Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/In8Mej_kNdxNBydPRjgDpjFInqM.roa
File: In8Mej_kNdxNBydPRjgDpjFInqM.roa (raw, json)
Hash identifier: QUFd9oB7IKk48+Vi2bMtfgS9sVFYr08frv/XKpp88dg=
Subject key identifier: 22:7F:0C:7A:3F:E4:35:DC:4D:07:27:4F:46:38:03:A6:31:48:9E:A3
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01955B9A65D35A8D014E141774002AE8ADDF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/In8Mej_kNdxNBydPRjgDpjFInqM.roa
Signing time: Mon 03 Mar 2025 10:43:19 +0000
ROA not before: Mon 03 Mar 2025 10:43:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 31.56.154.0/24 maxlen: 24
31.56.158.0/24 maxlen: 24
31.56.159.0/24 maxlen: 24
31.56.168.0/24 maxlen: 24
31.56.169.0/24 maxlen: 24
31.56.170.0/24 maxlen: 24
31.56.171.0/24 maxlen: 24
31.56.174.0/24 maxlen: 24
31.56.175.0/24 maxlen: 24
31.57.24.0/22 maxlen: 24
31.57.28.0/22 maxlen: 24
31.57.48.0/22 maxlen: 24
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.196.0/22 maxlen: 24
31.58.204.0/22 maxlen: 24
31.58.208.0/23 maxlen: 24
31.58.212.0/22 maxlen: 24
31.58.232.0/23 maxlen: 24
31.59.120.0/22 maxlen: 24
217.60.0.0/21 maxlen: 24
217.60.8.0/21 maxlen: 24
217.60.24.0/22 maxlen: 24
217.60.32.0/21 maxlen: 24
217.60.44.0/22 maxlen: 24
217.60.56.0/21 maxlen: 24
217.60.188.0/22 maxlen: 24
217.60.192.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Mar 2025 17:55:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5b:9a:65:d3:5a:8d:01:4e:14:17:74:00:2a:e8:ad:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 3 10:43:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=227f0c7a3fe435dc4d07274f463803a631489ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ba:9a:8e:a5:7c:dc:ea:3e:fd:83:c4:c7:30:
74:21:77:39:37:f6:ee:0b:ee:3a:4a:51:35:29:8e:
3f:3b:c5:63:d5:77:f8:39:bb:9f:9a:cd:49:7f:e9:
c9:43:e8:fd:5b:59:e9:d6:92:1c:6a:44:76:7b:57:
c4:95:02:34:0b:a4:d6:79:ae:4b:e7:2d:e1:fc:ac:
a6:19:b2:49:e1:5f:c5:20:aa:d8:6d:26:f6:8c:a3:
8d:39:46:3e:21:34:73:61:f9:b0:75:36:f6:d7:81:
30:f0:85:bc:43:7d:55:a3:17:ad:15:59:bf:37:9c:
8c:70:3d:21:92:46:09:c3:cf:c6:c9:d2:91:07:6c:
a7:a6:02:58:cb:96:01:87:bd:91:a3:d2:ef:0d:c8:
fe:dc:92:45:2f:b1:9f:bd:00:a9:01:df:e4:bb:cc:
43:bd:a0:bb:80:23:de:4a:a5:b7:53:23:3a:bb:04:
4d:6d:02:a8:db:9c:55:7d:8e:61:b9:ca:8a:7c:90:
ed:d2:41:f7:6e:35:b6:b0:af:aa:50:35:bf:cf:ed:
51:bd:38:c3:98:a0:29:7e:49:bb:08:ad:5a:ab:ad:
d9:a5:3e:cb:52:7d:51:4b:f8:3a:61:db:da:38:0c:
db:c2:23:0a:bd:53:3e:6e:f7:04:bb:4a:b6:d3:fb:
72:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7F:0C:7A:3F:E4:35:DC:4D:07:27:4F:46:38:03:A6:31:48:9E:A3
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/In8Mej_kNdxNBydPRjgDpjFInqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.154.0/24
31.56.158.0/23
31.56.168.0/22
31.56.174.0/23
31.57.24.0/21
31.57.48.0/20
31.57.120.0/21
31.58.34.0/23
31.58.196.0/22
31.58.204.0-31.58.209.255
31.58.212.0/22
31.58.232.0/23
31.59.120.0/22
217.60.0.0/20
217.60.24.0/22
217.60.32.0/21
217.60.44.0/22
217.60.56.0/21
217.60.188.0-217.60.195.255
Signature Algorithm: sha256WithRSAEncryption
75:9a:f0:b7:f8:46:52:64:52:f2:eb:f9:29:13:fd:69:fc:af:
04:a4:fd:32:ff:cf:20:15:23:0b:1f:cb:85:27:b4:a3:ab:56:
ce:7a:f4:56:55:f2:fa:a8:52:77:89:86:6c:85:ba:26:7d:04:
5e:8a:75:bf:02:35:e5:47:86:0c:48:83:4e:55:2a:16:bb:e7:
d0:c0:43:37:67:2b:e3:4f:e3:00:ca:51:a4:40:8b:c2:06:c5:
72:eb:4b:9c:2a:c7:63:b3:52:df:cd:65:9b:59:8e:39:f8:fd:
7e:d5:69:f0:e7:f6:10:a2:9a:b7:40:da:3b:c8:11:f5:7b:c7:
c4:fd:4c:57:1f:05:26:cf:11:f0:d2:03:c7:2a:c4:56:93:24:
71:30:28:b5:29:cb:e5:f9:1d:6f:07:87:d1:01:94:c4:90:9b:
22:a8:f2:93:69:98:c4:0e:16:47:ad:70:0b:f1:7f:1a:11:14:
1a:52:bb:ec:d2:7e:d6:36:ad:96:d1:db:19:3b:35:90:48:22:
ad:f2:4e:fa:02:af:7d:da:52:50:43:89:c7:93:4b:ce:59:25:
0d:76:17:62:47:b6:eb:c0:9d:c6:52:59:9b:bb:ce:c5:db:77:
2d:39:6b:68:6e:8e:70:eb:b4:eb:a6:fb:d6:11:23:b2:e4:b5:
23:3c:65:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:50:49 2025 by rpki-client