Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kIxj5m84Qzp3t95CT9iEGT-otEw.roa
File: kIxj5m84Qzp3t95CT9iEGT-otEw.roa (raw, json)
Hash identifier: 7QPiCvowlFMSKKs+wG8wGUEu4u5go5N2OK1riLWupm4=
Subject key identifier: 90:8C:63:E6:6F:38:43:3A:77:B7:DE:42:4F:D8:84:19:3F:A8:B4:4C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01944A2496ACED385E699216F07C07F0D867
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kIxj5m84Qzp3t95CT9iEGT-otEw.roa
Signing time: Thu 09 Jan 2025 08:18:19 +0000
ROA not before: Thu 09 Jan 2025 08:18:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 31.56.59.0/24 maxlen: 24
31.56.75.0/24 maxlen: 24
31.56.86.0/24 maxlen: 24
31.56.107.0/24 maxlen: 24
31.57.162.0/23 maxlen: 23
31.57.164.0/23 maxlen: 23
31.57.180.0/24 maxlen: 24
31.57.208.0/24 maxlen: 24
31.57.209.0/24 maxlen: 24
31.57.210.0/24 maxlen: 24
31.57.211.0/24 maxlen: 24
31.57.212.0/24 maxlen: 24
31.57.213.0/24 maxlen: 24
31.57.214.0/24 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.227.0/24 maxlen: 24
31.58.41.0/24 maxlen: 24
31.58.42.0/24 maxlen: 24
31.58.48.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.56.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 Jan 2025 11:31:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4a:24:96:ac:ed:38:5e:69:92:16:f0:7c:07:f0:d8:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 9 08:18:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=908c63e66f38433a77b7de424fd884193fa8b44c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b3:b0:59:cf:99:1b:8b:2a:41:bd:f7:a2:32:
be:4a:fb:04:c9:fa:37:00:2a:54:56:24:b3:f4:df:
67:b2:1c:d4:9d:46:72:4c:d8:65:54:a1:13:72:68:
40:3c:a6:de:2f:5b:5c:1e:08:56:fb:30:17:5b:c0:
73:cb:4f:f9:2b:80:a9:03:c5:bd:cd:1d:de:4c:88:
cd:e8:40:88:f6:70:ad:f0:14:a8:28:7d:10:9e:73:
c9:8d:90:ae:67:ad:26:95:d3:db:70:11:3f:f3:9b:
9f:69:df:6b:f9:09:dd:bb:23:b3:c0:97:c1:d3:dd:
f3:af:82:9e:28:7f:f8:7e:2b:31:2c:86:f9:1f:53:
72:44:9d:f9:ba:d2:06:b6:26:76:b8:ab:86:f7:b6:
d6:d3:8d:78:49:3c:6a:93:6e:08:f9:13:14:ff:49:
87:34:45:47:d7:c1:03:83:95:96:06:72:f2:5d:02:
c6:32:07:39:f2:5d:ca:56:41:78:0c:c4:d6:f3:61:
0f:2b:80:42:85:03:f8:27:da:00:fe:dd:4f:3b:e9:
4c:b7:dd:9a:19:7f:b7:a7:e5:e6:a9:ea:db:b2:ad:
81:c1:7f:3b:2a:0b:47:82:27:63:7c:97:b5:84:93:
6d:a8:b1:39:2e:4c:cf:c8:84:f7:61:9d:af:50:df:
67:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8C:63:E6:6F:38:43:3A:77:B7:DE:42:4F:D8:84:19:3F:A8:B4:4C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kIxj5m84Qzp3t95CT9iEGT-otEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.59.0/24
31.56.75.0/24
31.56.86.0/24
31.56.107.0/24
31.57.162.0-31.57.165.255
31.57.180.0/24
31.57.208.0-31.57.214.255
31.57.216.0/24
31.57.227.0/24
31.58.41.0-31.58.42.255
31.58.48.0/24
31.58.50.0/23
31.58.56.0/23
31.58.64.0/23
Signature Algorithm: sha256WithRSAEncryption
65:2d:10:f7:e5:f6:25:6c:03:a8:bf:24:85:2d:61:8b:5f:8c:
a2:0f:2a:08:fb:b7:5a:bd:ee:c0:01:75:40:b5:b3:92:81:61:
23:16:f7:85:5e:da:85:7e:2e:58:f3:f4:1f:b1:d8:0a:cb:e5:
d1:94:30:3d:1a:89:c6:36:bf:ad:bf:15:9e:f1:c7:21:d0:02:
c5:34:7d:73:0b:44:d5:33:49:bf:a7:ed:14:f8:fb:fa:3a:54:
1c:9c:c0:bf:16:94:aa:ab:96:5e:89:b7:9e:4c:0d:62:43:4e:
e6:fd:30:c0:39:4b:39:bc:1a:29:d2:fc:bc:92:a2:dc:f0:92:
2c:c5:8b:17:b1:04:7a:49:0a:e2:4a:43:a2:71:40:83:58:ab:
07:40:05:4f:06:7f:63:c5:a9:9a:5a:3b:4c:67:dd:8e:1b:b0:
f3:6b:26:6f:0d:d7:9c:f1:c7:fe:35:76:67:02:b0:7d:10:a3:
93:36:00:f1:8e:65:e5:43:f0:b1:01:32:b0:88:b7:66:9b:8e:
50:c4:56:80:1e:04:86:9b:8d:b2:dd:88:96:fe:65:6b:d6:08:
d3:ad:eb:e8:ff:ab:51:8b:93:03:b8:49:4d:b5:cc:03:c0:fa:
5c:18:43:5e:61:bc:6b:e4:29:d2:fe:66:f1:31:8a:c5:98:d1:
e1:29:f2:0b
-----BEGIN CERTIFICATE-----
MIIFZDCCBEygAwIBAgISAZRKJJas7TheaZIW8HwH8NhnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMTA5MDgxODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDhjNjNlNjZmMzg0MzNhNzdiN2RlNDI0ZmQ4ODQxOTNmYThiNDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbOwWc+ZG4sqQb33ojK+SvsEyfo3
ACpUViSz9N9nshzUnUZyTNhlVKETcmhAPKbeL1tcHghW+zAXW8Bzy0/5K4CpA8W9
zR3eTIjN6ECI9nCt8BSoKH0QnnPJjZCuZ60mldPbcBE/85ufad9r+QnduyOzwJfB
093zr4KeKH/4fisxLIb5H1NyRJ35utIGtiZ2uKuG97bW0414STxqk24I+RMU/0mH
NEVH18EDg5WWBnLyXQLGMgc58l3KVkF4DMTW82EPK4BChQP4J9oA/t1PO+lMt92a
GX+3p+Xmqerbsq2BwX87KgtHgidjfJe1hJNtqLE5LkzPyIT3YZ2vUN9newIDAQAB
o4ICcDCCAmwwHQYDVR0OBBYEFJCMY+ZvOEM6d7feQk/YhBk/qLRMMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEva0l4ajVtODRRenAzdDk1Q1Q5aUVHVC1vdEV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbAMEAB84OwME
AB84SwMEAB84VgMEAB84azAMAwQBHzmiAwQBHzmkAwQAHzm0MAwDBAQfOdADBAAf
OdYDBAAfOdgDBAAfOeMwDAMEAB86KQMEAB86KgMEAB86MAMEAR86MgMEAR86OAME
AR86QDANBgkqhkiG9w0BAQsFAAOCAQEAZS0Q9+X2JWwDqL8khS1hi1+Mog8qCPu3
Wr3uwAF1QLWzkoFhIxb3hV7ahX4uWPP0H7HYCsvl0ZQwPRqJxja/rb8VnvHHIdAC
xTR9cwtE1TNJv6ftFPj7+jpUHJzAvxaUqquWXom3nkwNYkNO5v0wwDlLObwaKdL8
vJKi3PCSLMWLF7EEekkK4kpDonFAg1irB0AFTwZ/Y8Wpmlo7TGfdjhuw82smbw3X
nPHH/jV2ZwKwfRCjkzYA8Y5l5UPwsQEysIi3ZpuOUMRWgB4EhpuNst2Ilv5la9YI
063r6P+rUYuTA7hJTbXMA8D6XBhDXmG8a+Qp0v5m8TGKxZjR4SnyCw==
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:48:54 2025 by rpki-client