Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bngCD3RR0azqNe_7lKuYcxTny1Q.roa
File: bngCD3RR0azqNe_7lKuYcxTny1Q.roa (raw, json)
Hash identifier: dh0I1OhSLxGL2TpUfU1L+KR6DTb7n5UpNVxNDdnWbs0=
Subject key identifier: 6E:78:02:0F:74:51:D1:AC:EA:35:EF:FB:94:AB:98:73:14:E7:CB:54
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01940BA0417AE1FE545DA73802D9C8615721
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bngCD3RR0azqNe_7lKuYcxTny1Q.roa
Signing time: Sat 28 Dec 2024 04:57:19 +0000
ROA not before: Sat 28 Dec 2024 04:57:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25369
IP address blocks: 31.56.176.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.184.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.192.0/22 maxlen: 24
31.56.196.0/22 maxlen: 24
31.56.204.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.216.0/22 maxlen: 24
31.56.220.0/22 maxlen: 24
31.56.224.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.232.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.58.36.0/22 maxlen: 24
31.58.44.0/22 maxlen: 24
31.58.52.0/22 maxlen: 24
31.58.60.0/22 maxlen: 24
31.59.36.0/22 maxlen: 24
31.59.44.0/22 maxlen: 24
31.59.196.0/22 maxlen: 24
31.59.200.0/22 maxlen: 24
31.59.204.0/22 maxlen: 24
31.59.208.0/22 maxlen: 24
31.59.212.0/22 maxlen: 24
31.59.220.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:0b:a0:41:7a:e1:fe:54:5d:a7:38:02:d9:c8:61:57:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 28 04:57:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e78020f7451d1acea35effb94ab987314e7cb54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ff:2a:af:21:e6:b0:87:19:aa:80:63:3c:ac:
3a:28:26:4e:05:8f:14:78:4c:0f:86:3d:d8:12:a1:
57:f3:9f:8e:bd:aa:b5:8c:46:31:ef:19:b9:17:04:
5c:b4:59:03:21:fe:15:53:a6:84:cb:39:e1:a4:c2:
6b:4e:cf:f1:bd:5f:8d:e6:f4:8f:e1:f3:88:0f:74:
a3:39:ff:98:44:69:38:80:bb:c9:a0:17:7a:a9:b0:
51:08:de:56:fd:d6:e4:66:35:7a:d3:8b:85:cd:62:
4d:3f:d7:06:ae:64:f2:d5:11:08:91:50:fd:56:f1:
f8:41:ef:d8:4f:41:41:01:e2:75:b7:92:7b:75:33:
b8:b8:27:2f:c6:32:96:66:b9:1f:52:6e:d4:92:55:
05:8b:21:a8:d0:d1:06:ff:00:e1:f1:c4:63:ee:51:
21:92:cb:f5:ba:67:0d:7e:92:aa:b8:b9:82:db:9e:
eb:66:1b:8d:41:37:52:8c:3b:56:40:3b:5f:94:05:
6f:0d:fe:b3:1d:2a:a2:d2:ef:62:9a:a0:0d:34:75:
a2:2c:b9:39:49:b4:fa:e3:59:ba:e6:f4:12:18:62:
3a:c1:9f:9a:cb:19:53:46:62:ed:e4:b7:3c:db:4d:
43:2c:1f:cb:66:99:12:11:2a:66:9f:66:4f:96:bb:
00:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:78:02:0F:74:51:D1:AC:EA:35:EF:FB:94:AB:98:73:14:E7:CB:54
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bngCD3RR0azqNe_7lKuYcxTny1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.176.0-31.56.199.255
31.56.204.0-31.56.239.255
31.58.36.0/22
31.58.44.0/22
31.58.52.0/22
31.58.60.0/22
31.59.36.0/22
31.59.44.0/22
31.59.196.0-31.59.215.255
31.59.220.0/22
Signature Algorithm: sha256WithRSAEncryption
53:83:b3:d0:61:5c:d9:1e:08:34:91:cc:ec:d1:6d:af:c4:23:
cd:0d:f6:91:9e:8e:62:a3:42:31:4d:1d:84:a9:dd:ed:5e:8f:
f9:f8:11:c2:c3:e7:54:88:aa:5a:90:41:28:30:05:5f:25:41:
69:24:a5:fb:15:a6:51:0b:36:06:36:c1:31:a2:76:5b:1c:a5:
3a:77:37:dc:bc:d6:cb:b1:d4:f6:96:5f:da:3e:f4:f3:c9:43:
f2:e8:17:e5:88:b5:cb:2e:29:ac:37:65:54:1d:db:eb:ae:2f:
3b:90:3b:16:83:ce:f4:fe:39:18:16:60:55:e4:1d:8a:de:58:
48:5c:1d:6f:5a:e6:66:bf:5d:8b:75:7f:d1:57:9a:93:b3:25:
8f:1c:70:9d:34:48:8a:d4:57:a8:26:2e:41:c8:11:f1:95:f5:
20:55:1c:65:77:dd:51:97:96:1c:c6:f6:72:81:95:0b:83:50:
35:57:97:7e:c6:94:e9:fd:f9:bd:3e:d3:83:f7:68:cf:c1:10:
f1:81:10:09:6b:03:b7:f2:34:6f:a9:c0:61:c5:88:91:a5:cc:
dd:d8:a5:11:93:ad:0f:8b:c4:74:0d:3e:66:de:41:ac:df:e1:
b9:fb:d6:7c:bb:cb:c6:5c:da:05:af:8d:7a:e8:19:b8:c6:67:
3a:20:fc:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:48:44 2025 by rpki-client