Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fDsAT-JaNeEHzHE1k8t-BLh38C4.roa
File: fDsAT-JaNeEHzHE1k8t-BLh38C4.roa (raw, json)
Hash identifier: XN06dk8NHUDYRd7QpOMpcH4FoXVYzlUjd0jZfdGZPwI=
Subject key identifier: 7C:3B:00:4F:E2:5A:35:E1:07:CC:71:35:93:CB:7E:04:B8:77:F0:2E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019354D4C43589E1FDB9CB6B8A0310B9E7AC
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fDsAT-JaNeEHzHE1k8t-BLh38C4.roa
Signing time: Fri 22 Nov 2024 17:04:10 +0000
ROA not before: Fri 22 Nov 2024 17:04:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.48.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.127.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.146.0/23 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.58.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 23 Nov 2024 08:08:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:d4:c4:35:89:e1:fd:b9:cb:6b:8a:03:10:b9:e7:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 22 17:04:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c3b004fe25a35e107cc713593cb7e04b877f02e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:46:0b:df:5f:3b:aa:2c:42:33:d7:ce:41:f0:
76:a5:0a:f2:5e:f2:3d:64:17:96:aa:2a:dc:f3:0a:
d7:d0:8f:26:51:53:ca:4f:e4:87:ca:d1:62:70:2e:
02:6c:fe:c6:a3:02:bb:ad:52:03:6f:14:f4:9f:b5:
e0:45:19:9f:be:75:8a:ed:89:37:ce:4c:ca:78:48:
52:84:be:73:31:4e:9e:b8:3f:32:27:31:c7:77:ac:
b7:33:d5:d7:89:78:29:a1:c0:a4:40:fe:e9:81:af:
46:46:ce:2b:c2:8a:ad:ff:ed:9d:a1:39:b7:e9:67:
a6:65:80:cc:2a:c0:5c:c4:37:de:71:51:af:d9:16:
82:90:bc:c7:5f:c4:ce:f4:22:5d:e9:43:28:65:6c:
be:94:eb:28:04:55:da:85:9a:f8:5c:9e:c0:41:aa:
0b:07:81:7d:f7:6f:53:2d:7e:27:ec:07:4c:33:47:
14:5a:28:e7:ca:64:2d:6b:c2:39:d1:93:60:ca:54:
3d:22:2b:46:c6:f2:12:46:12:b8:86:52:b6:93:fa:
20:96:66:64:df:99:42:35:d2:7b:91:5f:e0:09:14:
19:f7:60:d4:3e:64:3b:87:52:fc:f4:cb:c8:69:9f:
87:6c:db:dd:75:17:4d:b1:51:dd:13:fc:81:47:c7:
81:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:3B:00:4F:E2:5A:35:E1:07:CC:71:35:93:CB:7E:04:B8:77:F0:2E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fDsAT-JaNeEHzHE1k8t-BLh38C4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.48.0/24
31.56.57.0/24
31.56.89.0/24
31.56.120.0/22
31.56.127.0/24
31.57.132.0/23
31.57.146.0/23
31.57.176.0/21
31.57.192.0/22
31.57.232.0/22
31.58.49.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:4a:70:1e:47:92:26:45:5a:e6:98:56:d4:41:c3:0b:78:4f:
d1:3f:a0:6e:79:5f:40:c7:a3:b2:c5:82:c1:38:d8:5a:45:bc:
67:36:22:b1:e5:30:46:d7:a1:7d:52:a9:2a:2d:52:db:5c:e2:
2b:58:cd:3f:e6:56:4f:c3:b7:27:8e:79:3f:a5:fb:72:e3:26:
65:a4:71:38:5d:33:d4:b6:35:63:3b:cc:e4:67:65:4b:72:38:
cf:78:d6:7e:05:7d:37:31:35:bb:79:7f:a5:81:c5:70:1d:a9:
43:e0:d8:37:50:93:50:93:57:b9:71:b8:e7:f7:cb:a8:53:14:
47:14:b6:fe:18:ba:01:fb:fc:a1:91:c8:62:dc:97:9f:64:17:
a0:08:a9:52:d6:b2:a0:44:60:f9:83:c3:95:14:fe:50:b3:a3:
4e:43:c4:44:ca:fd:13:ac:db:66:c1:df:f2:49:10:3c:70:45:
20:ef:a6:1e:2d:12:2b:92:ac:85:f9:35:43:7f:69:69:70:ea:
4d:7d:30:75:8b:5c:ee:d1:91:4a:3a:3a:86:f3:b5:38:67:36:
47:f4:bf:07:1f:88:0a:b2:4c:a4:a6:a1:5c:2b:3b:89:e1:0d:
17:b5:25:fd:80:80:c2:bf:3b:c7:d7:d0:6d:10:c0:8e:b6:5c:
65:25:33:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:51:32 2025 by rpki-client