Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Rhi0vmxenrWYTeT9y-Zo2G4nKq4.roa
File: Rhi0vmxenrWYTeT9y-Zo2G4nKq4.roa (raw, json)
Hash identifier: fweQgKm3LkbQCy208yZ/yeDIf5eYhLWY4bSZ2T+LUms=
Subject key identifier: 46:18:B4:BE:6C:5E:9E:B5:98:4D:E4:FD:CB:E6:68:D8:6E:27:2A:AE
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193E8B425337E88AA3EE2DF3AB968DD5A05
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Rhi0vmxenrWYTeT9y-Zo2G4nKq4.roa
Signing time: Sat 21 Dec 2024 10:12:20 +0000
ROA not before: Sat 21 Dec 2024 10:12:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214025
IP address blocks: 31.56.59.0/24 maxlen: 24
31.56.67.0/24 maxlen: 24
31.56.69.0/24 maxlen: 24
31.56.72.0/24 maxlen: 24
31.56.84.0/24 maxlen: 24
31.56.88.0/24 maxlen: 24
31.56.120.0/24 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.122.0/24 maxlen: 24
31.56.123.0/24 maxlen: 24
31.56.126.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.132.0/24 maxlen: 24
31.57.133.0/24 maxlen: 24
31.58.88.0/24 maxlen: 24
31.58.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 31 Dec 2024 15:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e8:b4:25:33:7e:88:aa:3e:e2:df:3a:b9:68:dd:5a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 21 10:12:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4618b4be6c5e9eb5984de4fdcbe668d86e272aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:37:76:32:a3:63:e0:9b:23:83:63:e5:5b:e3:
a9:78:40:ca:84:72:20:6e:09:0e:f1:fb:a2:f3:4b:
25:6f:99:b9:5a:13:df:ba:5d:5d:3e:5d:97:7c:d4:
0d:7e:ac:01:8f:dc:16:a0:6f:89:4e:2d:2e:1f:93:
69:ba:e3:f5:38:e9:fb:48:e9:27:71:11:7b:b6:71:
2a:3e:83:37:92:e8:2a:94:81:26:30:e2:e0:b0:da:
e2:1f:c0:d6:12:36:14:96:7e:bf:fc:ea:6f:7c:58:
f6:60:e0:c0:16:79:ca:39:60:d8:f2:2a:c2:0b:ed:
c9:30:4f:7f:07:a9:13:78:ea:76:78:0c:cf:4d:b9:
62:98:54:a4:cb:6f:94:14:5e:70:7f:4c:df:90:f5:
3e:df:0a:d1:0e:c8:5b:b4:10:26:da:c4:18:b7:b2:
ee:2a:68:a0:08:f1:4e:bf:9c:f6:82:c8:ff:c3:38:
bf:ff:c1:db:d2:c4:42:12:8a:bc:c7:4b:03:6d:f0:
e0:98:e6:2c:7d:15:9c:f3:98:a3:d7:77:64:a5:87:
83:cb:79:e4:6b:72:8c:e7:40:e0:0f:df:60:6f:7f:
06:96:af:83:47:07:e0:9e:20:9b:60:9d:e6:81:58:
fc:e2:39:43:39:df:d3:e8:90:6b:88:ec:72:b4:99:
96:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:18:B4:BE:6C:5E:9E:B5:98:4D:E4:FD:CB:E6:68:D8:6E:27:2A:AE
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Rhi0vmxenrWYTeT9y-Zo2G4nKq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.59.0/24
31.56.67.0/24
31.56.69.0/24
31.56.72.0/24
31.56.84.0/24
31.56.88.0/24
31.56.120.0/22
31.56.126.0/24
31.57.104.0/21
31.57.132.0/23
31.58.88.0/23
Signature Algorithm: sha256WithRSAEncryption
30:4c:6b:33:3c:c3:ba:77:11:90:f2:7e:58:a2:84:9a:a6:a9:
67:80:98:30:4a:a5:5c:7c:c6:cc:e2:55:ed:1d:a7:69:87:67:
d8:ee:e5:2b:88:4f:3e:57:0e:e6:4a:ee:92:18:76:a4:77:52:
38:4b:72:19:2e:0d:e8:df:3b:a8:f5:82:ba:0d:2b:ac:02:f4:
32:b2:a3:10:f1:17:88:1e:92:02:03:51:9b:b9:ae:b0:ed:60:
0e:ec:2f:b2:d2:ed:d1:0c:78:5a:f6:55:b2:4c:7e:56:9a:25:
01:e2:79:ed:87:11:33:2d:6e:32:47:fd:8f:83:3c:c9:7b:60:
14:02:5c:38:88:c1:75:12:e4:e9:e5:49:86:00:ad:40:01:80:
33:26:fd:71:f4:65:76:95:86:9b:70:3a:c0:84:5a:1a:27:81:
f9:79:bd:11:04:46:78:f3:ef:c1:9d:fd:9b:ad:99:28:c8:cf:
0d:17:f6:a1:31:34:de:86:c8:d9:d3:f4:ef:42:4c:50:d3:23:
b6:49:ea:16:70:5f:24:78:89:31:93:88:f8:ab:19:23:55:06:
a2:19:68:78:08:84:5a:a3:49:f0:89:21:d9:11:22:6f:15:83:
28:54:a5:f2:71:42:a5:6b:ef:96:99:6b:03:3d:fa:44:36:b5:
99:42:1a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:16 2025 by rpki-client