Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VERyHNwNi69HvJwjuy8HkMyOOEk.roa
File: VERyHNwNi69HvJwjuy8HkMyOOEk.roa (raw, json)
Hash identifier: h5CUdENW2djxGp1DPNFcwFPmBKYdY4xu7zBIOm19Xqk=
Subject key identifier: 54:44:72:1C:DC:0D:8B:AF:47:BC:9C:23:BB:2F:07:90:CC:8E:38:49
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019682175B38BEA1889C721284F165AB5DD3
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VERyHNwNi69HvJwjuy8HkMyOOEk.roa
Signing time: Tue 29 Apr 2025 15:08:10 +0000
ROA not before: Tue 29 Apr 2025 15:08:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 31.56.49.0/24 maxlen: 24
31.56.156.0/24 maxlen: 24
31.56.204.0/22 maxlen: 22
31.56.210.0/24 maxlen: 24
31.56.212.0/24 maxlen: 24
31.56.223.0/24 maxlen: 24
31.56.232.0/22 maxlen: 24
31.56.234.0/24 maxlen: 24
31.57.92.0/22 maxlen: 22
31.57.129.0/24 maxlen: 24
31.57.132.0/24 maxlen: 24
31.57.142.0/24 maxlen: 24
31.57.151.0/24 maxlen: 24
31.57.191.0/24 maxlen: 24
31.57.206.0/24 maxlen: 24
31.58.33.0/24 maxlen: 24
31.58.90.0/24 maxlen: 24
31.58.157.0/24 maxlen: 24
31.58.160.0/24 maxlen: 24
31.58.163.0/24 maxlen: 24
31.58.168.0/24 maxlen: 24
31.58.224.0/24 maxlen: 24
31.58.230.0/23 maxlen: 24
31.58.231.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.108.0/24 maxlen: 24
31.59.109.0/24 maxlen: 24
31.59.110.0/24 maxlen: 24
31.59.171.0/24 maxlen: 24
31.59.236.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Apr 2025 17:54:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:17:5b:38:be:a1:88:9c:72:12:84:f1:65:ab:5d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 29 15:08:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5444721cdc0d8baf47bc9c23bb2f0790cc8e3849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:09:25:52:50:cd:01:98:d1:24:db:61:ff:bf:
4a:32:ab:5e:f7:82:52:bf:cb:d5:ba:07:6b:11:30:
a9:8b:9c:6a:29:97:e4:fc:be:f2:08:a7:e5:a3:ae:
56:28:a1:8e:97:3e:68:5c:2e:29:a0:6f:a1:45:2d:
e7:57:58:28:9e:7a:c6:db:6b:9b:5f:91:00:e0:1a:
9a:84:39:55:dd:29:43:bd:5e:db:eb:83:94:e6:e6:
c8:22:c2:c6:a1:ca:17:cc:9f:91:1a:f0:c1:40:f7:
b0:2e:68:4e:69:1b:a6:ed:18:92:00:2c:96:72:58:
03:9a:93:ce:82:fb:f8:e5:f2:6c:12:ea:f7:54:37:
1b:3b:e2:70:b0:45:d2:d0:0f:1c:2c:f5:90:31:3a:
c6:34:3d:12:31:fb:3a:12:37:52:ba:43:ca:41:73:
8c:2d:03:17:6a:bb:b1:a6:2c:7d:86:a1:52:82:2b:
58:74:09:bf:97:7d:71:a2:40:78:38:25:76:c7:b6:
f6:ba:f6:95:29:bb:20:19:4a:bc:af:72:7d:79:77:
2c:fa:3e:fd:24:f8:3e:b8:ad:21:0f:09:f1:8a:9f:
71:be:7c:86:23:14:6b:a8:14:71:7c:d5:d5:11:37:
43:f4:35:ef:01:8c:d4:af:5d:24:06:62:90:14:24:
cb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:44:72:1C:DC:0D:8B:AF:47:BC:9C:23:BB:2F:07:90:CC:8E:38:49
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VERyHNwNi69HvJwjuy8HkMyOOEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.49.0/24
31.56.156.0/24
31.56.204.0/22
31.56.210.0/24
31.56.212.0/24
31.56.223.0/24
31.56.232.0/22
31.57.92.0/22
31.57.129.0/24
31.57.132.0/24
31.57.142.0/24
31.57.151.0/24
31.57.191.0/24
31.57.206.0/24
31.58.33.0/24
31.58.90.0/24
31.58.157.0/24
31.58.160.0/24
31.58.163.0/24
31.58.168.0/24
31.58.224.0/24
31.58.230.0/23
31.59.57.0/24
31.59.108.0-31.59.110.255
31.59.171.0/24
31.59.236.0/22
Signature Algorithm: sha256WithRSAEncryption
13:5b:d5:50:55:ef:1e:e9:4f:c2:11:ce:0f:fe:b0:c2:f6:4b:
bf:bd:6b:e8:b5:eb:87:39:d8:49:f5:6e:5e:cd:be:e5:8d:98:
60:f5:71:a6:0c:e2:98:b5:13:22:cb:03:03:36:a4:48:48:07:
76:05:21:52:23:19:1f:7b:58:26:4c:9d:55:fd:6b:a0:3c:e5:
d0:f3:5c:78:15:10:e5:e7:42:0d:ba:d1:5a:c3:f2:ab:3d:77:
ca:6e:d9:c3:2f:1f:f9:cb:f6:20:79:b1:db:44:a6:7a:0f:df:
f4:1b:07:82:ee:61:63:e3:d3:e3:d3:82:91:ea:16:64:52:27:
fc:aa:7e:d9:8d:5d:dc:4c:75:26:f0:84:62:40:a9:2c:81:65:
c0:6c:5a:a9:4b:78:bc:5f:48:df:2f:35:bc:ca:81:7c:0b:dd:
1b:3e:6e:fb:4b:87:94:e4:14:88:57:c1:4b:6b:68:6b:68:8b:
d7:a5:17:5e:fd:11:9d:af:bc:1e:c5:e0:79:64:a7:de:76:56:
7e:d0:b6:d8:1a:c8:b2:33:23:db:00:51:4b:ab:a5:cd:82:ca:
4d:81:79:6d:31:c1:7d:38:ad:17:25:58:85:52:ae:e9:14:0f:
d8:f6:e6:10:86:6c:42:dc:af:4b:a7:af:3d:e5:7d:f8:39:e6:
9c:13:b9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 04:12:04 2025 by rpki-client