Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Na-uu0RFaISyXDdmK3JsN_CUcks.roa
File: Na-uu0RFaISyXDdmK3JsN_CUcks.roa (raw, json)
Hash identifier: 7hTy00Tq1+IvM5gzjDPDimhNgfowUHlU57QaTddty8E=
Subject key identifier: 35:AF:AE:BB:44:45:68:84:B2:5C:37:66:2B:72:6C:37:F0:94:72:4B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01941D744E8060AA72DDAA9566713ACDFBF3
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Na-uu0RFaISyXDdmK3JsN_CUcks.roa
Signing time: Tue 31 Dec 2024 16:02:29 +0000
ROA not before: Tue 31 Dec 2024 16:02:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214654
IP address blocks: 31.56.200.0/24 maxlen: 24
31.56.202.0/24 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.215.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.221.0/24 maxlen: 24
31.57.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1d:74:4e:80:60:aa:72:dd:aa:95:66:71:3a:cd:fb:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 31 16:02:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35afaebb44456884b25c37662b726c37f094724b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:78:cc:75:03:68:9e:aa:18:d9:73:95:8c:73:
51:80:d9:6f:85:c4:d5:ae:2c:12:4b:b3:55:cf:32:
f8:e9:a6:4d:41:f6:47:81:16:ce:ae:a4:1c:f7:61:
81:28:de:ce:b7:ed:98:ae:1c:e0:b1:b1:4c:d6:98:
6f:78:a9:6a:59:c0:89:06:06:63:da:67:b2:9b:c9:
60:25:9c:f6:7b:48:72:b7:d6:be:32:58:32:05:9a:
28:b1:8e:f1:3b:55:80:a2:8b:8a:a8:39:cd:52:51:
2e:77:ae:25:51:1a:fb:d5:2b:03:51:2f:51:55:b5:
fc:d7:c9:5c:57:06:e9:e3:dd:6b:95:02:61:27:0d:
b7:56:9c:e7:95:df:be:ae:18:8f:df:37:c7:d4:3f:
be:1e:4a:1a:5f:1e:55:82:7e:c4:e5:1b:09:b6:85:
80:44:23:05:2d:29:cc:a7:a1:b0:c4:9d:37:c2:15:
23:cc:13:50:fe:05:13:07:6f:90:55:21:87:76:7f:
2f:b7:20:f0:c5:00:3e:7b:78:4e:3f:a8:45:df:50:
d0:a3:c5:ba:f8:0c:c8:7d:df:06:b2:12:b8:8d:cc:
a1:9e:43:68:c2:57:ba:11:7d:d6:58:c4:97:0e:f7:
01:53:8e:91:3c:9f:5b:c7:e1:ea:d8:9e:51:32:ad:
d7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AF:AE:BB:44:45:68:84:B2:5C:37:66:2B:72:6C:37:F0:94:72:4B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Na-uu0RFaISyXDdmK3JsN_CUcks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.200.0/24
31.56.202.0/24
31.57.181.0/24
31.57.215.0/24
31.57.219.0/24
31.57.221.0/24
31.57.255.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:e0:b7:03:d6:ea:49:a7:11:48:0f:3c:f3:f7:b7:09:c3:c9:
9d:9e:fc:74:81:e0:a9:62:6f:8b:15:0c:33:20:c9:60:57:41:
ae:01:77:b2:03:18:83:bf:44:56:d8:cd:e8:52:3c:8d:89:fb:
39:44:4b:1d:16:05:dd:68:75:83:b3:c4:0b:38:36:26:16:ee:
20:6b:7d:73:f5:77:58:9c:48:6a:05:5d:14:d2:06:90:bd:bf:
a0:8e:27:44:ce:c1:1f:db:0d:1e:da:0e:55:55:74:18:10:3e:
b4:06:5a:52:42:a7:a7:e8:36:5c:90:4a:d4:1d:a9:df:59:f8:
35:7e:b0:70:08:3a:04:07:dc:53:27:11:7a:4d:81:93:7d:87:
48:e3:5b:26:c6:c5:26:23:3f:b8:20:0f:18:04:e3:c9:46:4e:
1c:24:8d:18:44:0d:0f:b6:33:54:3e:97:67:82:c4:a9:9f:b3:
dc:93:33:5b:e5:aa:db:0f:10:b0:72:e5:b0:17:56:89:34:6b:
f5:29:98:18:84:24:29:31:31:68:fe:9e:c1:58:5a:48:e0:a7:
84:7a:c4:fa:fe:84:94:87:6a:14:87:7d:6d:6c:d0:63:be:92:
74:60:8e:cd:b3:31:34:f9:e9:b0:1a:f0:fe:8f:0e:46:27:05:
20:a7:95:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:51:03 2025 by rpki-client