Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WROoP3jqDm9JeiEbKtySTcFhRdM.roa
File: WROoP3jqDm9JeiEbKtySTcFhRdM.roa (raw, json)
Hash identifier: cB/9P/tZPJqf6XMHj8vEfMYzVWsAyTOkDZ6zhMbia50=
Subject key identifier: 59:13:A8:3F:78:EA:0E:6F:49:7A:21:1B:2A:DC:92:4D:C1:61:45:D3
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193C0CBCFDEBBDBDA56AC6D11E4F2ECD461
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WROoP3jqDm9JeiEbKtySTcFhRdM.roa
Signing time: Fri 13 Dec 2024 16:13:22 +0000
ROA not before: Fri 13 Dec 2024 16:13:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.62.0/24 maxlen: 24
31.56.85.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.156.0/24 maxlen: 24
31.57.65.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.146.0/23 maxlen: 24
31.57.166.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.204.0/24 maxlen: 24
31.57.207.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.58.130.0/24 maxlen: 24
31.58.131.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.167.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 14 Dec 2024 17:36:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c0:cb:cf:de:bb:db:da:56:ac:6d:11:e4:f2:ec:d4:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 13 16:13:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5913a83f78ea0e6f497a211b2adc924dc16145d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e6:70:72:84:ba:f0:6e:ac:12:c3:02:c6:bf:
68:9c:aa:7d:ed:11:00:91:1c:42:52:d8:89:69:58:
fc:f8:95:04:e7:9f:2d:fb:5a:b3:bd:91:a9:84:ee:
92:36:d5:ab:e0:1f:ef:be:ca:2e:a4:58:1a:2e:56:
3e:51:4a:89:c2:62:c0:c7:67:07:17:03:76:96:34:
01:b3:35:43:98:2b:61:e0:da:ce:1d:d9:26:7f:00:
ec:f4:d3:79:b1:3a:f7:0a:ff:e0:3f:4d:4a:08:61:
67:18:5c:c4:0c:88:78:a2:b2:90:f2:aa:6e:88:3b:
cc:70:41:3b:0c:a0:69:92:03:3d:59:04:dc:08:0a:
98:74:78:77:52:a7:84:7a:4c:79:47:e5:b7:c6:b8:
24:6c:a6:96:70:66:d9:60:ca:3f:87:86:e6:b2:86:
37:28:56:73:3e:29:dd:cd:bb:5c:3f:95:fd:ca:e0:
b9:dc:f1:7d:ce:d2:37:16:9a:d9:d5:1d:0d:1b:d4:
71:54:b7:75:56:b3:aa:ab:70:e5:d5:7d:ea:3c:02:
8f:03:71:28:da:62:26:2b:59:74:d5:82:13:dc:fa:
0c:1b:d7:71:8e:0b:47:33:84:50:2d:8b:3c:d3:93:
f3:05:ec:37:9a:66:ae:c0:5d:43:bf:4a:b9:72:a0:
20:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:13:A8:3F:78:EA:0E:6F:49:7A:21:1B:2A:DC:92:4D:C1:61:45:D3
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WROoP3jqDm9JeiEbKtySTcFhRdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.62.0/24
31.56.85.0/24
31.56.89.0/24
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.156.0/24
31.57.65.0/24
31.57.132.0/23
31.57.146.0/23
31.57.166.0/24
31.57.176.0/21
31.57.188.0/24
31.57.192.0/22
31.57.200.0/23
31.57.204.0/24
31.57.207.0/24
31.57.232.0/22
31.58.130.0/23
31.58.152.0/22
31.58.167.0/24
31.59.96.0/22
31.59.112.0/22
31.59.184.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:6b:07:2f:ec:e0:ff:be:7e:ee:79:57:72:a9:48:fe:28:2e:
32:ba:f6:5e:26:e0:4d:ce:69:5d:6d:66:5f:21:bb:a5:e6:d9:
04:ea:0c:25:aa:d7:97:1c:2c:a1:58:33:cf:83:34:b5:1b:da:
58:48:7c:9f:f7:37:e4:ba:89:08:4a:3c:fc:45:fa:a1:a5:70:
bf:5d:3d:20:d2:8e:9b:34:c5:6f:70:c5:63:54:92:95:18:f3:
0d:fc:a8:7f:86:4d:e6:de:9d:fa:c7:d9:f5:b0:bd:a5:41:e4:
bd:8b:7d:85:b9:24:64:83:5c:f5:83:22:99:c1:f7:6b:d2:4b:
22:5d:6a:19:01:37:5f:7e:65:e8:55:ca:ce:f2:a9:79:6d:5f:
89:44:4a:98:6d:f1:65:ba:de:18:48:b5:f4:2f:1b:91:c2:ac:
e9:41:98:91:a9:11:b1:aa:e2:41:c1:95:cd:28:b5:d8:e7:bf:
bb:7b:2f:ea:52:d4:99:f9:5e:72:32:a4:9e:53:c6:b1:bf:a5:
63:f9:99:7c:f6:fa:b2:33:18:26:f3:37:f3:bf:f7:a6:a0:ef:
71:c6:6a:b2:c3:4c:fb:22:16:09:f8:5c:75:85:13:dd:6b:cf:
38:e8:7b:67:49:80:58:24:d0:5f:e9:6c:68:7d:2d:6f:7f:66:
b3:1e:7c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:51:33 2025 by rpki-client