Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TUUyHwaPLrrVkZFj8Yl-o2Diilg.roa
File: TUUyHwaPLrrVkZFj8Yl-o2Diilg.roa (raw, json)
Hash identifier: aCh/x1rd8Thiy7lam6VPNJ07QfEqzlxF8oYzIl4mz9Y=
Subject key identifier: 4D:45:32:1F:06:8F:2E:BA:D5:91:91:63:F1:89:7E:A3:60:E2:8A:58
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193F9146BBCBE8E1DAFC70011CFD3A239C2
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TUUyHwaPLrrVkZFj8Yl-o2Diilg.roa
Signing time: Tue 24 Dec 2024 14:31:25 +0000
ROA not before: Tue 24 Dec 2024 14:31:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2914
IP address blocks: 31.56.154.0/24 maxlen: 24
31.56.158.0/24 maxlen: 24
31.56.159.0/24 maxlen: 24
31.56.168.0/24 maxlen: 24
31.56.169.0/24 maxlen: 24
31.56.170.0/24 maxlen: 24
31.56.171.0/24 maxlen: 24
31.56.174.0/24 maxlen: 24
31.56.175.0/24 maxlen: 24
31.57.16.0/22 maxlen: 24
31.57.20.0/22 maxlen: 24
31.57.24.0/22 maxlen: 24
31.57.28.0/22 maxlen: 24
31.57.48.0/22 maxlen: 24
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.92.0/22 maxlen: 24
31.57.96.0/22 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.196.0/22 maxlen: 24
31.58.204.0/22 maxlen: 24
31.58.212.0/22 maxlen: 24
31.58.220.0/22 maxlen: 24
31.58.224.0/22 maxlen: 24
31.59.120.0/22 maxlen: 24
217.60.0.0/18 maxlen: 24
217.60.1.0/24 maxlen: 24
217.60.5.0/24 maxlen: 24
217.60.11.0/24 maxlen: 24
217.60.13.0/24 maxlen: 24
217.60.24.0/24 maxlen: 24
217.60.25.0/24 maxlen: 24
217.60.26.0/24 maxlen: 24
217.60.27.0/24 maxlen: 24
217.60.236.0/24 maxlen: 24
217.60.245.0/24 maxlen: 24
217.60.248.0/24 maxlen: 24
217.60.253.0/24 maxlen: 24
217.60.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Dec 2024 15:14:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f9:14:6b:bc:be:8e:1d:af:c7:00:11:cf:d3:a2:39:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 24 14:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d45321f068f2ebad5919163f1897ea360e28a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:23:92:ee:09:62:ad:0d:c7:03:4f:ac:b3:22:
ce:b6:10:50:24:52:ca:91:b5:c6:d2:a4:fd:fa:be:
7a:a4:52:2d:64:42:17:d4:b8:a7:da:f7:d7:f6:22:
c3:64:71:48:0e:6a:a9:3a:e6:80:be:c3:72:e3:db:
23:d0:38:ac:01:ba:46:82:4f:92:60:59:8b:85:5f:
56:cd:66:c7:a8:84:e7:4a:be:82:71:c1:d2:8a:6c:
8b:be:c2:34:3d:b2:c6:01:ec:d7:c1:34:2f:c9:33:
10:ac:a2:0e:aa:41:41:c3:b3:07:43:6a:5f:fd:fb:
73:44:c8:56:c4:99:de:ea:31:f5:6e:b8:bc:50:31:
6f:ba:3f:dc:86:47:08:83:45:75:a7:b7:17:9b:42:
01:58:53:8b:d1:5b:9f:68:1b:45:a1:cd:a4:e5:14:
ff:c5:e2:c0:1f:35:3e:74:e2:70:b1:78:c5:3b:f3:
25:39:2e:79:bd:ac:89:e2:c3:6d:22:e0:f8:d4:82:
78:dd:b6:95:77:e0:a6:64:10:ac:ef:26:7f:db:09:
2f:4e:ec:76:83:cf:91:a8:60:e2:10:90:46:4a:b4:
c3:5d:64:94:12:32:5e:5e:08:25:3e:da:38:5d:7f:
e0:b4:f9:36:6f:ca:37:31:1c:a1:9b:c0:e6:31:ac:
1f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:45:32:1F:06:8F:2E:BA:D5:91:91:63:F1:89:7E:A3:60:E2:8A:58
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TUUyHwaPLrrVkZFj8Yl-o2Diilg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.154.0/24
31.56.158.0/23
31.56.168.0/22
31.56.174.0/23
31.57.16.0/20
31.57.48.0/20
31.57.92.0-31.57.99.255
31.57.120.0/21
31.58.34.0/23
31.58.196.0/22
31.58.204.0/22
31.58.212.0/22
31.58.220.0-31.58.227.255
31.59.120.0/22
217.60.0.0/18
217.60.236.0/24
217.60.245.0/24
217.60.248.0/24
217.60.253.0-217.60.254.255
Signature Algorithm: sha256WithRSAEncryption
5f:9a:c2:bd:ad:00:75:19:0a:c6:c5:ea:76:2c:87:f2:aa:1f:
0d:93:75:2b:6e:16:4a:5a:2b:05:f3:33:95:89:24:fe:cc:2c:
be:ae:30:48:05:f4:f3:61:32:2d:82:c4:a1:d3:9a:c5:44:f1:
84:ed:0f:a3:7d:f1:ca:60:16:93:0a:09:93:c9:10:22:a9:55:
4c:92:ff:79:b6:a7:5a:a9:e7:94:03:da:1b:36:f7:c1:fd:d8:
97:f3:05:84:9d:1e:63:db:86:4c:94:3f:fb:ff:21:ee:4f:5c:
9f:b5:12:bc:90:43:74:d9:f1:f5:91:7b:b3:2a:c4:d3:8a:42:
79:f1:c0:92:55:69:88:1a:13:47:71:e1:c5:5f:e3:b3:eb:ca:
18:0d:88:41:d5:6d:29:a6:d6:ea:1b:71:74:bd:f5:3b:6e:cb:
38:38:ea:26:ef:0a:2f:4c:65:fd:87:44:7f:76:41:4f:e2:f1:
af:29:c3:0c:9f:f1:45:c9:87:3a:74:cf:8d:fa:7c:2d:df:55:
0c:87:b8:02:29:8b:52:c6:91:1c:24:48:0b:77:eb:39:f3:fd:
04:a8:5b:0a:3d:b7:72:78:ab:70:53:3f:c2:f4:60:98:c4:97:
44:2b:b1:6f:63:78:94:39:bf:c2:f6:59:dd:e7:18:8f:26:d3:
39:65:e9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:48:51 2025 by rpki-client