Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/b183tsiGBS2wdCIwslWY7yHAZnw.roa
File: b183tsiGBS2wdCIwslWY7yHAZnw.roa (raw, json)
Hash identifier: +s/9TcXBrvp6UmG6nhHIlNfd1IbYkFU4YEES1pKKc7w=
Subject key identifier: 6F:5F:37:B6:C8:86:05:2D:B0:74:22:30:B2:55:98:EF:21:C0:66:7C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019428237E084D2742AE258DDDA57C515B7E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/b183tsiGBS2wdCIwslWY7yHAZnw.roa
Signing time: Thu 02 Jan 2025 17:50:02 +0000
ROA not before: Thu 02 Jan 2025 17:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215304
IP address blocks: 31.56.59.0/24 maxlen: 24
31.56.67.0/24 maxlen: 24
31.56.69.0/24 maxlen: 24
31.56.72.0/24 maxlen: 24
31.56.84.0/24 maxlen: 24
31.56.88.0/24 maxlen: 24
31.56.120.0/24 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.122.0/24 maxlen: 24
31.56.123.0/24 maxlen: 24
31.56.126.0/24 maxlen: 24
31.56.200.0/24 maxlen: 24
31.56.202.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.132.0/24 maxlen: 24
31.57.133.0/24 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.215.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.221.0/24 maxlen: 24
31.57.255.0/24 maxlen: 24
31.58.88.0/24 maxlen: 24
31.58.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 Jan 2025 19:58:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:7e:08:4d:27:42:ae:25:8d:dd:a5:7c:51:5b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f5f37b6c886052db0742230b25598ef21c0667c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:54:52:22:6c:e6:24:a5:f8:66:78:b8:6c:4e:
96:0a:d0:a4:55:a6:8b:0e:16:42:81:36:5f:32:b0:
d4:97:60:3c:5a:2e:f7:f0:7e:ea:a1:a8:f0:ea:f3:
23:e6:99:e1:aa:3b:9c:d7:da:67:b6:ab:7b:76:0a:
f6:78:90:89:75:09:bd:a9:38:7b:20:84:60:25:b3:
10:19:30:5a:fa:42:f1:2e:52:04:40:36:68:d9:d8:
9e:d7:77:75:ef:18:6c:e7:4f:dd:24:f9:a5:e0:f7:
7b:8a:28:aa:f1:52:8a:f3:10:a2:04:68:37:d2:ca:
8e:2a:eb:ec:8c:5e:7f:db:f3:a5:95:c3:0d:79:7c:
50:22:ba:d2:0e:81:0e:b0:4b:79:07:ee:73:9b:17:
1e:99:69:e1:25:22:ce:0d:c7:df:b9:42:d7:30:4f:
99:8c:c0:ba:a2:0d:b6:1a:1d:ea:2b:20:28:92:b1:
3b:c9:9d:67:6c:43:d5:ce:bd:77:bb:1d:0b:3c:c6:
d5:3f:49:45:50:50:6b:d5:33:5b:24:56:18:26:42:
d7:4c:0d:17:8f:3f:4d:fc:3f:bf:4b:3a:11:f2:27:
f1:27:4b:9a:a4:e2:c8:40:68:0f:79:21:f7:48:62:
d6:11:24:36:58:94:43:26:c2:3d:ae:f6:29:36:46:
0a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5F:37:B6:C8:86:05:2D:B0:74:22:30:B2:55:98:EF:21:C0:66:7C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/b183tsiGBS2wdCIwslWY7yHAZnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.59.0/24
31.56.67.0/24
31.56.69.0/24
31.56.72.0/24
31.56.84.0/24
31.56.88.0/24
31.56.120.0/22
31.56.126.0/24
31.56.200.0/24
31.56.202.0/24
31.57.104.0/21
31.57.132.0/23
31.57.181.0/24
31.57.215.0/24
31.57.219.0/24
31.57.221.0/24
31.57.255.0/24
31.58.88.0/23
Signature Algorithm: sha256WithRSAEncryption
41:4d:36:2d:76:3d:81:92:aa:ff:54:6e:14:d2:39:a2:f0:0a:
11:4c:38:97:e2:2f:59:9b:57:cc:f7:ce:8d:37:4a:16:9e:df:
ab:34:c4:70:f3:68:7f:76:e3:d5:89:fb:90:3b:53:fc:a3:67:
1b:f5:1a:b5:86:d7:b2:f9:df:ad:a1:e6:74:ae:6c:80:a4:05:
6e:e6:f5:c3:a2:1e:9b:f0:72:9c:0e:bb:03:1a:15:77:32:bd:
d9:ba:13:c2:11:c3:e4:29:1f:d6:56:49:31:38:dd:d1:41:92:
8e:f0:2e:5b:dc:da:a8:8d:72:52:db:d0:ca:c1:8b:ac:f2:65:
ad:4e:90:b1:97:a0:16:0e:ae:39:6e:15:9a:d4:23:94:d1:6b:
80:2d:46:ea:a3:b9:43:4c:4c:b9:4e:6f:72:0b:d4:38:e2:86:
e7:00:63:15:7f:97:ec:7a:e1:aa:63:d1:6d:c5:51:11:e6:6c:
c5:b9:19:c2:05:70:83:8a:98:70:e7:75:22:5a:54:76:4e:74:
7a:a5:fb:ef:49:db:9a:bd:92:64:01:85:91:0d:bf:cc:e5:a1:
14:c0:23:c4:90:6f:ac:62:04:2b:77:c6:0f:bb:0b:0c:4e:83:
51:a6:62:8a:b4:ca:aa:90:3d:47:16:56:2b:a4:81:92:18:0f:
c0:a9:5a:90
-----BEGIN CERTIFICATE-----
MIIFZDCCBEygAwIBAgISAZQoI34ITSdCriWN3aV8UVt+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMTAyMTc1MDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjVmMzdiNmM4ODYwNTJkYjA3NDIyMzBiMjU1OThlZjIxYzA2NjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFRSImzmJKX4Zni4bE6WCtCkVaaL
DhZCgTZfMrDUl2A8Wi738H7qoajw6vMj5pnhqjuc19pntqt7dgr2eJCJdQm9qTh7
IIRgJbMQGTBa+kLxLlIEQDZo2die13d17xhs50/dJPml4Pd7iiiq8VKK8xCiBGg3
0sqOKuvsjF5/2/OllcMNeXxQIrrSDoEOsEt5B+5zmxcemWnhJSLODcffuULXME+Z
jMC6og22Gh3qKyAokrE7yZ1nbEPVzr13ux0LPMbVP0lFUFBr1TNbJFYYJkLXTA0X
jz9N/D+/SzoR8ifxJ0uapOLIQGgPeSH3SGLWESQ2WJRDJsI9rvYpNkYKRQIDAQAB
o4ICcDCCAmwwHQYDVR0OBBYEFG9fN7bIhgUtsHQiMLJVmO8hwGZ8MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvYjE4M3RzaUdCUzJ3ZENJd3NsV1k3eUhBWm53LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbAMEAB84OwME
AB84QwMEAB84RQMEAB84SAMEAB84VAMEAB84WAMEAh84eAMEAB84fgMEAB84yAME
AB84ygMEAx85aAMEAR85hAMEAB85tQMEAB851wMEAB852wMEAB853QMEAB85/wME
AR86WDANBgkqhkiG9w0BAQsFAAOCAQEAQU02LXY9gZKq/1RuFNI5ovAKEUw4l+Iv
WZtXzPfOjTdKFp7fqzTEcPNof3bj1Yn7kDtT/KNnG/UatYbXsvnfraHmdK5sgKQF
bub1w6Iem/BynA67AxoVdzK92boTwhHD5Ckf1lZJMTjd0UGSjvAuW9zaqI1yUtvQ
ysGLrPJlrU6QsZegFg6uOW4VmtQjlNFrgC1G6qO5Q0xMuU5vcgvUOOKG5wBjFX+X
7HrhqmPRbcVREeZsxbkZwgVwg4qYcOd1IlpUdk50eqX770nbmr2SZAGFkQ2/zOWh
FMAjxJBvrGIEK3fGD7sLDE6DUaZiirTKqpA9RxZWK6SBkhgPwKlakA==
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:51:21 2025 by rpki-client