Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JWzG0_-JnAy8MV5axkQ8tczqkLs.roa
File: JWzG0_-JnAy8MV5axkQ8tczqkLs.roa (raw, json)
Hash identifier: uXgMwke6w1p6QUreuHSy04dWz4hGi2kdvFnsvvKMdoA=
Subject key identifier: 25:6C:C6:D3:FF:89:9C:0C:BC:31:5E:5A:C6:44:3C:B5:CC:EA:90:BB
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194F459F46A672AA463CEC4468EBC3537E4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JWzG0_-JnAy8MV5axkQ8tczqkLs.roa
Signing time: Tue 11 Feb 2025 09:32:03 +0000
ROA not before: Tue 11 Feb 2025 09:32:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 31.56.62.0/24 maxlen: 24
31.56.87.0/24 maxlen: 24
31.56.122.0/24 maxlen: 24
31.57.65.0/24 maxlen: 24
31.57.222.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Mar 2025 06:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f4:59:f4:6a:67:2a:a4:63:ce:c4:46:8e:bc:35:37:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 11 09:32:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=256cc6d3ff899c0cbc315e5ac6443cb5ccea90bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2a:48:05:71:52:55:de:4b:4e:cb:6d:5c:48:
b8:bc:3e:df:e0:d0:40:c9:fc:a3:dc:0e:05:79:88:
ce:5b:18:ac:ae:13:b5:23:71:c6:ba:96:94:5d:fb:
66:2c:cf:1b:e5:29:a9:ff:47:15:4d:84:0b:b6:82:
50:ea:8d:12:6c:e8:0e:6a:fe:9e:8c:31:5f:1d:c0:
e9:ea:d9:57:c3:03:e8:d2:20:58:3d:cc:f0:05:6c:
83:5d:32:3b:49:5e:56:bb:93:88:8a:6e:ce:37:82:
a4:b8:ba:c7:7b:84:6c:5b:f0:7f:a6:3f:34:55:6d:
6f:63:73:e5:7a:80:9c:46:e2:da:d7:aa:f5:4b:c1:
9d:0d:15:b6:0e:7c:10:0d:bf:77:27:56:94:ad:d0:
6e:51:aa:a4:19:80:8d:ff:ae:20:7d:d1:3d:10:ba:
d7:e2:4e:d9:84:01:4f:2e:f4:56:37:72:d6:78:b6:
3b:eb:b6:29:d1:f7:81:d7:93:a0:88:54:94:58:65:
05:07:6a:45:62:02:b8:d5:92:10:56:70:e6:93:5d:
f5:d5:7d:be:41:6c:6e:4c:c0:c2:15:77:60:a6:02:
41:e7:e2:16:6c:45:56:80:7c:95:08:c6:36:d4:53:
61:f4:ba:33:38:3d:9b:2e:dd:56:aa:f7:bb:78:6a:
af:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6C:C6:D3:FF:89:9C:0C:BC:31:5E:5A:C6:44:3C:B5:CC:EA:90:BB
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JWzG0_-JnAy8MV5axkQ8tczqkLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.62.0/24
31.56.87.0/24
31.56.122.0/24
31.57.65.0/24
31.57.222.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:d7:bd:27:c9:02:45:82:70:be:1c:0c:f8:ce:0d:79:1d:ff:
ba:8f:e9:c9:4f:82:81:b4:59:a3:da:51:46:1a:df:4a:95:a9:
c4:33:40:06:5f:6c:63:ea:d3:60:fa:c1:c0:d1:bd:53:ab:d5:
34:29:ca:37:39:12:b4:9c:0f:10:61:db:b9:7d:e8:c2:41:b9:
87:56:45:1a:f9:06:c0:9c:3f:cc:83:d6:c8:0c:0a:01:2b:48:
7f:0e:ba:0e:1b:d9:32:42:cc:58:4a:dd:d2:0e:c6:48:bf:3a:
9b:f1:62:bd:0a:64:73:aa:cf:89:8e:24:eb:73:3a:d3:b7:46:
23:7d:04:5f:e7:0f:ec:e6:67:dd:bc:63:da:69:9f:9c:e6:f7:
34:a9:8e:a2:8a:80:d2:d6:35:5b:68:14:03:dc:97:01:87:01:
40:a7:41:95:c9:8f:0f:7f:88:69:93:07:cb:be:99:4e:c3:25:
c2:b5:11:d4:1d:8f:f9:33:48:0b:6e:55:c5:ab:7b:8a:0b:28:
3e:cb:e2:90:69:0d:cd:0a:d2:b9:67:f5:2c:f1:65:24:fa:67:
bb:98:a3:56:bb:05:22:2e:80:fe:34:0d:c8:85:e1:ce:ff:b6:
9e:d6:e8:59:ae:91:5a:47:bd:91:87:5b:a1:04:03:3e:21:95:
4e:ae:ae:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:03:41 2025 by rpki-client