Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZhSyjX5W4SjvpiwOLV86Bia3rkY.roa
File: ZhSyjX5W4SjvpiwOLV86Bia3rkY.roa (raw, json)
Hash identifier: UAVAEX1+61IdpqrbWy+CdAuLysX1LkUjMuVQbuH81Iw=
Subject key identifier: 66:14:B2:8D:7E:56:E1:28:EF:A6:2C:0E:2D:5F:3A:06:26:B7:AE:46
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01959435D2AE724039453A946149668901C4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZhSyjX5W4SjvpiwOLV86Bia3rkY.roa
Signing time: Fri 14 Mar 2025 10:31:50 +0000
ROA not before: Fri 14 Mar 2025 10:31:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 31.56.8.0/21 maxlen: 24
31.56.126.0/24 maxlen: 24
31.56.142.0/23 maxlen: 24
31.56.148.0/22 maxlen: 24
31.57.184.0/22 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.228.0/24 maxlen: 24
31.59.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Mar 2025 15:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:94:35:d2:ae:72:40:39:45:3a:94:61:49:66:89:01:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 14 10:31:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6614b28d7e56e128efa62c0e2d5f3a0626b7ae46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ba:10:4b:b6:0c:56:1a:0e:4f:0b:d2:8b:cc:
da:a8:b0:ff:bd:c1:00:70:46:3f:e2:57:c8:84:37:
ca:8c:5e:60:4a:e3:10:6a:2f:db:e1:07:ad:ce:42:
9d:e7:12:62:29:07:df:ef:c7:42:d2:5f:45:6d:3c:
0c:ed:94:3e:ee:83:3b:38:f1:48:e8:8c:b2:16:7d:
c1:0d:cd:45:fc:53:ee:25:83:8c:12:a3:d5:75:9e:
58:47:03:7f:e6:b9:7b:fe:36:04:8e:5f:b5:56:19:
80:e1:08:73:38:39:b3:25:77:fe:6a:67:6d:22:d0:
e0:ed:93:1b:63:36:c2:fa:44:94:3b:d6:b2:b5:5b:
03:25:d6:e6:66:46:a3:56:4b:4d:65:50:34:3e:c8:
85:e9:19:09:95:54:5c:cf:ad:5c:03:6d:9b:f6:78:
e3:d1:5c:7f:c4:f6:94:85:32:cf:05:5f:70:d0:91:
95:21:e7:d6:ac:f6:64:9e:ae:e4:79:53:07:15:e0:
7f:30:66:d1:93:ea:af:c5:1f:e8:4f:ad:a1:d0:3c:
c5:80:79:1a:8e:9b:37:0c:cd:95:60:9b:6d:7e:08:
f5:ba:32:80:0b:4a:f2:4b:32:6f:cb:25:80:bd:45:
ac:e3:33:2a:84:06:4f:36:4e:86:f5:02:44:c0:ab:
d1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:14:B2:8D:7E:56:E1:28:EF:A6:2C:0E:2D:5F:3A:06:26:B7:AE:46
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZhSyjX5W4SjvpiwOLV86Bia3rkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.8.0/21
31.56.126.0/24
31.56.142.0/23
31.56.148.0/22
31.57.184.0/22
31.59.136.0-31.59.175.255
31.59.228.0/24
31.59.230.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:cf:aa:24:5e:da:c5:e1:e4:c5:33:ad:cc:20:6a:a5:36:23:
39:2f:35:30:fa:83:04:7c:2a:72:a1:cc:32:c4:8c:f2:8b:43:
b5:bb:fb:48:ca:cc:b8:09:f8:37:a8:6d:bf:1e:c7:3c:c8:7c:
86:95:c8:65:05:6d:5d:22:1f:eb:51:60:25:53:fc:b1:05:00:
1e:c8:c5:af:13:7c:e1:4e:82:c1:16:fc:8c:81:e6:6a:07:93:
1f:fa:12:83:e5:08:84:63:5b:31:50:0d:89:ae:9b:52:89:d8:
48:80:c0:7a:73:88:ee:17:38:1b:2f:48:5a:96:5a:77:26:a7:
d8:97:32:7a:76:6f:5e:01:40:85:d2:53:9b:39:52:ae:4a:b1:
37:d5:a3:b7:93:cc:f7:74:17:85:a6:87:ff:16:eb:91:7f:50:
a0:a8:48:36:4a:0c:46:df:c0:93:31:d4:e5:65:7f:cb:87:ed:
72:4d:f4:57:0d:77:d6:7a:c1:7b:a6:94:a7:5a:cd:a1:5b:06:
a2:fe:cd:ee:ae:44:d5:38:1c:52:92:98:79:25:91:ec:2f:97:
36:79:d1:53:bb:67:17:12:fd:78:28:e0:1a:36:51:3d:82:ef:
85:af:a8:b3:bd:2b:60:b0:85:90:ed:70:56:bc:42:68:e6:a4:
b4:c1:c2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:58:20 2025 by rpki-client