Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/a5PPd2hm9LCyEYG-xM7C-pZ4ZhI.roa
File: a5PPd2hm9LCyEYG-xM7C-pZ4ZhI.roa (raw, json)
Hash identifier: XHLwgDuHt7rpzj0xq/Sbt+mSbQRUs+qizPc43FCZpeg=
Subject key identifier: 6B:93:CF:77:68:66:F4:B0:B2:11:81:BE:C4:CE:C2:FA:96:78:66:12
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193CC1AB64A906D77FA269F8CB8BA9F656F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/a5PPd2hm9LCyEYG-xM7C-pZ4ZhI.roa
Signing time: Sun 15 Dec 2024 20:55:22 +0000
ROA not before: Sun 15 Dec 2024 20:55:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.62.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.73.0/24 maxlen: 24
31.56.74.0/24 maxlen: 24
31.56.75.0/24 maxlen: 24
31.56.85.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.156.0/24 maxlen: 24
31.57.65.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.146.0/23 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.204.0/24 maxlen: 24
31.57.207.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.58.130.0/24 maxlen: 24
31.58.131.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.167.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Dec 2024 07:08:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:cc:1a:b6:4a:90:6d:77:fa:26:9f:8c:b8:ba:9f:65:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 15 20:55:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b93cf776866f4b0b21181bec4cec2fa96786612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:eb:5a:5a:eb:70:7e:66:ee:96:20:7f:34:00:
e1:3c:32:6f:c7:7a:95:1a:50:78:88:9c:62:57:31:
0b:8a:91:cc:82:09:82:7f:f9:9d:26:70:61:0d:27:
3a:64:82:c8:cf:fd:bd:de:79:e7:a3:93:fe:c7:ac:
ad:28:14:61:a4:1e:1f:e9:5e:a2:e1:c4:84:6c:4e:
06:7d:c8:40:2e:5b:63:9c:19:10:07:61:11:33:16:
fb:e0:67:da:6b:25:37:e8:d9:3c:de:df:0c:da:e4:
b7:8e:12:66:78:d3:e5:a5:29:52:4b:12:4d:5d:5f:
8d:a9:e1:9d:3d:02:4e:0d:15:f1:95:68:92:8d:64:
48:71:0a:f1:0b:1f:9e:fa:b9:19:66:72:11:96:d2:
c1:c6:34:76:f0:24:21:1e:7d:88:f8:04:37:fc:13:
5d:62:28:9f:77:8a:bc:8e:d0:6e:01:0f:e5:59:fb:
69:4a:17:a3:bd:8d:22:c8:7d:03:00:2f:16:70:f0:
3e:89:41:e4:1a:27:28:01:39:c9:e8:46:87:a6:b4:
0f:a7:36:6b:a7:ba:c1:dd:00:83:37:a8:7e:20:76:
63:c4:84:86:0b:42:b5:1a:fa:22:53:51:56:d5:c4:
17:85:11:66:47:87:48:c2:15:f2:50:53:5c:68:7c:
07:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:93:CF:77:68:66:F4:B0:B2:11:81:BE:C4:CE:C2:FA:96:78:66:12
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/a5PPd2hm9LCyEYG-xM7C-pZ4ZhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.62.0/24
31.56.71.0/24
31.56.73.0-31.56.75.255
31.56.85.0/24
31.56.89.0/24
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.156.0/24
31.57.65.0/24
31.57.132.0/23
31.57.146.0/23
31.57.176.0/21
31.57.188.0/24
31.57.192.0/22
31.57.200.0/23
31.57.204.0/24
31.57.207.0/24
31.57.232.0/22
31.58.130.0/23
31.58.152.0/22
31.58.167.0/24
31.59.96.0/22
31.59.112.0/22
31.59.184.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:62:ce:56:c4:f8:7a:a1:e6:81:fc:8f:78:ed:07:2c:30:fa:
bd:dc:65:ed:32:eb:e5:1f:c2:b3:af:91:a0:92:0f:90:4a:fe:
67:10:79:20:da:21:dd:aa:2a:16:ff:e1:ac:dd:68:d9:2b:fa:
c6:5a:c7:22:08:5c:c2:20:ab:42:6d:59:4d:88:04:30:4b:92:
20:a0:75:30:7a:b9:5c:57:d8:7a:31:76:64:3e:fd:30:32:05:
d0:a6:57:e4:df:75:ae:be:06:de:61:e9:23:fb:39:af:7f:66:
d9:a8:90:28:67:aa:fc:be:34:e9:e8:0d:33:f2:54:d3:58:37:
ee:93:8d:03:46:ee:6a:f2:c7:23:75:1a:96:af:6a:3f:3a:d0:
c5:23:4c:7f:f3:cb:19:b8:ba:18:a2:fb:48:64:cb:7a:59:63:
72:03:ae:f5:fb:43:3c:67:a1:a5:04:99:69:97:70:8c:1a:25:
1b:af:81:55:9f:7a:ca:7c:86:8e:bc:55:61:f7:e0:3b:07:ae:
8b:53:2f:d4:8c:b6:3c:09:76:dc:f8:5c:50:52:8c:8c:54:37:
15:de:82:86:b7:58:e6:b1:9e:ba:10:3e:ea:ef:fe:86:d8:bf:
72:90:3d:56:cb:dc:d5:df:12:f0:68:21:b8:23:3c:77:18:b7:
3f:8c:b0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:48:38 2025 by rpki-client