Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZiJv3Qv9R_hJe25JHYEXhuB44RI.roa
File: ZiJv3Qv9R_hJe25JHYEXhuB44RI.roa (raw, json)
Hash identifier: 0WVt9QULHYBOMuzXz6vNbiDnBnAxtZJemV2Eaov77Uc=
Subject key identifier: 66:22:6F:DD:0B:FD:47:F8:49:7B:6E:49:1D:81:17:86:E0:78:E1:12
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01936C9DF0E107E1E677100F2A10E96D2806
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZiJv3Qv9R_hJe25JHYEXhuB44RI.roa
Signing time: Wed 27 Nov 2024 07:55:10 +0000
ROA not before: Wed 27 Nov 2024 07:55:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 31.56.112.0/21 maxlen: 24
31.56.114.0/23 maxlen: 23
31.56.118.0/23 maxlen: 23
31.57.11.0/24 maxlen: 24
31.57.131.0/24 maxlen: 24
31.57.150.0/24 maxlen: 24
31.57.176.0/24 maxlen: 24
31.57.178.0/24 maxlen: 24
31.57.179.0/24 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.182.0/24 maxlen: 24
31.57.183.0/24 maxlen: 24
31.57.194.0/24 maxlen: 24
31.57.224.0/22 maxlen: 23
31.57.252.0/22 maxlen: 23
31.58.59.0/24 maxlen: 24
31.58.129.0/24 maxlen: 24
31.58.142.0/24 maxlen: 24
31.58.146.0/24 maxlen: 24
31.58.152.0/22 maxlen: 22
31.58.167.0/24 maxlen: 24
31.58.176.0/22 maxlen: 22
31.58.200.0/22 maxlen: 22
31.58.216.0/22 maxlen: 22
31.58.240.0/22 maxlen: 22
31.58.252.0/22 maxlen: 22
31.59.41.0/24 maxlen: 24
31.59.56.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.58.0/24 maxlen: 24
31.59.64.0/22 maxlen: 22
31.59.80.0/22 maxlen: 22
31.59.124.0/22 maxlen: 22
31.59.176.0/22 maxlen: 22
31.59.180.0/22 maxlen: 22
31.59.188.0/22 maxlen: 22
31.59.192.0/22 maxlen: 22
31.59.216.0/22 maxlen: 24
31.59.228.0/24 maxlen: 24
31.59.229.0/24 maxlen: 24
31.59.231.0/24 maxlen: 24
31.59.244.0/24 maxlen: 24
31.59.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Nov 2024 07:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6c:9d:f0:e1:07:e1:e6:77:10:0f:2a:10:e9:6d:28:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 27 07:55:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66226fdd0bfd47f8497b6e491d811786e078e112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3f:8d:50:7a:58:31:61:a0:e3:83:0f:ab:22:
57:31:58:67:7c:9e:5d:38:bf:9d:93:0c:39:9d:6b:
6d:02:05:4e:29:4a:f6:1b:9f:a0:c1:ae:5d:e1:90:
3c:d3:85:4d:54:0f:32:78:91:6c:7a:eb:af:88:9f:
17:f3:67:b1:15:3b:60:41:85:70:c4:a8:d8:4f:14:
05:1d:25:d8:89:d5:17:3f:07:fc:b4:9d:55:88:73:
aa:33:6f:00:b1:8e:08:59:47:8b:8d:68:15:43:00:
96:03:da:40:c6:df:0a:67:ae:56:be:be:fb:6d:7f:
15:af:b6:8c:cb:86:d9:06:e9:4f:3d:6d:83:00:6c:
c0:1f:9c:6a:74:79:65:12:39:4f:ed:6c:92:8a:c4:
8a:a5:f2:56:06:bc:21:cd:dd:e4:53:df:b5:a9:84:
d7:80:e7:bc:47:f1:a1:a5:13:e7:88:6e:c0:a3:93:
b1:fc:ab:1f:3c:9a:48:86:4d:aa:52:fe:50:95:d6:
db:b7:f7:61:35:86:88:6b:dd:04:a7:2c:b4:f9:3a:
f1:77:b9:5e:6e:67:f5:d9:15:7b:2b:4c:1b:2b:37:
5b:c8:19:56:5d:32:6c:62:ec:ab:2b:1d:d0:3b:bb:
2c:66:78:ff:53:bd:87:33:5a:29:38:ce:58:4d:56:
f6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:22:6F:DD:0B:FD:47:F8:49:7B:6E:49:1D:81:17:86:E0:78:E1:12
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZiJv3Qv9R_hJe25JHYEXhuB44RI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.112.0/21
31.57.11.0/24
31.57.131.0/24
31.57.150.0/24
31.57.176.0/24
31.57.178.0/23
31.57.181.0-31.57.183.255
31.57.194.0/24
31.57.224.0/22
31.57.252.0/22
31.58.59.0/24
31.58.129.0/24
31.58.142.0/24
31.58.146.0/24
31.58.152.0/22
31.58.167.0/24
31.58.176.0/22
31.58.200.0/22
31.58.216.0/22
31.58.240.0/22
31.58.252.0/22
31.59.41.0/24
31.59.56.0-31.59.58.255
31.59.64.0/22
31.59.80.0/22
31.59.124.0/22
31.59.176.0/21
31.59.188.0-31.59.195.255
31.59.216.0/22
31.59.228.0/23
31.59.231.0/24
31.59.244.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:84:8b:03:92:f2:7b:98:bb:a2:de:b7:e5:a1:55:15:b9:e2:
cc:c8:11:4f:73:bf:92:ff:9e:c5:74:2e:7f:dd:c2:3a:84:79:
0e:56:22:67:11:2e:a1:30:f5:64:8a:f8:ed:fa:23:07:4a:f6:
12:84:48:c0:b7:91:3b:6f:a1:2d:90:d9:65:05:b9:f5:7e:f8:
33:70:fa:50:c4:d4:50:fd:33:09:a7:c5:5d:4d:c1:bf:38:81:
24:1b:b3:d7:84:bb:4b:3b:09:fc:85:9b:69:a8:ff:f2:f5:d9:
28:0c:5a:74:e0:46:71:f6:66:c6:8e:7c:90:8a:2d:fa:d4:d1:
61:ec:ee:a8:a6:7c:23:36:17:cd:88:8d:6a:5f:34:c6:16:da:
1e:c4:72:fc:ca:d1:b7:a0:f0:b5:70:cf:45:1e:cb:48:fa:26:
e2:c9:d7:2e:76:72:3b:fb:71:3f:bb:2f:78:5c:5c:bd:6c:1f:
5e:b3:26:7f:c6:a7:dc:c8:07:df:7f:e5:cc:2c:07:6d:5f:12:
99:0c:1f:85:52:eb:1b:36:75:25:8d:e3:4c:6e:a7:be:94:9f:
f7:62:14:b9:02:88:47:53:87:de:08:96:03:6a:56:23:f4:11:
12:5f:e4:3e:bf:7d:42:74:e8:0d:f9:22:93:79:0c:27:f3:21:
dc:12:d9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:06 2025 by rpki-client