Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/U3HhOtnsckztyxmDrLiXlPmGe1M.roa
File: U3HhOtnsckztyxmDrLiXlPmGe1M.roa (raw, json)
Hash identifier: Ae478g7Fcp1Zx1e258dWQR32Bvi1mR5JrIXtyUDT5YI=
Subject key identifier: 53:71:E1:3A:D9:EC:72:4C:ED:CB:19:83:AC:B8:97:94:F9:86:7B:53
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019371A4419C4F48C454CD3320B568969936
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/U3HhOtnsckztyxmDrLiXlPmGe1M.roa
Signing time: Thu 28 Nov 2024 07:20:10 +0000
ROA not before: Thu 28 Nov 2024 07:20:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.3.0/24 maxlen: 24
31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.48.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.120.0/22 maxlen: 24
31.56.127.0/24 maxlen: 24
31.57.65.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.146.0/23 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.184.0/23 maxlen: 24
31.57.186.0/23 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.58.49.0/24 maxlen: 24
31.58.129.0/24 maxlen: 24
31.59.68.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Nov 2024 13:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:71:a4:41:9c:4f:48:c4:54:cd:33:20:b5:68:96:99:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 28 07:20:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5371e13ad9ec724cedcb1983acb89794f9867b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3a:59:34:40:41:51:05:6f:c0:f4:06:ba:6d:
6f:22:9f:86:85:d3:98:ce:88:33:2f:38:67:05:9e:
e7:b0:84:c9:f8:5f:cb:fe:2a:a7:4d:cb:d1:42:5f:
0e:70:6c:20:c2:59:28:59:1d:ca:42:17:de:9e:29:
bc:cb:4e:21:3d:e4:13:7a:63:76:0d:48:0c:ec:52:
fe:e5:cf:de:63:0a:32:ca:5a:7a:9e:06:79:54:41:
8e:90:6e:59:cc:74:16:c4:fc:d9:46:f2:f4:4a:31:
a2:57:ba:4a:6f:ff:68:a0:e4:65:5b:21:38:86:cc:
6b:a8:3d:ff:03:52:d0:6f:4e:86:7f:b6:8d:45:a3:
93:cc:00:33:db:46:7a:b2:c6:c1:6a:a4:2a:f1:cb:
a3:06:9e:43:5a:a3:91:0c:bb:9b:d1:df:a4:1b:be:
31:4f:b7:56:5d:c2:68:45:3b:00:6b:da:0c:f9:e6:
bc:bf:9a:7d:e3:fb:57:20:03:e1:b7:9f:96:8c:ad:
9d:d4:4d:93:d9:00:6c:e6:2c:46:6a:9c:c6:56:04:
bd:d5:c8:7c:31:2c:89:15:87:f7:92:f3:21:ff:ea:
4b:6b:9a:27:cf:8a:09:b6:9a:51:c3:78:9a:16:ad:
c5:b8:b9:66:7b:2e:d2:a8:cc:47:b7:6b:34:9b:18:
ca:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:71:E1:3A:D9:EC:72:4C:ED:CB:19:83:AC:B8:97:94:F9:86:7B:53
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/U3HhOtnsckztyxmDrLiXlPmGe1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.3.0-31.56.5.255
31.56.24.0/24
31.56.42.0/23
31.56.48.0/24
31.56.57.0/24
31.56.89.0/24
31.56.104.0/21
31.56.120.0/22
31.56.127.0/24
31.57.65.0/24
31.57.132.0/23
31.57.146.0/23
31.57.176.0-31.57.188.255
31.57.192.0/22
31.57.232.0/22
31.58.49.0/24
31.58.129.0/24
31.59.68.0/24
31.59.96.0/22
31.59.112.0/22
31.59.184.0/22
Signature Algorithm: sha256WithRSAEncryption
17:73:01:8a:f3:f7:90:f4:c7:fc:9a:68:f5:7a:2b:92:d8:7f:
31:cb:59:2e:a9:eb:ac:c8:09:c0:c0:4c:d4:70:22:0f:8c:77:
33:0f:16:78:4f:b3:d0:0f:50:f4:c9:35:f7:d8:8a:be:eb:76:
8b:f1:1f:07:99:e4:91:1b:22:18:88:1f:55:94:0c:de:9d:16:
36:88:97:87:f4:fd:9f:00:38:1a:7b:c0:e3:4a:16:b0:9e:56:
e7:2a:14:ec:d9:f1:0e:da:9b:ea:b0:5e:76:04:de:e4:d8:57:
af:77:c8:fc:1c:23:87:8a:1f:61:f8:10:4e:8b:02:55:c0:0f:
78:22:d3:87:67:61:d8:5c:06:12:bb:ce:cc:65:ac:8f:a0:77:
bd:c3:b2:e8:af:50:c0:1e:08:6a:08:c9:59:a9:7e:ff:1d:ff:
21:61:cf:5a:b4:b1:a6:fa:b7:b0:20:6b:25:5a:64:c4:bf:17:
95:00:a3:4b:2c:53:cc:38:3c:01:22:92:f2:03:aa:40:f8:76:
34:84:5a:7d:a6:4a:41:81:02:3e:ec:39:91:05:ff:56:9e:48:
d2:2e:38:17:f4:fb:ef:92:16:d6:c7:ff:20:b8:f3:98:65:69:
3e:7c:40:f0:53:ed:75:6f:8f:6d:c6:5a:d2:a2:48:e8:53:f5:
81:17:e6:3f
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgISAZNxpEGcT0jEVM0zILVolpk2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMTI4MDcyMDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzcxZTEzYWQ5ZWM3MjRjZWRjYjE5ODNhY2I4OTc5NGY5ODY3YjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TpZNEBBUQVvwPQGum1vIp+GhdOY
zogzLzhnBZ7nsITJ+F/L/iqnTcvRQl8OcGwgwlkoWR3KQhfenim8y04hPeQTemN2
DUgM7FL+5c/eYwoyylp6ngZ5VEGOkG5ZzHQWxPzZRvL0SjGiV7pKb/9ooORlWyE4
hsxrqD3/A1LQb06Gf7aNRaOTzAAz20Z6ssbBaqQq8cujBp5DWqORDLub0d+kG74x
T7dWXcJoRTsAa9oM+ea8v5p94/tXIAPht5+WjK2d1E2T2QBs5ixGapzGVgS91ch8
MSyJFYf3kvMh/+pLa5onz4oJtppRw3iaFq3FuLlmey7SqMxHt2s0mxjK5QIDAQAB
o4ICljCCApIwHQYDVR0OBBYEFFNx4TrZ7HJM7csZg6y4l5T5hntTMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvVTNIaE90bnNja3p0eXhtRHJMaVhsUG1HZTFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGrBggrBgEFBQcBBwEB/wSBmzCBmDCBlQQCAAEwgY4wDAME
AB84AwMEAR84BAMEAB84GAMEAR84KgMEAB84MAMEAB84OQMEAB84WQMEAx84aAME
Ah84eAMEAB84fwMEAB85QQMEAR85hAMEAR85kjAMAwQEHzmwAwQAHzm8AwQCHznA
AwQCHznoAwQAHzoxAwQAHzqBAwQAHztEAwQCHztgAwQCHztwAwQCHzu4MA0GCSqG
SIb3DQEBCwUAA4IBAQAXcwGK8/eQ9Mf8mmj1eiuS2H8xy1kuqeusyAnAwEzUcCIP
jHczDxZ4T7PQD1D0yTX32Iq+63aL8R8HmeSRGyIYiB9VlAzenRY2iJeH9P2fADga
e8DjShawnlbnKhTs2fEO2pvqsF52BN7k2Fevd8j8HCOHih9h+BBOiwJVwA94ItOH
Z2HYXAYSu87MZayPoHe9w7Lor1DAHghqCMlZqX7/Hf8hYc9atLGm+rewIGslWmTE
vxeVAKNLLFPMODwBIpLyA6pA+HY0hFp9pkpBgQI+7DmRBf9WnkjSLjgX9PvvkhbW
x/8guPOYZWk+fEDwU+11b49txlrSokjoU/WBF+Y/
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:45:38 2025 by rpki-client