Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hsmB0Cfzm5yl7B0PCtqVX_WkxYM.roa
File: hsmB0Cfzm5yl7B0PCtqVX_WkxYM.roa (raw, json)
Hash identifier: M6tIR8Nt9t9xied5+jq2BjAkzwjsGU1CVNeQHeEyDoM=
Subject key identifier: 86:C9:81:D0:27:F3:9B:9C:A5:EC:1D:0F:0A:DA:95:5F:F5:A4:C5:83
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01939C3ADB1661D7D2D1841348296318D2BE
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hsmB0Cfzm5yl7B0PCtqVX_WkxYM.roa
Signing time: Fri 06 Dec 2024 13:48:43 +0000
ROA not before: Fri 06 Dec 2024 13:48:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 31.56.8.0/21 maxlen: 24
31.56.142.0/23 maxlen: 24
31.56.148.0/22 maxlen: 24
31.57.184.0/22 maxlen: 24
31.58.208.0/24 maxlen: 24
31.58.209.0/24 maxlen: 24
31.59.68.0/24 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
217.60.245.0/24 maxlen: 24
217.60.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Dec 2024 16:39:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9c:3a:db:16:61:d7:d2:d1:84:13:48:29:63:18:d2:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 6 13:48:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86c981d027f39b9ca5ec1d0f0ada955ff5a4c583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c5:a6:ec:26:ef:9f:8a:b5:0e:d9:b4:27:bb:
86:fc:e2:c7:a2:d9:43:59:14:51:f8:a2:4d:42:06:
51:41:9f:9a:19:94:ee:52:57:96:ac:42:e0:f7:44:
78:63:2e:02:9f:49:ef:9c:8d:5e:a6:f7:0e:9b:76:
c9:75:71:44:2e:81:18:14:a6:6a:53:c4:79:10:7c:
80:4e:6a:20:b4:89:4e:42:c1:6a:cc:47:f5:21:78:
c8:47:dd:e3:37:da:d3:69:6e:46:44:ba:23:37:82:
5d:89:2b:1e:9b:71:c1:50:2e:10:5f:3f:62:a5:bb:
37:d1:9e:3c:08:c9:3c:28:8a:2a:af:bd:51:30:f8:
7d:6c:32:7c:6a:f8:f7:c9:9f:a5:46:da:08:0e:58:
65:47:39:44:80:14:a9:bb:97:a4:37:ae:6f:91:0a:
14:19:6b:cf:55:b5:85:b1:e1:d2:8e:78:97:3f:64:
7e:56:33:29:f6:02:71:7d:d1:fc:a9:02:a1:b8:44:
47:52:92:b8:6e:84:36:c6:18:11:0b:35:95:4b:a6:
ed:be:d5:65:32:77:06:b3:0a:1f:e8:8e:c7:aa:2c:
c4:47:99:7a:d7:12:22:25:3c:1a:6d:14:35:da:45:
e2:a4:e9:61:98:d8:4a:b2:72:aa:89:23:f0:a4:7b:
43:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C9:81:D0:27:F3:9B:9C:A5:EC:1D:0F:0A:DA:95:5F:F5:A4:C5:83
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hsmB0Cfzm5yl7B0PCtqVX_WkxYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.8.0/21
31.56.142.0/23
31.56.148.0/22
31.57.184.0/22
31.58.208.0/23
31.59.68.0/24
31.59.136.0-31.59.175.255
217.60.245.0/24
217.60.248.0/24
Signature Algorithm: sha256WithRSAEncryption
19:cb:cf:f2:2e:93:64:b6:db:43:dc:bb:fa:75:c7:69:38:0a:
91:7a:89:25:9b:47:b0:0f:bd:07:4d:5a:3a:36:01:f6:62:e8:
46:e1:07:4a:f3:30:2e:06:7d:06:37:60:8a:5d:c5:11:14:80:
4d:81:01:ee:35:c0:bd:d3:61:0b:f1:8e:fc:2f:a4:2b:cd:c9:
5b:79:6d:d1:59:98:94:03:9b:f4:0b:39:db:71:74:7e:89:7e:
74:f6:a4:ff:0f:68:e5:0f:62:ff:e6:ef:72:9e:58:d5:38:2b:
8e:ec:18:a5:fe:e0:c3:0b:d0:83:c1:24:64:0f:88:ce:eb:34:
b1:3f:4f:27:b7:54:17:b8:8c:4b:1e:eb:69:99:e5:d1:e0:09:
75:01:97:58:75:e9:91:5e:b9:44:0c:5e:e2:53:d8:10:29:22:
d3:38:82:c6:9f:c5:80:16:0e:a5:75:5c:95:24:fc:ac:42:2c:
ff:62:af:0d:b7:c0:78:ec:b3:a7:f7:55:01:9f:c9:9d:3a:8e:
dd:bd:06:50:29:49:0f:40:7b:e3:66:37:48:18:d4:2b:c0:0f:
07:25:8b:d0:a0:3d:e2:1a:e2:e4:4f:e0:65:75:aa:d0:bd:94:
5a:8e:30:6a:73:b6:14:9c:36:94:31:82:9d:64:f9:4b:5e:d0:
12:78:88:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:49:01 2025 by rpki-client