.154.0/24 maxlen: 24
31.56.158.0/24 maxlen: 24
31.56.159.0/24 maxlen: 24
31.56.168.0/24 maxlen: 24
31.56.169.0/24 maxlen: 24
31.56.170.0/24 maxlen: 24
31.56.171.0/24 maxlen: 24
31.56.174.0/24 maxlen: 24
31.56.175.0/24 maxlen: 24
31.57.16.0/22 maxlen: 24
31.57.20.0/22 maxlen: 24
31.57.24.0/22 maxlen: 24
31.57.28.0/22 maxlen: 24
31.57.48.0/22 maxlen: 24
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.92.0/22 maxlen: 24
31.57.96.0/22 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.58.196.0/22 maxlen: 24
31.58.204.0/22 maxlen: 24
31.58.208.0/24 maxlen: 24
31.58.209.0/24 maxlen: 24
31.58.212.0/22 maxlen: 24
31.58.220.0/22 maxlen: 24
31.58.224.0/22 maxlen: 24
217.60.0.0/18 maxlen: 24
217.60.245.0/24 maxlen: 24
217.60.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Dec 2024 16:08:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:2e:9d:a0:4c:97:cd:78:c1:bf:e4:bf:7e:19:35:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 23 08:41:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=217ac2543e529b3bb6d3330efe60c030806b03d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4f:c2:47:ed:d6:65:5c:f9:f2:46:70:76:d6:
d2:04:0c:b3:3e:cd:48:68:58:ae:99:8d:d1:1b:63:
93:bf:22:89:e9:6d:ff:f8:f3:84:83:d9:ba:f1:81:
9a:65:be:c6:49:b9:8b:2a:4d:49:ea:51:99:6a:a4:
2f:d0:ea:f9:53:9b:97:3d:ea:8b:15:68:d6:8f:45:
59:51:7d:06:73:45:13:e8:78:15:6c:bb:f8:e6:12:
3c:58:46:e0:89:dd:d0:98:26:f4:dc:36:71:4e:65:
f3:b8:dd:6c:eb:11:50:d2:86:10:3a:a4:1c:82:24:
a5:5a:95:fc:2f:90:a1:f9:84:d4:62:61:48:d3:21:
3a:d2:66:e7:01:78:38:f3:23:c4:a3:60:db:d4:75:
a2:8d:2d:a0:80:ad:d4:e6:6a:9d:1d:17:73:1c:a8:
ae:6f:5f:04:69:19:19:14:99:33:4b:bb:75:ae:ae:
ac:5c:26:f0:ad:fe:ff:02:b2:1b:b9:a7:00:b2:be:
bf:b1:18:e5:2e:f1:31:d5:a5:44:1c:e6:36:5c:79:
ab:5f:85:05:f7:15:8d:4f:67:e7:46:34:72:74:42:
d2:0d:78:78:61:3c:83:ca:ae:37:b9:72:99:68:57:
68:2e:2b:7f:4e:7c:e5:37:c4:c3:2a:ab:ea:ca:25:
ab:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7A:C2:54:3E:52:9B:3B:B6:D3:33:0E:FE:60:C0:30:80:6B:03:D4
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IXrCVD5Smzu20zMO_mDAMIBrA9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.154.0/24
31.56.158.0/23
31.56.168.0/22
31.56.174.0/23
31.57.16.0/20
31.57.48.0/20
31.57.92.0-31.57.99.255
31.57.120.0/21
31.58.196.0/22
31.58.204.0-31.58.209.255
31.58.212.0/22
31.58.220.0-31.58.227.255
217.60.0.0/18
217.60.245.0/24
217.60.248.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:44:70:11:57:b4:69:c7:17:0a:95:dd:15:1b:ea:78:5b:7b:
52:ab:2a:65:38:00:83:fc:94:7b:f0:78:79:75:aa:31:90:2d:
b3:a5:2c:48:fe:e6:1f:cc:06:63:4f:15:13:79:fe:92:80:76:
28:f6:71:55:1b:11:08:a5:dc:c4:b6:e1:db:42:29:f4:0b:a8:
d0:25:d1:53:24:9b:8a:56:4e:aa:7f:77:76:05:c3:c9:53:52:
eb:48:55:4f:e8:4c:b1:e2:af:75:33:8c:c2:35:9d:f2:47:1a:
61:dd:73:d3:bf:b9:bf:7a:03:92:e8:a5:ae:58:62:b7:c3:f8:
25:d4:c8:78:5f:4d:17:0b:6f:19:d6:e9:8b:83:b6:c2:b3:0e:
2a:39:d0:ed:81:50:88:0d:3d:36:02:33:64:cc:76:21:52:f0:
7a:b6:45:97:fd:45:32:fa:fe:02:9c:bb:ff:bc:fe:0d:61:83:
73:ee:51:05:72:7d:03:cf:ef:30:9f:04:2d:e0:5d:f8:01:b0:
c0:ad:dc:22:f4:5e:55:5d:95:10:a0:ec:c6:7c:97:52:42:a5:
bb:b9:7e:1a:51:14:59:b2:a9:57:e2:e0:ed:f2:17:68:c6:1d:
5e:e5:e1:fb:b0:15:e7:9c:b2:e3:bd:86:8b:0b:6d:d4:fc:d4:
7a:74:62:be
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:48:42 2025 by rpki-client