Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/S1XQmsl3JWYrx0Oe16GLLxSovMk.roa
File: S1XQmsl3JWYrx0Oe16GLLxSovMk.roa (raw, json)
Hash identifier: bJTvVkXgR350voygVSkayVlDic2ZjoPuRhTlr8yunvo=
Subject key identifier: 4B:55:D0:9A:C9:77:25:66:2B:C7:43:9E:D7:A1:8B:2F:14:A8:BC:C9
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192B804D4F1B261DFF0EE636D38E1C319F6
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/S1XQmsl3JWYrx0Oe16GLLxSovMk.roa
Signing time: Wed 23 Oct 2024 06:16:17 +0000
ROA not before: Wed 23 Oct 2024 06:16:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133296
IP address blocks: 31.57.68.0/22 maxlen: 24
31.58.0.0/24 maxlen: 24
31.58.1.0/24 maxlen: 24
31.58.2.0/24 maxlen: 24
31.58.3.0/24 maxlen: 24
31.58.4.0/24 maxlen: 24
31.58.5.0/24 maxlen: 24
31.58.6.0/24 maxlen: 24
31.58.7.0/24 maxlen: 24
31.58.8.0/24 maxlen: 24
31.58.80.0/22 maxlen: 24
31.58.104.0/22 maxlen: 24
31.58.112.0/22 maxlen: 24
31.58.120.0/22 maxlen: 24
31.59.48.0/22 maxlen: 24
31.59.60.0/22 maxlen: 24
31.59.248.0/24 maxlen: 24
31.59.249.0/24 maxlen: 24
31.59.250.0/24 maxlen: 24
31.59.251.0/24 maxlen: 24
31.59.252.0/24 maxlen: 24
31.59.253.0/24 maxlen: 24
31.59.254.0/24 maxlen: 24
31.59.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b8:04:d4:f1:b2:61:df:f0:ee:63:6d:38:e1:c3:19:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 23 06:16:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b55d09ac97725662bc7439ed7a18b2f14a8bcc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:71:02:93:52:c6:f5:17:6b:5e:71:88:ea:bc:
9f:70:93:7a:98:cc:c3:22:25:8f:18:27:6c:87:ce:
e9:41:4e:b8:ef:08:61:f7:d5:2a:a4:20:27:21:74:
04:e9:96:35:6b:fe:22:62:7c:78:0b:9e:71:bc:b5:
ce:0b:25:5e:1c:fe:c0:fe:13:1b:32:32:d0:60:36:
b0:fd:c6:a6:d1:b9:a7:27:e4:ff:c4:55:d6:a7:75:
f9:ec:44:2b:5e:f1:43:85:7a:c5:72:49:ec:14:3d:
cb:4c:9e:99:1c:58:21:cc:9a:38:43:e8:8e:ed:47:
c9:b3:b8:2b:3f:01:5b:02:4e:d0:87:14:b7:10:4e:
d6:78:9b:38:32:69:8b:52:44:a1:17:53:bb:3f:58:
40:e5:59:ac:03:43:56:df:ee:ad:dc:21:b2:79:73:
33:ac:ea:ed:1f:53:f5:e6:53:03:cc:03:f9:96:11:
ee:e5:78:11:7b:05:0e:e0:12:b1:02:e4:ef:6d:06:
7e:21:8b:4f:6e:45:35:f3:f0:ea:3e:99:1a:12:02:
cc:04:32:d0:ac:5c:e9:5a:d3:67:58:0b:25:b8:ff:
44:17:31:5a:b3:31:db:88:5b:84:db:37:22:9c:4b:
5a:4f:f5:b6:06:1e:88:5f:47:b7:61:5c:d7:dc:fc:
ea:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:55:D0:9A:C9:77:25:66:2B:C7:43:9E:D7:A1:8B:2F:14:A8:BC:C9
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/S1XQmsl3JWYrx0Oe16GLLxSovMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.68.0/22
31.58.0.0-31.58.8.255
31.58.80.0/22
31.58.104.0/22
31.58.112.0/22
31.58.120.0/22
31.59.48.0/22
31.59.60.0/22
31.59.248.0/21
Signature Algorithm: sha256WithRSAEncryption
86:62:9d:9e:db:3c:a3:3b:ea:0b:6f:0d:2d:66:cc:d5:1d:dc:
6a:87:d0:81:a7:09:57:3b:72:3a:6a:d4:14:f6:05:7b:66:2d:
e0:36:1a:d1:8b:fa:c8:0e:68:de:28:f4:9f:6f:4e:79:f9:92:
c5:f2:15:0f:75:8d:08:45:61:0e:87:3b:1b:b0:13:4a:61:b7:
c6:0c:8a:e8:58:5c:cc:51:94:f0:be:56:91:89:2b:ae:c3:66:
52:64:0f:5a:e1:0e:59:1c:77:10:32:95:5f:9b:3e:9e:7b:1d:
37:7d:7c:30:9c:06:40:fd:54:91:50:f1:e7:7c:87:15:b9:87:
cc:cd:72:4e:21:a6:0d:47:85:3c:12:92:7b:e3:ce:f3:72:88:
7b:d3:56:04:34:fb:d0:41:d4:2c:6a:a2:b6:ed:2d:f9:f1:d5:
a2:fb:ef:97:e6:b6:18:79:05:4a:6f:b5:be:7f:5c:40:08:e3:
3c:73:fb:f8:d2:50:fa:9f:9b:76:0f:f4:3f:ab:bd:f5:1d:be:
0f:a3:6f:bb:3a:0c:d6:35:6d:6d:7e:ba:86:ad:34:59:20:d0:
5c:16:05:b1:25:eb:df:37:eb:5b:1c:2e:39:a4:12:ae:76:50:
c1:0d:e2:cb:ee:c9:59:2d:17:13:08:66:a3:6e:e7:b6:2b:b6:
3b:f3:e1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:15:32 2025 by rpki-client