Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Q5BUfDTtq9BorByRjkBoByIUCvE.roa
File: Q5BUfDTtq9BorByRjkBoByIUCvE.roa (raw, json)
Hash identifier: /nPtYLR4KgzKaI3Ugq8zHh5EhwKDZN46/ofapxZcpus=
Subject key identifier: 43:90:54:7C:34:ED:AB:D0:68:AC:1C:91:8E:40:68:07:22:14:0A:F1
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019428236E34E804A260A4BD65B52BBCBB7D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Q5BUfDTtq9BorByRjkBoByIUCvE.roa
Signing time: Thu 02 Jan 2025 17:49:58 +0000
ROA not before: Thu 02 Jan 2025 17:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214024
IP address blocks: 31.56.59.0/24 maxlen: 24
31.56.67.0/24 maxlen: 24
31.56.69.0/24 maxlen: 24
31.56.72.0/24 maxlen: 24
31.56.84.0/24 maxlen: 24
31.56.88.0/24 maxlen: 24
31.56.120.0/24 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.122.0/24 maxlen: 24
31.56.123.0/24 maxlen: 24
31.56.126.0/24 maxlen: 24
31.56.200.0/24 maxlen: 24
31.56.202.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.132.0/24 maxlen: 24
31.57.133.0/24 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.215.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.221.0/24 maxlen: 24
31.57.255.0/24 maxlen: 24
31.58.88.0/24 maxlen: 24
31.58.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 Jan 2025 19:57:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:6e:34:e8:04:a2:60:a4:bd:65:b5:2b:bc:bb:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4390547c34edabd068ac1c918e40680722140af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7d:f0:44:ac:d5:a3:65:de:bf:4a:fa:c8:7f:
0e:11:cc:7a:95:4a:83:6b:f2:64:04:03:bf:c6:c1:
cf:12:a7:1d:ac:64:64:85:94:55:9d:7f:26:ed:bd:
1d:9b:f0:29:74:1b:87:1f:d0:fa:80:1b:18:96:9d:
c8:89:1e:fd:af:d0:e4:84:ae:40:d5:d4:56:70:ac:
6a:ee:25:74:77:6b:03:ff:4e:1b:cb:f1:c6:ff:4c:
a4:08:69:ff:3b:e4:fd:07:7d:70:9c:a9:a7:60:30:
9d:a4:d1:de:4d:08:5d:a2:4f:01:dc:97:a0:e3:01:
16:7b:94:30:aa:07:01:f7:3a:f6:af:0f:aa:41:08:
35:27:63:58:d8:13:ac:f8:ef:4d:07:02:cb:63:ed:
15:30:77:2a:bd:d2:06:f7:b1:3f:17:ce:62:c7:51:
c8:bb:ae:be:6e:47:5f:cb:24:91:07:61:c6:10:bd:
ef:72:60:2b:5f:3a:28:b6:23:8f:d7:9f:ec:63:39:
4b:45:93:fe:8c:27:5b:cb:77:19:0f:c1:b3:e9:ec:
37:58:d7:60:b6:2b:cd:32:38:fb:1e:75:a4:5d:bf:
22:5b:2f:9b:f8:d4:16:c2:f8:2d:17:f7:ea:93:ae:
d9:bc:ce:94:cd:7c:8a:16:6f:43:65:bd:53:49:8d:
7f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:90:54:7C:34:ED:AB:D0:68:AC:1C:91:8E:40:68:07:22:14:0A:F1
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Q5BUfDTtq9BorByRjkBoByIUCvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.59.0/24
31.56.67.0/24
31.56.69.0/24
31.56.72.0/24
31.56.84.0/24
31.56.88.0/24
31.56.120.0/22
31.56.126.0/24
31.56.200.0/24
31.56.202.0/24
31.57.104.0/21
31.57.132.0/23
31.57.181.0/24
31.57.215.0/24
31.57.219.0/24
31.57.221.0/24
31.57.255.0/24
31.58.88.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:92:0c:1a:3b:e6:d3:0d:f3:34:0e:e3:b9:09:45:25:37:b5:
ab:2d:70:f5:dc:a4:cb:e1:b4:a5:5f:7e:60:43:ff:26:50:6b:
b2:b2:f0:f8:07:84:8d:1b:31:3e:c7:b2:96:22:0a:4a:d0:37:
6b:f5:8a:5a:4c:5d:a7:ca:c7:72:f3:92:20:7e:73:99:9a:a2:
e6:3d:7e:d9:5b:ef:16:f1:9f:3a:6f:0c:5e:78:2c:51:23:f3:
be:65:cc:62:d5:dd:7b:87:c9:2c:c2:8c:16:ed:b8:bb:56:57:
4d:6d:15:df:4f:7c:49:26:cb:c3:f1:b1:47:c3:8a:74:3d:ed:
eb:89:5f:fe:e6:55:fd:cb:3c:6f:59:b8:19:a7:3f:60:70:a1:
0e:fa:18:05:2b:fe:fb:43:a3:aa:fe:94:6d:ae:3f:25:7e:6f:
f9:dd:b7:63:c2:12:47:07:d1:3a:ad:45:37:da:17:0d:56:a6:
06:a2:d4:1d:fd:cd:fb:76:34:f2:7a:16:6c:40:1b:3e:8a:8e:
f3:cd:60:f3:20:fe:e7:47:a7:d4:23:d0:ac:5d:e8:9c:af:3c:
10:18:56:25:02:67:dc:42:5a:ef:fc:89:ab:fe:b1:f5:da:b1:
8b:0b:3c:d7:20:e8:88:c3:fb:1c:7b:2c:cb:74:ab:e6:6d:ef:
e5:e6:d2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:05 2025 by rpki-client