Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dO1tK-KyROBF2Kp5Ivs37W63ggY.roa
File: dO1tK-KyROBF2Kp5Ivs37W63ggY.roa (raw, json)
Hash identifier: lQT7NEz6xX4rp42bxljNpe/toNCo0EzhYwJgyvji4AQ=
Subject key identifier: 74:ED:6D:2B:E2:B2:44:E0:45:D8:AA:79:22:FB:37:ED:6E:B7:82:06
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195672C2107CA90F3139BC72F22B57FD4C6
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dO1tK-KyROBF2Kp5Ivs37W63ggY.roa
Signing time: Wed 05 Mar 2025 16:38:20 +0000
ROA not before: Wed 05 Mar 2025 16:38:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 31.56.8.0/21 maxlen: 24
31.56.126.0/24 maxlen: 24
31.56.142.0/23 maxlen: 24
31.56.148.0/22 maxlen: 24
31.57.184.0/22 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Mar 2025 10:31:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:67:2c:21:07:ca:90:f3:13:9b:c7:2f:22:b5:7f:d4:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 5 16:38:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74ed6d2be2b244e045d8aa7922fb37ed6eb78206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b0:c5:0b:e8:35:2f:3c:35:af:5c:2b:6a:96:
c4:98:08:06:8b:cd:c1:d2:f8:8c:6a:49:b6:be:6c:
68:04:52:59:cb:d4:0a:62:2e:04:86:67:51:38:73:
29:7f:24:aa:0b:df:8a:9e:81:49:de:4c:52:9b:57:
70:92:34:d4:79:6d:1a:5c:96:1d:36:d1:49:11:4a:
d9:af:61:07:03:5d:2b:70:b0:16:e9:5c:90:68:7d:
1a:9b:ee:94:0e:65:b6:87:0d:30:f3:ea:58:6a:44:
4b:f4:9e:71:90:09:d4:ec:34:ce:df:1c:53:cc:27:
14:b5:c4:ad:10:39:d3:76:14:f7:a7:8f:2b:42:b0:
ae:0c:ff:21:e4:a7:06:c2:99:2e:29:bb:04:14:1c:
15:06:2e:aa:f1:31:b3:d7:15:41:e8:79:d2:a1:d1:
37:d0:d1:b9:6b:54:7b:87:29:e7:bc:6f:1b:f9:33:
a0:8f:25:e7:80:4b:8a:d8:d6:9d:80:a6:17:5f:82:
14:d2:37:b3:66:4f:66:2a:a6:18:5a:1a:bb:81:79:
ab:6f:0f:fd:3a:fd:8d:4d:c1:48:ac:37:3c:68:b9:
2b:93:4a:96:b7:6c:20:15:cc:34:e2:ce:a7:34:2e:
29:39:6a:bd:3a:2a:d6:f3:da:b6:83:4a:4b:af:85:
8d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:ED:6D:2B:E2:B2:44:E0:45:D8:AA:79:22:FB:37:ED:6E:B7:82:06
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dO1tK-KyROBF2Kp5Ivs37W63ggY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.8.0/21
31.56.126.0/24
31.56.142.0/23
31.56.148.0/22
31.57.184.0/22
31.59.136.0-31.59.175.255
31.59.228.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:79:b7:71:20:09:92:4a:02:90:1a:59:e1:46:23:5c:ea:89:
0d:b7:1c:ef:74:61:3d:14:37:f2:bd:54:05:c6:ea:6b:73:d1:
79:e2:03:1b:59:d1:e1:50:82:3f:ac:06:ab:ca:db:d5:db:39:
cb:c5:c3:0d:a7:20:21:b0:be:0b:15:d8:16:1e:85:1f:c9:7c:
6b:c0:9a:aa:aa:6d:7f:01:22:1b:15:2f:d0:db:7d:d5:f6:fb:
87:10:fb:42:71:e5:bb:91:c4:fd:e5:6a:dd:bb:3c:e4:a6:19:
0a:e7:60:0e:89:bb:21:2e:6a:87:6b:cf:0e:a5:b0:48:e0:ce:
c4:da:9a:e9:34:13:b3:9a:d5:d9:e1:0d:e7:44:b1:1b:84:03:
44:6c:dd:a8:dd:f9:b3:bf:3b:3a:c9:76:83:91:60:48:ba:07:
3f:c5:d6:f1:68:d5:e6:00:a5:64:5d:14:a0:4a:42:16:2b:a9:
3c:74:32:6a:90:b3:d4:a6:ac:0f:af:87:3c:62:4a:d4:76:73:
13:a3:be:c0:5d:11:27:09:cd:39:30:4c:51:91:17:a6:7b:fb:
b8:28:fb:12:fb:67:33:80:50:ef:42:76:7e:74:bf:33:79:d3:
04:42:92:25:49:99:fd:e1:5f:61:86:f5:41:03:fa:9e:e2:b6:
16:e8:34:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:01:02 2025 by rpki-client