Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jPcCDCgOn4Fi4K1vYBzX3SEpwxc.roa
File: jPcCDCgOn4Fi4K1vYBzX3SEpwxc.roa (raw, json)
Hash identifier: FVQxQ3paFWUZRdhUozGCSvNmB3QxuXWNua++YZdyWX0=
Subject key identifier: 8C:F7:02:0C:28:0E:9F:81:62:E0:AD:6F:60:1C:D7:DD:21:29:C3:17
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019354CF45AA49BB1F2D51FF695FD60E4E8F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jPcCDCgOn4Fi4K1vYBzX3SEpwxc.roa
Signing time: Fri 22 Nov 2024 16:58:10 +0000
ROA not before: Fri 22 Nov 2024 16:58:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 31.56.8.0/21 maxlen: 24
31.56.142.0/23 maxlen: 24
31.56.148.0/22 maxlen: 24
31.58.208.0/24 maxlen: 24
31.58.209.0/24 maxlen: 24
31.58.210.0/24 maxlen: 24
31.58.211.0/24 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
217.60.245.0/24 maxlen: 24
217.60.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 23 Nov 2024 08:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:cf:45:aa:49:bb:1f:2d:51:ff:69:5f:d6:0e:4e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 22 16:58:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8cf7020c280e9f8162e0ad6f601cd7dd2129c317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1b:58:2e:99:0a:ef:55:e5:d9:25:04:33:ee:
a2:28:ba:71:0a:bb:91:d9:de:5d:a2:31:94:61:0c:
a6:2d:95:35:f4:76:3f:bd:6a:a0:40:8f:0d:38:91:
1b:51:3a:ff:5f:2d:3b:ba:ba:91:4a:40:e4:21:8a:
09:09:7d:10:40:0c:59:3a:da:a0:95:43:dd:ef:35:
f2:62:e9:16:78:64:a8:b4:3f:cd:a3:12:e9:83:81:
b5:a0:ff:75:53:e4:fa:b7:e0:61:c7:7f:47:c5:6c:
5d:97:8a:00:0d:6f:98:d2:a9:65:2d:ca:b3:f9:7b:
81:d9:55:24:f7:bc:35:2a:9b:09:64:30:8b:c9:76:
97:13:a0:f3:93:2c:16:26:71:75:a9:9f:23:de:d6:
95:3e:70:e7:a2:ed:cf:5c:7d:a8:bf:71:85:70:dd:
1d:bb:9a:24:71:72:cd:90:88:09:68:df:a5:71:57:
a6:b4:5f:38:ed:97:57:1b:e1:f4:0c:26:8b:a0:67:
0e:aa:a9:79:0d:86:a9:a5:b7:e8:03:c2:d3:5f:30:
25:a2:d9:b7:ce:67:8c:97:99:34:66:ce:2e:a8:40:
a0:72:31:ad:09:91:e6:99:a4:f4:66:f4:54:00:76:
06:10:f4:5a:c4:30:b3:2f:03:8a:11:30:6e:41:b4:
2b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F7:02:0C:28:0E:9F:81:62:E0:AD:6F:60:1C:D7:DD:21:29:C3:17
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jPcCDCgOn4Fi4K1vYBzX3SEpwxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.8.0/21
31.56.142.0/23
31.56.148.0/22
31.58.208.0/22
31.59.136.0-31.59.175.255
217.60.245.0/24
217.60.248.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:a0:c0:24:89:75:dc:8a:35:91:7c:44:4f:e6:66:3c:08:2f:
17:cd:45:ed:05:ce:b9:9a:b3:9c:c6:16:65:15:af:1f:c2:8f:
34:45:e3:67:4b:59:07:57:3f:bb:1d:1e:f9:a3:ea:d0:9a:9d:
b9:a1:5a:46:19:25:27:7f:f4:dc:5b:a7:8e:7d:37:91:71:8b:
ae:8d:94:bc:05:7b:11:b0:fe:6b:73:36:81:44:85:a3:34:73:
2a:07:a8:f2:87:28:e7:33:0c:7c:67:c1:84:a2:eb:45:27:db:
93:d4:1f:e9:65:e5:f2:04:05:c7:94:c4:d7:2f:a3:5a:c1:75:
ed:33:87:9d:08:82:76:bc:60:9a:cb:c1:e2:9a:81:a9:c3:1c:
4e:40:1a:98:0b:ed:1c:9f:8b:aa:1e:4c:c4:43:70:e7:6e:2a:
78:1d:10:9c:91:12:1b:dd:0b:72:d4:3f:d3:92:30:aa:d3:69:
52:ef:5f:58:e3:90:25:85:98:eb:28:de:bb:a0:00:6b:f5:8e:
e2:2a:d1:cb:62:84:e2:bd:5e:6e:29:19:e9:77:8b:55:69:1d:
43:c3:51:43:2c:52:ea:40:49:8c:fc:c0:c5:24:34:3c:b0:45:
04:73:bc:0f:9f:b7:72:e2:8e:5e:68:f1:c7:b9:39:db:1b:80:
9a:83:71:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:48:43 2025 by rpki-client