Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JqK8RpAyRQRHH3CABRby26NMLFo.roa
File: JqK8RpAyRQRHH3CABRby26NMLFo.roa (raw, json)
Hash identifier: nboRD+/YRJoGs4fE7Yxn4D7uxW0gMaFTBoc1sbAoQmQ=
Subject key identifier: 26:A2:BC:46:90:32:45:04:47:1F:70:80:05:16:F2:DB:A3:4C:2C:5A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01954CC20B162E5940D24B468E2F1E81283B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JqK8RpAyRQRHH3CABRby26NMLFo.roa
Signing time: Fri 28 Feb 2025 13:32:19 +0000
ROA not before: Fri 28 Feb 2025 13:32:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 31.56.154.0/24 maxlen: 24
31.56.158.0/24 maxlen: 24
31.56.159.0/24 maxlen: 24
31.56.168.0/24 maxlen: 24
31.56.169.0/24 maxlen: 24
31.56.170.0/24 maxlen: 24
31.56.171.0/24 maxlen: 24
31.56.174.0/24 maxlen: 24
31.56.175.0/24 maxlen: 24
31.57.24.0/22 maxlen: 24
31.57.28.0/22 maxlen: 24
31.57.48.0/22 maxlen: 24
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.196.0/22 maxlen: 24
31.58.204.0/22 maxlen: 24
31.58.208.0/23 maxlen: 24
31.58.212.0/22 maxlen: 24
31.58.232.0/23 maxlen: 24
31.59.120.0/22 maxlen: 24
217.60.0.0/18 maxlen: 24
217.60.1.0/24 maxlen: 24
217.60.5.0/24 maxlen: 24
217.60.11.0/24 maxlen: 24
217.60.13.0/24 maxlen: 24
217.60.24.0/24 maxlen: 24
217.60.25.0/24 maxlen: 24
217.60.26.0/24 maxlen: 24
217.60.27.0/24 maxlen: 24
217.60.188.0/22 maxlen: 24
217.60.192.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Mar 2025 09:38:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4c:c2:0b:16:2e:59:40:d2:4b:46:8e:2f:1e:81:28:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 28 13:32:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26a2bc4690324504471f70800516f2dba34c2c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fd:fd:b1:f1:c3:c3:82:b8:40:fb:04:13:04:
86:ed:74:cc:13:6d:ff:2d:4d:82:9a:37:e4:c5:db:
5b:5d:15:9d:d8:a3:3c:d1:12:5b:18:35:3a:16:c9:
15:39:d1:ef:48:2c:f3:ca:23:f2:a7:9e:32:f3:73:
47:63:26:e0:d1:c3:01:d7:6a:bd:2d:21:2a:8d:39:
66:35:bd:1d:5a:a9:49:88:10:0e:a2:f0:80:db:ce:
45:c5:7c:42:f4:2a:a6:4f:87:76:1b:e1:a4:fc:c1:
0d:ca:7d:37:a9:ee:5b:ba:29:a7:0b:5b:7e:72:90:
21:af:94:b4:85:6f:c8:52:92:8b:9e:cf:4a:4f:1a:
e6:16:25:44:6c:c0:31:32:33:05:16:29:d7:d3:92:
df:24:b2:dc:ca:bd:3d:51:b6:d5:6c:90:ff:7f:00:
99:4b:ec:36:d6:a7:b7:8e:59:26:81:14:a0:9d:3c:
18:a3:ad:12:37:d2:8e:d3:b1:ab:12:07:42:bc:c5:
4a:98:d7:ac:67:3a:2f:57:48:49:97:ba:ec:49:82:
b9:bf:92:74:b6:b7:69:ea:63:25:41:27:49:2b:9e:
fc:94:77:e2:1c:85:14:ca:30:aa:28:76:cd:53:49:
76:3e:c4:b8:5e:3e:13:24:cc:1c:99:c6:91:ec:d9:
2d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A2:BC:46:90:32:45:04:47:1F:70:80:05:16:F2:DB:A3:4C:2C:5A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JqK8RpAyRQRHH3CABRby26NMLFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.154.0/24
31.56.158.0/23
31.56.168.0/22
31.56.174.0/23
31.57.24.0/21
31.57.48.0/20
31.57.120.0/21
31.58.34.0/23
31.58.196.0/22
31.58.204.0-31.58.209.255
31.58.212.0/22
31.58.232.0/23
31.59.120.0/22
217.60.0.0/18
217.60.188.0-217.60.195.255
Signature Algorithm: sha256WithRSAEncryption
82:f9:5e:bf:52:a0:90:ab:49:23:03:94:21:fd:a7:09:f6:5b:
1d:6e:54:1f:38:cf:77:ee:de:c1:82:4e:df:dd:ce:d7:2a:ee:
e7:4c:a2:a9:b7:fc:6a:f9:95:fe:59:01:a6:9a:9c:75:ed:b6:
2e:fc:fe:5c:0f:af:0d:8c:cd:db:bf:01:fb:af:7e:1c:ee:2e:
6d:fc:51:3c:af:e6:28:21:1e:80:f9:26:2c:37:30:02:31:ba:
cc:b1:ea:21:a6:0b:ae:0b:53:60:6e:9f:2f:c2:f4:eb:6a:a2:
76:ad:7a:19:81:1c:57:68:92:e3:87:18:7b:4f:e3:db:a3:6a:
2f:9c:04:89:b3:11:24:a7:b9:9d:a0:85:bf:53:11:be:8b:b8:
3f:3a:a9:2c:87:fe:fb:f7:aa:b7:25:46:df:e3:7b:8d:cc:ee:
b8:94:8a:23:9d:19:dd:13:ed:89:d0:33:16:76:1e:a9:82:10:
ab:16:c6:1e:e5:a2:d8:d8:1b:6c:e4:03:00:71:4f:d0:cb:61:
de:b3:cc:ea:8c:e0:04:e4:9a:56:fc:b6:23:1c:a0:27:56:49:
ba:bb:59:23:5b:99:f1:0c:96:cd:9e:a7:b2:87:52:40:ee:0c:
a5:ef:41:4f:63:8b:4c:63:a1:95:3d:50:ea:d7:01:3c:4b:03:
47:f1:28:28
-----BEGIN CERTIFICATE-----
MIIFYjCCBEqgAwIBAgISAZVMwgsWLllA0ktGji8egSg7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMjI4MTMzMjE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmEyYmM0NjkwMzI0NTA0NDcxZjcwODAwNTE2ZjJkYmEzNGMyYzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArf39sfHDw4K4QPsEEwSG7XTME23/
LU2CmjfkxdtbXRWd2KM80RJbGDU6FskVOdHvSCzzyiPyp54y83NHYybg0cMB12q9
LSEqjTlmNb0dWqlJiBAOovCA285FxXxC9CqmT4d2G+Gk/MENyn03qe5buimnC1t+
cpAhr5S0hW/IUpKLns9KTxrmFiVEbMAxMjMFFinX05LfJLLcyr09UbbVbJD/fwCZ
S+w21qe3jlkmgRSgnTwYo60SN9KO07GrEgdCvMVKmNesZzovV0hJl7rsSYK5v5J0
trdp6mMlQSdJK578lHfiHIUUyjCqKHbNU0l2PsS4Xj4TJMwcmcaR7Nkt6wIDAQAB
o4ICbjCCAmowHQYDVR0OBBYEFCaivEaQMkUERx9wgAUW8tujTCxaMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvSnFLOFJwQXlSUVJISDNDQUJSYnkyNk5NTEZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGDBggrBgEFBQcBBwEB/wR0MHIwcAQCAAEwagMEAB84mgME
AR84ngMEAh84qAMEAR84rgMEAx85GAMEBB85MAMEAx85eAMEAR86IgMEAh86xDAM
AwQCHzrMAwQBHzrQAwQCHzrUAwQBHzroAwQCHzt4AwQG2TwAMAwDBALZPLwDBALZ
PMAwDQYJKoZIhvcNAQELBQADggEBAIL5Xr9SoJCrSSMDlCH9pwn2Wx1uVB84z3fu
3sGCTt/dztcq7udMoqm3/Gr5lf5ZAaaanHXtti78/lwPrw2Mzdu/AfuvfhzuLm38
UTyv5ighHoD5Jiw3MAIxusyx6iGmC64LU2Buny/C9OtqonatehmBHFdokuOHGHtP
49ujai+cBImzESSnuZ2ghb9TEb6LuD86qSyH/vv3qrclRt/je43M7riUiiOdGd0T
7YnQMxZ2HqmCEKsWxh7lotjYG2zkAwBxT9DLYd6zzOqM4ATkmlb8tiMcoCdWSbq7
WSNbmfEMls2ep7KHUkDuDKXvQU9ji0xjoZU9UOrXATxLA0fxKCg=
-----END CERTIFICATE-----
Generated at Fri Apr 18 09:50:47 2025 by rpki-client