Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Rv53PsOvsau5N_JXekVXUTYnCVk.roa
File: Rv53PsOvsau5N_JXekVXUTYnCVk.roa (raw, json)
Hash identifier: krAPpF2vLwXp0PrUxWem5q36BU5t6sCwW23dZXmsQeA=
Subject key identifier: 46:FE:77:3E:C3:AF:B1:AB:B9:37:F2:57:7A:45:57:51:36:27:09:59
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019408C2EC0DC3B855FBFA9BB17EC5352005
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Rv53PsOvsau5N_JXekVXUTYnCVk.roa
Signing time: Fri 27 Dec 2024 15:36:19 +0000
ROA not before: Fri 27 Dec 2024 15:36:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 31.56.112.0/21 maxlen: 24
31.57.11.0/24 maxlen: 24
31.57.131.0/24 maxlen: 24
31.57.150.0/24 maxlen: 24
31.57.176.0/24 maxlen: 24
31.57.194.0/24 maxlen: 24
31.58.59.0/24 maxlen: 24
31.58.142.0/24 maxlen: 24
31.58.146.0/24 maxlen: 24
31.59.14.0/24 maxlen: 24
31.59.30.0/24 maxlen: 24
31.59.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 31 Dec 2024 09:47:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:08:c2:ec:0d:c3:b8:55:fb:fa:9b:b1:7e:c5:35:20:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 27 15:36:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46fe773ec3afb1abb937f2577a45575136270959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5e:ae:ee:47:38:3a:7a:db:f2:97:a2:0c:b6:
8f:c9:ca:a5:52:d5:09:af:9e:c2:4a:9e:c4:d3:08:
9b:58:29:80:34:60:fb:71:6d:db:8a:36:62:c7:32:
60:84:f1:23:b1:8b:dc:15:68:18:12:c3:01:bf:31:
c3:ce:39:ce:4f:0b:50:ba:d0:90:cb:6c:52:e3:e2:
55:0e:3d:39:4b:cc:35:7e:25:22:6d:8f:c2:e7:c8:
28:0c:e2:35:b3:31:e0:a8:e1:bb:59:d4:58:a9:61:
7d:0a:d5:1b:99:a1:a2:b2:a2:ca:65:bf:77:52:79:
06:79:c9:0e:9a:78:a0:61:83:7d:11:6a:8e:30:7b:
ab:f4:71:8f:eb:8c:80:8e:ea:33:8e:5b:d5:66:8e:
cc:73:07:25:92:14:3f:17:fb:b2:4c:09:eb:4d:90:
c1:29:c8:ff:47:7f:ea:64:53:79:eb:5c:18:f0:7c:
d0:fa:f7:06:70:c7:8e:a1:bc:a2:a5:65:aa:e4:8f:
7b:c2:cc:ce:34:f6:a8:cb:5d:ab:94:bb:ef:fd:b5:
04:fe:0c:bf:15:65:cb:30:a1:ff:22:9a:45:5a:97:
40:07:4e:3b:b2:da:9d:2b:35:d3:aa:e9:47:6f:e8:
e6:95:85:12:48:d2:29:95:75:e3:9e:91:05:94:5d:
04:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FE:77:3E:C3:AF:B1:AB:B9:37:F2:57:7A:45:57:51:36:27:09:59
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Rv53PsOvsau5N_JXekVXUTYnCVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.112.0/21
31.57.11.0/24
31.57.131.0/24
31.57.150.0/24
31.57.176.0/24
31.57.194.0/24
31.58.59.0/24
31.58.142.0/24
31.58.146.0/24
31.59.14.0/24
31.59.30.0/24
31.59.97.0/24
Signature Algorithm: sha256WithRSAEncryption
05:5b:d6:06:9f:dc:f9:55:34:87:99:5f:bd:27:90:f5:24:0a:
62:bb:71:5c:5b:e3:12:5f:4d:d4:b4:3e:88:93:1d:bc:41:88:
0f:71:0f:b4:df:cf:25:b6:d7:a0:f7:65:ed:0b:db:09:b2:06:
00:11:51:05:3b:a4:fc:33:eb:12:bf:f0:66:8e:31:ee:85:6e:
4f:b4:6b:00:dc:3b:7f:68:66:dc:f1:fd:11:c3:af:d8:a9:4e:
a5:f1:24:cc:88:ac:4b:86:10:4c:d4:70:89:45:be:1d:76:86:
e1:65:b3:9b:d3:29:af:30:ee:24:8d:63:4c:03:26:5a:b5:60:
e4:a8:63:39:1a:fa:33:fa:44:60:97:f3:1f:0e:0b:36:98:a9:
cc:02:2c:34:5d:c3:1a:62:61:dc:ce:66:81:09:60:4b:0f:a6:
40:14:f3:1b:f2:3a:3e:81:47:d4:bd:5d:da:d1:09:e5:f1:dc:
3f:cf:48:58:bf:ef:f1:b1:f3:a6:f4:5c:0e:27:50:6c:51:68:
33:7a:1e:3c:5d:f9:01:d1:e5:fe:f3:e9:2c:bc:88:82:d6:6c:
82:c8:ef:6f:8e:af:ac:a4:b3:af:dc:5a:94:b7:a6:fc:e3:80:
6b:13:67:d7:6a:6c:9d:72:ea:08:e1:f5:32:d9:00:5d:e0:e9:
06:fd:f6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:45:41 2025 by rpki-client