Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Wnj5dum8w_A1Txu-NAAwcpq5hHQ.roa
File: Wnj5dum8w_A1Txu-NAAwcpq5hHQ.roa (raw, json)
Hash identifier: k7uZuRyJdu32PMRAo/Mp4UaII+NrvQSmfKKQN8yhkP4=
Subject key identifier: 5A:78:F9:76:E9:BC:C3:F0:35:4F:1B:BE:34:00:30:72:9A:B9:84:74
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01937E3E9266BA1A36ED1724A6ADDBE5ED4A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Wnj5dum8w_A1Txu-NAAwcpq5hHQ.roa
Signing time: Sat 30 Nov 2024 18:04:10 +0000
ROA not before: Sat 30 Nov 2024 18:04:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.48.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.120.0/22 maxlen: 24
31.56.127.0/24 maxlen: 24
31.57.65.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.146.0/23 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.184.0/23 maxlen: 24
31.57.186.0/23 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.58.129.0/24 maxlen: 24
31.58.130.0/24 maxlen: 24
31.58.131.0/24 maxlen: 24
31.58.150.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.59.68.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 01 Dec 2024 13:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:7e:3e:92:66:ba:1a:36:ed:17:24:a6:ad:db:e5:ed:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 30 18:04:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a78f976e9bcc3f0354f1bbe340030729ab98474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:df:57:e3:e6:8c:37:0a:64:8a:f3:b9:0f:96:
52:ad:38:f9:35:ed:57:ba:73:31:2a:ca:74:a5:f8:
0e:e0:ff:82:6f:1f:f7:8d:dd:06:a9:ba:97:20:5a:
52:fb:bf:49:22:99:5d:f7:85:f5:45:fb:f2:47:c5:
86:89:f6:3c:da:75:6e:bd:38:1f:f7:75:ed:fe:75:
e7:3c:be:a9:bb:8f:5f:eb:5a:e2:82:70:4f:c8:d2:
43:ec:2b:0e:75:1b:25:cd:00:00:ce:ab:95:84:32:
98:3b:1e:c3:6f:93:c0:56:52:2a:26:c7:ec:52:fe:
70:89:08:a7:c5:77:6b:e2:ec:7e:2d:18:9d:77:a2:
cc:b0:5d:26:56:95:67:6b:e1:2a:48:3b:7e:ec:ff:
fd:60:ed:a7:9b:3e:53:05:1b:6d:32:2f:58:07:00:
c1:89:85:f0:06:3b:15:65:ba:15:a7:86:a5:8e:3e:
65:68:16:d7:e7:62:a6:b0:8a:21:12:2b:0b:bc:a2:
e5:73:42:78:61:7a:cd:78:bf:3b:38:d5:df:d7:45:
16:ed:48:2f:d3:02:60:2d:25:9b:49:d9:44:d4:4a:
cf:7a:09:c2:05:12:08:d0:47:7a:52:ef:7a:bd:43:
c1:c6:4f:e6:b8:9e:f9:ef:cc:7c:45:24:01:e5:75:
07:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:78:F9:76:E9:BC:C3:F0:35:4F:1B:BE:34:00:30:72:9A:B9:84:74
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Wnj5dum8w_A1Txu-NAAwcpq5hHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.48.0/24
31.56.57.0/24
31.56.89.0/24
31.56.104.0/21
31.56.120.0/22
31.56.127.0/24
31.57.65.0/24
31.57.132.0/23
31.57.146.0/23
31.57.176.0-31.57.188.255
31.57.192.0/22
31.57.232.0/22
31.58.129.0-31.58.131.255
31.58.150.0/24
31.58.152.0/22
31.59.68.0/24
31.59.96.0/22
31.59.112.0/22
31.59.184.0/22
Signature Algorithm: sha256WithRSAEncryption
27:4c:4c:d2:d4:75:ad:b2:ab:70:9b:d4:6f:9e:1c:a8:da:5d:
3e:23:69:0e:fc:f0:9e:b0:6b:36:8f:d2:b4:a0:36:da:cf:7d:
fa:e5:1b:88:87:3c:73:76:9c:8b:9d:9c:f0:10:b8:d4:f7:6a:
6b:3d:62:7e:b7:eb:22:fe:dd:3f:2e:1d:db:6c:49:36:39:01:
e3:85:96:62:2e:22:99:9e:c6:91:39:9b:70:45:71:99:74:b5:
ab:c9:1b:96:73:c0:03:bd:41:cb:4d:83:6a:dc:de:8a:c8:fb:
0f:bc:8e:b1:2a:27:04:7b:3f:d6:5d:fe:f0:27:41:19:86:c0:
26:cf:77:f7:09:1a:83:c1:45:86:aa:6c:9e:9d:5d:e0:8e:22:
e7:c8:7c:e7:7b:74:23:84:07:6a:fb:1c:3d:e4:ec:f6:ea:3a:
79:bf:d2:25:95:d5:79:b8:5d:73:99:e2:dd:20:3c:24:b2:63:
4b:1f:f1:26:b8:bc:10:ed:60:a5:7a:a8:cf:69:82:bb:cd:2b:
55:40:4c:bb:7f:3c:1b:75:c8:10:46:77:c1:a8:35:d1:c5:85:
de:c0:a6:43:10:cf:26:4f:50:a3:f7:36:8c:c1:b7:53:59:0f:
b4:e0:0b:5f:fe:f8:5d:22:7e:b0:be:fa:57:e6:28:d1:94:8e:
85:43:e8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:48:41 2025 by rpki-client