Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TH8w9k4uJNvoVpZ9BZI6_c6hvjE.roa
File: TH8w9k4uJNvoVpZ9BZI6_c6hvjE.roa (raw, json)
Hash identifier: DMbs4Nb9Okblhw0XqBLFCcpPaXs/4ilnEfhsJi+ITOc=
Subject key identifier: 4C:7F:30:F6:4E:2E:24:DB:E8:56:96:7D:05:92:3A:FD:CE:A1:BE:31
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194282339AEB687C4965DEBB5EC19795AE2
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TH8w9k4uJNvoVpZ9BZI6_c6hvjE.roa
Signing time: Thu 02 Jan 2025 17:49:44 +0000
ROA not before: Thu 02 Jan 2025 17:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 31.56.75.0/24 maxlen: 24
31.56.86.0/24 maxlen: 24
31.56.107.0/24 maxlen: 24
31.57.162.0/23 maxlen: 23
31.57.164.0/23 maxlen: 23
31.57.180.0/24 maxlen: 24
31.57.227.0/24 maxlen: 24
31.58.41.0/24 maxlen: 24
31.58.42.0/24 maxlen: 24
31.58.48.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.56.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 05 Jan 2025 05:40:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:39:ae:b6:87:c4:96:5d:eb:b5:ec:19:79:5a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c7f30f64e2e24dbe856967d05923afdcea1be31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c0:9e:85:bf:fd:4e:2a:ad:12:d3:49:e1:30:
96:a9:1e:5b:70:61:78:1b:38:e6:8a:ea:42:0c:ad:
0c:dc:27:1e:63:de:ce:78:89:3d:f6:71:17:7a:f3:
8c:34:61:22:79:49:d6:60:91:02:96:5a:38:e1:7c:
88:57:7c:d7:9d:21:65:db:77:6a:be:8d:e0:9a:7b:
ed:ad:44:a4:f9:07:c1:f9:3b:f9:41:91:ea:0b:53:
82:b2:28:12:9a:d5:a5:e8:ce:6d:23:c8:ae:a4:26:
a9:92:87:9b:cb:c8:bd:ed:0c:cf:c9:cc:fd:e4:0f:
22:a0:72:f0:d2:27:0b:a6:e2:7a:0a:ce:04:6d:a5:
23:56:0e:17:a2:90:b3:04:e1:5d:63:b1:4a:d3:54:
96:b2:9f:23:e7:73:11:f0:8e:fc:ed:82:09:9b:5c:
1f:b8:7f:14:0c:19:f1:f9:52:97:cf:75:41:0e:ee:
c2:6b:45:d1:94:e8:b1:b8:ad:96:33:35:5a:a4:2f:
f6:2c:d2:ea:5d:eb:8e:72:25:95:e1:5a:21:1e:85:
b4:72:64:f9:a5:ae:fa:30:c1:e6:b9:0c:a3:ff:29:
fb:35:7f:f5:b0:80:01:51:18:4e:32:df:36:f3:23:
4c:59:ed:3e:07:9b:f7:ed:57:5f:52:48:92:56:f7:
83:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7F:30:F6:4E:2E:24:DB:E8:56:96:7D:05:92:3A:FD:CE:A1:BE:31
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TH8w9k4uJNvoVpZ9BZI6_c6hvjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.75.0/24
31.56.86.0/24
31.56.107.0/24
31.57.162.0-31.57.165.255
31.57.180.0/24
31.57.227.0/24
31.58.41.0-31.58.42.255
31.58.48.0/24
31.58.50.0/23
31.58.56.0/23
31.58.64.0/23
31.58.153.0/24
Signature Algorithm: sha256WithRSAEncryption
61:70:19:c1:68:c2:91:93:c3:67:61:fc:a4:f4:19:df:24:88:
f9:13:83:0e:83:d2:19:91:b7:2e:2b:84:b2:2d:9e:32:29:b8:
a6:e7:a3:de:1f:c1:f4:c6:33:7e:d5:d5:b9:8d:c8:fe:b6:2a:
6e:43:48:ed:aa:7b:9e:4b:67:c5:1a:09:f1:28:76:3d:ff:95:
43:81:28:02:75:20:96:f5:86:df:cd:05:58:c4:0e:0b:21:fd:
71:94:b5:ac:fb:f1:56:2e:42:3d:ae:67:5b:6e:a8:b2:f3:dd:
b8:24:30:0a:d7:00:8b:fd:7a:a6:76:b2:e8:0a:3a:a0:c1:50:
6b:9d:06:2c:f6:77:fd:cc:65:82:b7:bf:21:14:54:76:35:3d:
be:a3:78:b3:e9:62:54:a8:ff:9c:5e:98:60:3b:19:fd:4c:79:
fc:54:31:dc:b7:1b:9b:72:a5:3c:a1:9e:7a:eb:10:8c:07:c0:
f7:23:64:63:83:bd:fc:2d:61:f8:ad:c8:5e:15:7d:cd:9d:55:
1a:2e:a9:b0:18:89:42:2f:cd:8b:d3:d6:94:29:78:7a:60:78:
37:05:8f:05:e8:11:95:dd:b8:8b:b2:9c:dc:b9:fc:0a:b8:4a:
c3:e9:b5:96:bf:93:3a:10:11:b5:83:1d:06:df:be:05:77:53:
2f:2d:9a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:51:19 2025 by rpki-client