Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/M59ipAX9l2mOaJL3UtoR3F41aUo.roa
File: M59ipAX9l2mOaJL3UtoR3F41aUo.roa (raw, json)
Hash identifier: OEy/32o3b3PmvwTe9I4nifZpJRmuq1ZAr9kY+WmsyfQ=
Subject key identifier: 33:9F:62:A4:05:FD:97:69:8E:68:92:F7:52:DA:11:DC:5E:35:69:4A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019571877F200764A96F37097AEDF62368BB
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/M59ipAX9l2mOaJL3UtoR3F41aUo.roa
Signing time: Fri 07 Mar 2025 16:54:20 +0000
ROA not before: Fri 07 Mar 2025 16:54:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 31.56.88.0/24 maxlen: 24
31.56.112.0/21 maxlen: 24
31.57.11.0/24 maxlen: 24
31.57.131.0/24 maxlen: 24
31.57.150.0/24 maxlen: 24
31.57.176.0/24 maxlen: 24
31.57.194.0/24 maxlen: 24
31.58.59.0/24 maxlen: 24
31.58.103.0/24 maxlen: 24
31.58.146.0/24 maxlen: 24
31.59.14.0/24 maxlen: 24
31.59.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Mar 2025 19:41:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:71:87:7f:20:07:64:a9:6f:37:09:7a:ed:f6:23:68:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 7 16:54:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=339f62a405fd97698e6892f752da11dc5e35694a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5f:cf:9f:a3:1f:a6:e6:8c:fa:39:c5:aa:ec:
89:b0:2a:e2:0a:8e:be:23:50:e0:fa:e2:d4:5f:b3:
d0:a3:89:37:dc:93:10:b7:fa:36:6f:05:d0:bf:ce:
ff:30:5f:dd:a3:df:95:1d:49:cd:63:39:ca:3e:48:
05:64:ae:bf:c8:23:37:b4:c2:f6:99:02:51:f1:79:
de:0d:4e:1f:ce:c8:d1:e9:ff:b1:29:a6:8f:84:66:
a2:ce:c9:2c:c4:ce:f4:f8:47:6e:d9:f0:33:6b:42:
0d:d9:b9:9e:e3:51:7b:eb:6a:bf:b2:65:9f:8b:81:
b5:cb:d7:b4:ee:1f:05:4e:3c:a9:94:bb:ad:92:88:
c7:f5:03:39:db:72:15:9d:20:f0:b5:d1:5b:02:9f:
ed:78:eb:73:53:f0:0d:0c:62:5c:83:bd:71:a9:25:
fd:f7:31:86:16:c9:b0:75:58:5e:1b:62:f1:51:93:
15:32:75:7a:c9:13:aa:9e:7d:29:6d:fc:a3:7a:f9:
8c:9b:82:f2:68:c5:ce:4c:8e:b8:a9:f6:ca:31:ac:
b8:77:81:43:82:5f:02:24:a1:e1:6e:75:4f:5c:43:
bd:82:25:89:08:f7:9d:68:2e:d2:d2:4d:a1:40:d3:
9d:90:0e:1d:29:d7:d9:5c:5f:fd:4d:9e:6c:9b:d4:
4e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9F:62:A4:05:FD:97:69:8E:68:92:F7:52:DA:11:DC:5E:35:69:4A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/M59ipAX9l2mOaJL3UtoR3F41aUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.88.0/24
31.56.112.0/21
31.57.11.0/24
31.57.131.0/24
31.57.150.0/24
31.57.176.0/24
31.57.194.0/24
31.58.59.0/24
31.58.103.0/24
31.58.146.0/24
31.59.14.0/24
31.59.30.0/24
Signature Algorithm: sha256WithRSAEncryption
78:45:2a:9b:44:d8:a8:fc:14:02:f6:00:d8:25:39:a8:0c:6e:
23:e4:2d:2c:2a:94:1c:05:e3:14:66:bd:eb:d2:95:c0:91:e4:
cb:90:ae:4d:02:83:53:1d:20:43:e2:18:ac:f1:b3:17:5e:24:
1b:d8:23:a9:1a:18:28:34:d2:99:de:d5:3f:e1:56:e6:cc:64:
d7:cf:1b:5d:9e:ea:e0:98:ee:24:f7:77:50:cc:16:ee:3e:36:
0a:35:d2:70:8d:1c:a4:28:b3:d0:56:49:7f:b3:77:21:14:08:
5d:fa:87:2a:ec:e5:b9:b4:54:2c:fc:3f:31:b2:4d:9a:36:3c:
fd:6b:43:3d:e4:5a:35:51:f3:bf:7e:97:12:c6:e3:20:8f:0c:
2d:55:bf:e4:18:42:23:26:ca:5e:0c:d1:64:91:48:07:99:cd:
49:95:10:0f:ab:6f:34:78:b8:ea:c8:c5:83:37:9f:c1:fb:a0:
b2:48:41:00:1b:1a:d3:dc:a4:f4:49:38:51:c0:5e:e8:1d:9a:
15:a9:c9:28:9b:a8:5b:38:14:a2:98:14:83:37:e2:6e:12:22:
25:c5:d4:60:a8:09:ad:9b:e6:c7:01:87:ab:85:4f:12:e4:f7:
0f:37:dc:d7:71:0b:91:a5:d9:8d:c3:41:52:d0:a0:ab:d1:18:
de:a5:75:cf
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgISAZVxh38gB2SpbzcJeu32I2i7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMzA3MTY1NDIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzlmNjJhNDA1ZmQ5NzY5OGU2ODkyZjc1MmRhMTFkYzVlMzU2OTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwF/Pn6MfpuaM+jnFquyJsCriCo6+
I1Dg+uLUX7PQo4k33JMQt/o2bwXQv87/MF/do9+VHUnNYznKPkgFZK6/yCM3tML2
mQJR8XneDU4fzsjR6f+xKaaPhGaizsksxM70+Edu2fAza0IN2bme41F762q/smWf
i4G1y9e07h8FTjyplLutkojH9QM523IVnSDwtdFbAp/teOtzU/ANDGJcg71xqSX9
9zGGFsmwdVheG2LxUZMVMnV6yROqnn0pbfyjevmMm4LyaMXOTI64qfbKMay4d4FD
gl8CJKHhbnVPXEO9giWJCPedaC7S0k2hQNOdkA4dKdfZXF/9TZ5sm9ROXQIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFDOfYqQF/ZdpjmiS91LaEdxeNWlKMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvTTU5aXBBWDlsMm1PYUpMM1V0b1IzRjQxYVVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQAHzhYAwQD
HzhwAwQAHzkLAwQAHzmDAwQAHzmWAwQAHzmwAwQAHznCAwQAHzo7AwQAHzpnAwQA
HzqSAwQAHzsOAwQAHzseMA0GCSqGSIb3DQEBCwUAA4IBAQB4RSqbRNio/BQC9gDY
JTmoDG4j5C0sKpQcBeMUZr3r0pXAkeTLkK5NAoNTHSBD4his8bMXXiQb2COpGhgo
NNKZ3tU/4VbmzGTXzxtdnurgmO4k93dQzBbuPjYKNdJwjRykKLPQVkl/s3chFAhd
+ocq7OW5tFQs/D8xsk2aNjz9a0M95Fo1UfO/fpcSxuMgjwwtVb/kGEIjJspeDNFk
kUgHmc1JlRAPq280eLjqyMWDN5/B+6CySEEAGxrT3KT0SThRwF7oHZoVqckom6hb
OBSimBSDN+JuEiIlxdRgqAmtm+bHAYerhU8S5PcPN9zXcQuRpdmNw0FS0KCr0Rje
pXXP
-----END CERTIFICATE-----
Generated at Fri Apr 18 09:50:46 2025 by rpki-client