Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ksyUBth9-0ZwycR6ciqqq7N3noQ.roa
File: ksyUBth9-0ZwycR6ciqqq7N3noQ.roa (raw, json)
Hash identifier: +Cr14t190JSRjCdQFC6SLS28lxwo2eTWfHWmZE7mhyw=
Subject key identifier: 92:CC:94:06:D8:7D:FB:46:70:C9:C4:7A:72:2A:AA:AB:B3:77:9E:84
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194282388390F4A0D018601C3D37B1813AB
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ksyUBth9-0ZwycR6ciqqq7N3noQ.roa
Signing time: Thu 02 Jan 2025 17:50:04 +0000
ROA not before: Thu 02 Jan 2025 17:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396356
IP address blocks: 31.56.139.0/24 maxlen: 24
31.57.90.0/24 maxlen: 24
31.58.72.0/22 maxlen: 24
31.58.108.0/22 maxlen: 24
31.58.124.0/22 maxlen: 24
31.59.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Jan 2025 17:36:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:88:39:0f:4a:0d:01:86:01:c3:d3:7b:18:13:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92cc9406d87dfb4670c9c47a722aaaabb3779e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ee:58:5f:84:8a:dd:b4:05:54:33:c6:2c:0e:
f0:be:9a:8b:38:c3:0b:46:e4:7c:70:c4:5a:f1:b1:
7f:2a:3e:c7:4d:27:ff:02:3b:ff:76:35:11:d0:0e:
be:16:68:f3:d7:2f:0f:e4:4f:19:ec:d2:74:65:38:
b2:e4:e9:82:e8:9f:8b:b9:7e:ad:e6:c4:dd:2f:6b:
2c:14:54:f4:4a:36:27:49:71:12:b7:96:93:d6:57:
d1:18:0d:14:91:e0:e7:7a:12:d8:8a:1a:e6:d3:b7:
c9:81:5e:c5:5e:1d:02:34:a1:3f:27:0f:bb:4f:b6:
56:8e:4f:7e:1c:60:f6:ba:9b:94:6b:b8:ff:77:d7:
6f:6b:1c:82:49:d7:94:0e:4a:ce:df:e7:21:b0:f3:
13:2c:9f:58:3e:1c:2f:15:ec:60:b1:e0:53:42:e7:
84:af:a9:13:89:ab:eb:fc:3d:20:46:be:38:4e:e5:
ba:62:1d:87:3d:7d:40:75:4b:9a:b2:70:4f:7d:42:
fd:d8:96:01:6a:76:ad:c7:ad:14:69:2a:24:e3:f8:
5f:58:7b:92:7a:56:cc:f9:65:b8:cf:e0:09:de:03:
32:d2:34:a0:3d:60:48:7a:6b:2d:88:0b:65:37:60:
f0:31:a9:fa:2d:07:34:78:1d:54:ea:e3:40:f7:ad:
b7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:CC:94:06:D8:7D:FB:46:70:C9:C4:7A:72:2A:AA:AB:B3:77:9E:84
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ksyUBth9-0ZwycR6ciqqq7N3noQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.139.0/24
31.57.90.0/24
31.58.72.0/22
31.58.108.0/22
31.58.124.0/22
31.59.11.0/24
Signature Algorithm: sha256WithRSAEncryption
07:aa:02:c4:18:2a:6d:de:98:12:1b:0f:59:85:6f:b8:87:92:
d9:a0:4a:62:9c:35:2a:18:b5:e2:e6:bf:87:5b:d5:7d:a2:d6:
c4:3f:c6:f0:b1:8b:95:48:5b:9a:02:8c:82:99:96:e5:7f:09:
b1:26:55:70:17:73:aa:9d:b8:42:0e:12:67:b4:31:76:ac:b7:
f5:97:12:67:c1:65:cf:0a:11:04:84:dd:46:e0:8a:84:88:33:
e1:70:fe:c1:16:bb:9a:77:f4:24:17:5b:58:20:7d:5a:41:6b:
80:75:11:a7:dd:7a:6c:ef:b5:f3:79:ec:48:6a:e0:9b:a8:f9:
75:26:1f:07:97:6b:25:8b:92:a6:a5:83:cc:4c:3d:11:3a:bd:
5f:a1:b9:38:80:e8:03:d2:bf:8a:d0:5a:a0:c7:33:6b:e7:48:
0b:05:5a:7b:23:a8:3d:7d:63:7a:cb:ff:d0:af:ca:26:d5:d3:
48:6c:c6:39:08:e4:4c:a7:8f:ff:33:77:ad:d5:91:d2:5f:a5:
90:2a:05:02:44:75:79:f5:fd:70:da:71:f4:38:39:aa:67:7e:
a3:91:e7:6e:1a:39:79:74:83:bd:6a:32:36:89:6b:a3:e8:15:
ad:98:b0:e3:de:36:46:a4:af:de:d2:10:24:22:e6:01:d9:a8:
b1:8d:00:6c
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZQoI4g5D0oNAYYBw9N7GBOrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMTAyMTc1MDA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MmNjOTQwNmQ4N2RmYjQ2NzBjOWM0N2E3MjJhYWFhYmIzNzc5ZTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+5YX4SK3bQFVDPGLA7wvpqLOMML
RuR8cMRa8bF/Kj7HTSf/Ajv/djUR0A6+Fmjz1y8P5E8Z7NJ0ZTiy5OmC6J+LuX6t
5sTdL2ssFFT0SjYnSXESt5aT1lfRGA0UkeDnehLYihrm07fJgV7FXh0CNKE/Jw+7
T7ZWjk9+HGD2upuUa7j/d9dvaxyCSdeUDkrO3+chsPMTLJ9YPhwvFexgseBTQueE
r6kTiavr/D0gRr44TuW6Yh2HPX1AdUuasnBPfUL92JYBanatx60UaSok4/hfWHuS
elbM+WW4z+AJ3gMy0jSgPWBIemstiAtlN2DwMan6LQc0eB1U6uNA9623rQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFJLMlAbYfftGcMnEenIqqquzd56EMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEva3N5VUJ0aDktMFp3eWNSNmNpcXFxN04zbm9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAHziLAwQA
HzlaAwQCHzpIAwQCHzpsAwQCHzp8AwQAHzsLMA0GCSqGSIb3DQEBCwUAA4IBAQAH
qgLEGCpt3pgSGw9ZhW+4h5LZoEpinDUqGLXi5r+HW9V9otbEP8bwsYuVSFuaAoyC
mZblfwmxJlVwF3OqnbhCDhJntDF2rLf1lxJnwWXPChEEhN1G4IqEiDPhcP7BFrua
d/QkF1tYIH1aQWuAdRGn3Xps77XzeexIauCbqPl1Jh8Hl2sli5KmpYPMTD0ROr1f
obk4gOgD0r+K0FqgxzNr50gLBVp7I6g9fWN6y//Qr8om1dNIbMY5CORMp4//M3et
1ZHSX6WQKgUCRHV59f1w2nH0ODmqZ36jkeduGjl5dIO9ajI2iWuj6BWtmLDj3jZG
pK/e0hAkIuYB2aixjQBs
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:48:55 2025 by rpki-client