Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/c7hqeBGHzysiAY-UBPZ34YXmyWQ.roa
File: c7hqeBGHzysiAY-UBPZ34YXmyWQ.roa (raw, json)
Hash identifier: 9jrOPUDkG0288tu5xQ0ix2M8AjpsbFoZPakTmtrNSJs=
Subject key identifier: 73:B8:6A:78:11:87:CF:2B:22:01:8F:94:04:F6:77:E1:85:E6:C9:64
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193405FF44B47297F0A5016C07F485B9A24
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/c7hqeBGHzysiAY-UBPZ34YXmyWQ.roa
Signing time: Mon 18 Nov 2024 17:44:10 +0000
ROA not before: Mon 18 Nov 2024 17:44:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 31.56.33.0/24 maxlen: 24
31.56.64.0/24 maxlen: 24
31.56.160.0/21 maxlen: 24
31.57.184.0/23 maxlen: 24
31.57.186.0/23 maxlen: 24
31.57.202.0/24 maxlen: 24
31.57.203.0/24 maxlen: 24
31.59.34.0/24 maxlen: 24
31.59.116.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Nov 2024 07:56:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:40:5f:f4:4b:47:29:7f:0a:50:16:c0:7f:48:5b:9a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 18 17:44:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73b86a781187cf2b22018f9404f677e185e6c964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:46:f6:2e:8e:db:12:59:38:f2:8c:ac:54:1e:
79:66:ae:9d:2d:67:6a:b7:d1:d5:f6:a8:73:61:eb:
ad:cf:ac:d5:76:05:5f:ff:c0:62:e0:7b:78:52:05:
54:37:4c:38:20:e4:d6:ca:4d:03:79:17:0f:a1:26:
8b:34:00:34:4c:78:ad:44:5e:c5:b1:47:22:ab:02:
7e:96:4b:7b:13:d8:76:8f:d6:4a:95:14:a3:bf:11:
71:93:cb:66:fe:ac:00:d5:32:99:cb:fe:9d:0e:6b:
8d:a8:d8:ea:4e:77:59:83:62:98:0e:25:30:17:3f:
29:f1:1c:0b:fa:ea:47:65:74:f3:8b:c2:7d:35:19:
78:d8:1e:95:67:d4:06:bb:ac:0c:01:fd:0f:5e:67:
a5:6b:37:0a:ea:5d:ce:7c:b4:82:2d:4d:2e:97:06:
52:43:04:5b:fb:48:92:38:87:c2:2f:a8:6d:59:aa:
63:7f:db:30:c4:ee:04:86:d5:3d:34:25:9e:41:f3:
82:b9:6a:a1:20:e4:ed:29:5e:3c:37:e0:b9:9f:c1:
db:1b:29:30:41:4b:76:90:9c:c7:b2:2b:ca:95:df:
8a:88:ea:c6:89:99:8a:bb:21:96:c4:4d:92:44:60:
59:4d:4c:6b:85:96:c5:de:94:cb:d2:57:48:f4:e4:
c7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B8:6A:78:11:87:CF:2B:22:01:8F:94:04:F6:77:E1:85:E6:C9:64
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/c7hqeBGHzysiAY-UBPZ34YXmyWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.33.0/24
31.56.64.0/24
31.56.160.0/21
31.57.184.0/22
31.57.202.0/23
31.59.34.0/24
31.59.116.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:65:5b:40:f2:46:3e:2e:d7:3d:8f:45:c9:fc:98:ad:84:64:
be:0b:5f:4a:5c:f0:d5:b1:dc:17:4d:0f:03:04:d1:7d:aa:cc:
46:02:9b:de:ad:e6:2f:e5:65:53:18:f7:0f:60:6a:3d:37:07:
ae:72:59:26:e1:8f:2e:72:43:2c:05:8c:10:db:de:71:a0:5f:
d4:86:c9:c3:c7:f4:48:2d:a4:db:d0:4c:a4:0f:06:ac:e4:ac:
6b:d2:2a:86:92:cb:ac:84:04:ed:11:85:c0:f7:3c:46:e6:55:
c1:55:56:d2:a9:78:e4:8b:00:12:ac:ce:c5:c8:a3:1a:aa:1b:
53:4e:d9:65:e1:74:bf:57:00:7a:df:89:25:ab:5a:ca:f2:bb:
61:bb:ec:35:48:cd:52:5c:dc:b9:2d:b7:ea:09:27:04:20:94:
19:33:b2:62:21:93:11:a9:1a:11:5e:33:08:5e:e3:f1:0f:d7:
27:31:93:46:89:54:50:6e:f2:3d:54:b9:5d:9b:11:f9:bc:50:
05:8d:79:1e:5f:ca:73:b2:49:eb:72:de:07:7f:fe:19:51:f0:
68:31:8d:6d:28:47:59:31:30:e9:f9:8e:06:5a:c5:34:87:75:
8e:9e:ff:6b:98:38:c9:f3:ae:4c:88:4b:dd:0b:cf:47:9a:0b:
18:19:9b:79
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZNAX/RLRyl/ClAWwH9IW5okMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMTE4MTc0NDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2I4NmE3ODExODdjZjJiMjIwMThmOTQwNGY2NzdlMTg1ZTZjOTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUb2Lo7bElk48oysVB55Zq6dLWdq
t9HV9qhzYeutz6zVdgVf/8Bi4Ht4UgVUN0w4IOTWyk0DeRcPoSaLNAA0THitRF7F
sUciqwJ+lkt7E9h2j9ZKlRSjvxFxk8tm/qwA1TKZy/6dDmuNqNjqTndZg2KYDiUw
Fz8p8RwL+upHZXTzi8J9NRl42B6VZ9QGu6wMAf0PXmelazcK6l3OfLSCLU0ulwZS
QwRb+0iSOIfCL6htWapjf9swxO4EhtU9NCWeQfOCuWqhIOTtKV48N+C5n8HbGykw
QUt2kJzHsivKld+KiOrGiZmKuyGWxE2SRGBZTUxrhZbF3pTL0ldI9OTHUQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFHO4angRh88rIgGPlAT2d+GF5slkMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvYzdocWVCR0h6eXNpQVktVUJQWjM0WVhteVdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAHzghAwQA
HzhAAwQDHzigAwQCHzm4AwQBHznKAwQAHzsiAwQCHzt0MA0GCSqGSIb3DQEBCwUA
A4IBAQA9ZVtA8kY+Ltc9j0XJ/JithGS+C19KXPDVsdwXTQ8DBNF9qsxGApvereYv
5WVTGPcPYGo9Nweuclkm4Y8uckMsBYwQ295xoF/UhsnDx/RILaTb0EykDwas5Kxr
0iqGksushATtEYXA9zxG5lXBVVbSqXjkiwASrM7FyKMaqhtTTtll4XS/VwB634kl
q1rK8rthu+w1SM1SXNy5LbfqCScEIJQZM7JiIZMRqRoRXjMIXuPxD9cnMZNGiVRQ
bvI9VLldmxH5vFAFjXkeX8pzsknrct4Hf/4ZUfBoMY1tKEdZMTDp+Y4GWsU0h3WO
nv9rmDjJ865MiEvdC89HmgsYGZt5
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:35:38 2025 by rpki-client