Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/erSlc2UprBYndPgpdYGtak_DPVY.roa
File: erSlc2UprBYndPgpdYGtak_DPVY.roa (raw, json)
Hash identifier: rrI8MF4T32p8OXd3VwlAS8jrPzp11GVNQ35R4xNJFZE=
Subject key identifier: 7A:B4:A5:73:65:29:AC:16:27:74:F8:29:75:81:AD:6A:4F:C3:3D:56
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01938CEEA566CE37743F1458EEF653DE68B9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/erSlc2UprBYndPgpdYGtak_DPVY.roa
Signing time: Tue 03 Dec 2024 14:31:10 +0000
ROA not before: Tue 03 Dec 2024 14:31:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.120.0/22 maxlen: 24
31.57.65.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.146.0/23 maxlen: 24
31.57.166.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.204.0/24 maxlen: 24
31.57.228.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.58.129.0/24 maxlen: 24
31.58.130.0/24 maxlen: 24
31.58.131.0/24 maxlen: 24
31.58.150.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.59.68.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Dec 2024 21:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8c:ee:a5:66:ce:37:74:3f:14:58:ee:f6:53:de:68:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 3 14:31:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ab4a5736529ac162774f8297581ad6a4fc33d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4d:0c:02:d8:e1:c9:b3:91:3e:a4:56:d7:e7:
b6:a7:05:c3:fb:2f:37:f0:ad:08:10:9f:e6:9f:41:
52:64:01:66:ba:85:07:b2:a7:e5:d1:84:a2:52:b7:
72:27:97:60:38:e5:5f:9f:c4:2d:a8:9a:f2:14:4a:
4f:af:4f:55:c6:d8:71:58:f6:82:7b:11:84:c8:8b:
b6:11:2b:3f:76:cf:42:4f:08:42:ea:5a:a1:9b:f8:
cd:f9:6c:a5:a6:82:3d:44:18:65:a6:98:ab:5a:74:
5a:b9:69:22:29:58:d4:89:f5:88:89:a8:b5:f2:e2:
50:f4:5c:61:f7:59:4b:29:ac:04:02:e4:a2:d4:34:
19:65:15:0a:86:81:fe:cb:9c:a8:67:d2:35:22:f7:
51:1a:59:b7:7b:16:51:0c:e5:83:39:f7:66:0d:03:
78:58:24:b9:71:fc:57:23:b7:90:28:66:30:d2:67:
b2:f5:9b:c0:e1:ff:4e:34:13:cc:5d:36:b7:b8:96:
53:75:96:7c:ba:e7:25:18:78:29:ca:bc:c9:d5:32:
46:a3:68:05:07:17:bf:b6:da:28:48:14:17:b7:da:
82:20:12:f2:19:ed:c1:bd:f2:ec:f4:b9:09:7e:55:
5b:4a:4c:6e:3e:1d:a3:fe:a1:2f:90:c8:b5:4e:0d:
1e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B4:A5:73:65:29:AC:16:27:74:F8:29:75:81:AD:6A:4F:C3:3D:56
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/erSlc2UprBYndPgpdYGtak_DPVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.89.0/24
31.56.104.0/21
31.56.120.0/22
31.57.65.0/24
31.57.132.0/23
31.57.146.0/23
31.57.166.0/24
31.57.176.0/21
31.57.188.0/24
31.57.192.0/22
31.57.204.0/24
31.57.228.0/24
31.57.232.0/22
31.58.129.0-31.58.131.255
31.58.150.0/24
31.58.152.0/22
31.59.68.0/24
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.184.0/22
Signature Algorithm: sha256WithRSAEncryption
39:2c:85:32:8b:9f:07:c9:35:14:92:d1:44:bb:a4:de:35:30:
29:19:29:54:e3:6b:65:8a:69:66:b5:a3:0f:f8:af:43:91:b1:
ab:17:f8:36:44:ee:0d:4e:6f:81:dc:9d:c5:3a:35:fb:58:81:
c4:d6:c6:55:12:7b:56:7f:d0:dc:fd:43:4c:23:46:31:a2:6e:
c1:06:a9:89:23:d4:38:2b:25:db:4c:6b:aa:8e:4d:14:2f:81:
36:84:56:e0:a4:45:02:d1:a3:5b:f2:b2:c4:1a:73:d9:11:a6:
99:d1:cf:1d:ab:40:b5:5c:1a:27:3d:93:04:d6:7d:76:27:c6:
4b:fd:57:3a:5c:3f:93:af:12:35:1a:8a:fc:94:b6:25:18:a9:
77:48:5d:6d:56:f2:85:9e:b9:ce:38:99:7a:32:08:2a:f7:b0:
ad:8f:01:e0:f4:fb:a1:01:e0:e7:84:b4:46:8d:74:36:20:ae:
92:06:5b:86:1c:25:32:47:2e:c6:a6:47:d5:0c:9f:ca:d8:f2:
cd:df:2f:c6:b5:d3:1f:a9:66:c5:9c:1a:02:33:1e:3a:9c:6d:
e1:0a:ba:cd:02:00:c5:87:bb:8f:a7:27:83:b0:47:b2:7b:f5:
4a:cf:57:e5:36:99:b6:5f:1a:d2:8e:2b:cf:51:40:10:39:c1:
6e:ae:6a:d3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:45:39 2025 by rpki-client