Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VET89AQb56hPirGIVsoayLdSiFM.roa
File: VET89AQb56hPirGIVsoayLdSiFM.roa (raw, json)
Hash identifier: k6o89Xdpcp4+3uXB4Rg1Tsb/iNnXfdGTHOBHfmxZKhk=
Subject key identifier: 54:44:FC:F4:04:1B:E7:A8:4F:8A:B1:88:56:CA:1A:C8:B7:52:88:53
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193892B8387778DE9E816E2CF721FF06E31
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VET89AQb56hPirGIVsoayLdSiFM.roa
Signing time: Mon 02 Dec 2024 20:59:10 +0000
ROA not before: Mon 02 Dec 2024 20:59:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 31.56.8.0/21 maxlen: 24
31.56.142.0/23 maxlen: 24
31.56.148.0/22 maxlen: 24
31.57.184.0/22 maxlen: 24
31.58.208.0/24 maxlen: 24
31.58.209.0/24 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
217.60.245.0/24 maxlen: 24
217.60.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Dec 2024 13:48:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:89:2b:83:87:77:8d:e9:e8:16:e2:cf:72:1f:f0:6e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 2 20:59:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5444fcf4041be7a84f8ab18856ca1ac8b7528853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:63:1b:cd:e0:55:a5:7a:7e:6e:f3:60:d9:a1:
0a:df:6b:1b:25:c1:0d:9c:d4:28:51:58:47:46:ee:
b8:26:b8:47:63:49:fc:29:be:5c:98:25:49:84:94:
1f:3c:07:f2:36:56:a3:b5:3b:56:af:6c:20:b5:61:
5f:1a:f2:e7:66:e7:1a:b1:19:60:0e:e3:ec:1d:2f:
76:72:8e:0c:13:34:84:1f:af:95:5f:30:f2:07:2e:
39:f8:37:d6:a4:c1:e8:69:b1:f8:46:24:c0:78:35:
7e:df:aa:c1:3f:30:15:b5:82:39:30:6c:69:d6:1d:
12:b6:88:12:09:9d:f7:15:fc:d7:4b:89:77:75:4f:
85:bf:56:13:43:38:44:dc:82:57:7b:e8:f9:c5:26:
85:90:3f:45:fe:db:99:14:d6:b3:75:1e:c7:ef:3d:
18:ce:a2:59:7a:cd:0a:fa:7a:e7:57:e5:6d:c4:99:
67:58:c8:ac:a8:c4:27:b5:d1:5b:97:ab:c8:7c:5a:
20:22:c9:91:70:6f:30:75:ab:f6:1a:95:c8:ae:bd:
fb:e0:b5:4e:7d:2e:a5:a4:cb:80:04:7e:47:5d:d2:
38:ff:06:5d:ad:83:6c:2e:fc:fd:9b:a0:17:34:6e:
57:3a:2b:f9:14:55:95:a1:ec:40:34:c0:ed:e0:ae:
ea:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:44:FC:F4:04:1B:E7:A8:4F:8A:B1:88:56:CA:1A:C8:B7:52:88:53
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VET89AQb56hPirGIVsoayLdSiFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.8.0/21
31.56.142.0/23
31.56.148.0/22
31.57.184.0/22
31.58.208.0/23
31.59.136.0-31.59.175.255
217.60.245.0/24
217.60.248.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:da:ca:b2:51:84:4f:0a:c9:a8:7f:28:ea:df:44:33:8c:e1:
9e:62:e1:32:1d:44:c3:32:ac:ee:9e:e2:a3:ed:ba:02:84:4e:
aa:d8:23:db:6d:34:b0:29:ed:14:78:02:1b:d9:f0:93:38:0a:
a1:06:f4:77:a2:b7:5c:ba:c9:7d:f6:51:0b:b3:c1:77:e0:f4:
10:ff:4b:f6:ad:06:1d:5c:31:69:8d:30:f3:1b:5a:c8:c3:73:
56:a1:de:39:6e:ba:cf:27:4b:cc:59:c8:58:f1:33:dc:1a:be:
d3:91:f9:00:d4:95:b7:27:3d:2b:a5:7f:71:27:76:0c:03:99:
e1:96:57:f3:3d:a4:49:71:dc:c2:33:16:f2:b5:1a:97:ff:ad:
22:db:cb:b9:c3:5f:7f:74:81:29:17:68:38:54:a5:4b:77:8a:
26:69:d1:4a:39:5a:ae:15:ce:13:73:fa:ca:64:dc:7b:83:38:
c9:e9:f0:06:2a:e5:00:f8:37:09:f5:4c:c3:6b:83:d8:fb:ec:
e3:95:b2:b6:d4:84:f5:38:f9:50:55:dc:e7:22:03:7d:48:af:
22:b2:7b:67:bd:00:13:cf:3e:9a:fc:ab:58:32:68:f0:c9:9a:
50:88:6c:6c:56:4f:98:30:35:ba:53:c0:5e:01:e3:0a:ad:07:
4c:92:f6:e1
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAZOJK4OHd43p6Bbiz3If8G4xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMjAyMjA1OTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDQ0ZmNmNDA0MWJlN2E4NGY4YWIxODg1NmNhMWFjOGI3NTI4ODUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WMbzeBVpXp+bvNg2aEK32sbJcEN
nNQoUVhHRu64JrhHY0n8Kb5cmCVJhJQfPAfyNlajtTtWr2wgtWFfGvLnZucasRlg
DuPsHS92co4MEzSEH6+VXzDyBy45+DfWpMHoabH4RiTAeDV+36rBPzAVtYI5MGxp
1h0StogSCZ33FfzXS4l3dU+Fv1YTQzhE3IJXe+j5xSaFkD9F/tuZFNazdR7H7z0Y
zqJZes0K+nrnV+VtxJlnWMisqMQntdFbl6vIfFogIsmRcG8wdav2GpXIrr374LVO
fS6lpMuABH5HXdI4/wZdrYNsLvz9m6AXNG5XOiv5FFWVoexANMDt4K7qFwIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFFRE/PQEG+eoT4qxiFbKGsi3UohTMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvVkVUODlBUWI1NmhQaXJHSVZzb2F5TGRTaUZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQDHzgIAwQB
HziOAwQCHziUAwQCHzm4AwQBHzrQMAwDBAMfO4gDBAQfO6ADBADZPPUDBADZPPgw
DQYJKoZIhvcNAQELBQADggEBAKjayrJRhE8Kyah/KOrfRDOM4Z5i4TIdRMMyrO6e
4qPtugKETqrYI9ttNLAp7RR4AhvZ8JM4CqEG9Heit1y6yX32UQuzwXfg9BD/S/at
Bh1cMWmNMPMbWsjDc1ah3jluus8nS8xZyFjxM9wavtOR+QDUlbcnPSulf3EndgwD
meGWV/M9pElx3MIzFvK1Gpf/rSLby7nDX390gSkXaDhUpUt3iiZp0Uo5Wq4VzhNz
+spk3HuDOMnp8AYq5QD4Nwn1TMNrg9j77OOVsrbUhPU4+VBV3OciA31IryKye2e9
ABPPPpr8q1gyaPDJmlCIbGxWT5gwNbpTwF4B4wqtB0yS9uE=
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:49:06 2025 by rpki-client