Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/m9ydx7KUgys3T7MJKI8WkA3XdOQ.roa
File: m9ydx7KUgys3T7MJKI8WkA3XdOQ.roa (raw, json)
Hash identifier: /q+ep0wQWUH4TD1se4Q8cZqCpRz+0S7maI8SsXFnSY0=
Subject key identifier: 9B:DC:9D:C7:B2:94:83:2B:37:4F:B3:09:28:8F:16:90:0D:D7:74:E4
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019398C335B0CB2924352B694A49E36EE2C7
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/m9ydx7KUgys3T7MJKI8WkA3XdOQ.roa
Signing time: Thu 05 Dec 2024 21:39:10 +0000
ROA not before: Thu 05 Dec 2024 21:39:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.85.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.156.0/24 maxlen: 24
31.57.65.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.146.0/23 maxlen: 24
31.57.166.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.204.0/24 maxlen: 24
31.57.228.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.58.130.0/24 maxlen: 24
31.58.131.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.59.68.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Dec 2024 13:47:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:98:c3:35:b0:cb:29:24:35:2b:69:4a:49:e3:6e:e2:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 5 21:39:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9bdc9dc7b294832b374fb309288f16900dd774e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ba:f2:da:57:2d:a6:93:72:fa:e3:8a:e0:3a:
ec:5d:c2:3e:cc:3f:28:cf:e0:2b:79:80:32:b9:39:
f4:5e:b2:1e:00:b4:25:98:10:d9:e1:ae:78:67:c7:
bd:4c:a3:b7:a6:8f:38:f0:61:f7:e9:be:ad:a5:0c:
d0:d5:70:72:78:44:30:fa:37:21:ec:dd:67:37:68:
1f:cf:06:46:67:30:04:84:10:6f:27:c6:f2:39:5e:
3e:e2:2f:97:5c:08:97:eb:6f:a6:18:17:f2:2a:4f:
fb:0f:1e:27:01:77:48:1b:8d:28:bc:b9:44:5e:25:
f8:75:c7:a1:8d:ad:8a:15:ae:91:8d:03:7c:22:ab:
a8:e2:4c:b6:be:b1:e3:1f:7d:73:e3:32:67:98:03:
58:c1:06:5e:58:4c:ae:5b:15:73:f7:27:57:a5:a5:
95:97:47:0c:2a:ff:c5:c7:7a:c7:eb:ce:06:66:55:
ce:c7:bf:ce:f3:f0:71:f3:d5:c1:ae:fb:52:58:c2:
8b:47:b5:ae:59:49:3f:43:9a:90:12:0e:0e:c5:c5:
93:e7:a3:25:00:a1:a9:6b:1f:f0:8c:e6:41:d3:88:
94:38:0e:22:9e:7d:6c:e7:70:c9:83:be:60:5d:f2:
c1:26:81:27:3c:e4:4e:9e:df:b5:0b:e1:5e:b6:e2:
14:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DC:9D:C7:B2:94:83:2B:37:4F:B3:09:28:8F:16:90:0D:D7:74:E4
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/m9ydx7KUgys3T7MJKI8WkA3XdOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.85.0/24
31.56.89.0/24
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.156.0/24
31.57.65.0/24
31.57.132.0/23
31.57.146.0/23
31.57.166.0/24
31.57.176.0/21
31.57.188.0/24
31.57.192.0/22
31.57.204.0/24
31.57.228.0/24
31.57.232.0/22
31.58.130.0/23
31.58.152.0/22
31.59.68.0/24
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.184.0/22
Signature Algorithm: sha256WithRSAEncryption
80:67:cc:1d:d7:7f:de:ac:06:75:03:c6:fb:69:4f:15:6b:67:
dd:d2:7f:0d:0c:a6:c7:f3:c8:c4:cc:23:eb:83:69:9e:a4:42:
b0:95:5f:9e:a9:91:df:a4:be:84:a9:2a:dc:df:06:fe:5e:3e:
9a:7c:9a:7f:27:85:a3:2a:9e:b9:4d:e8:e1:55:65:79:cd:ac:
52:33:84:cd:07:79:47:8d:ca:c4:ee:6a:45:e9:33:e3:07:77:
dd:f9:81:88:3e:fd:a7:b9:f0:99:d1:a5:0a:6a:de:97:5e:6a:
e4:7c:be:ff:b7:be:64:80:c1:d5:76:bf:47:7a:d6:7d:c1:83:
61:fd:fa:d1:0c:22:e8:ab:e5:1e:1a:d8:2d:12:a8:11:aa:af:
b5:51:5b:a6:64:38:f8:22:03:7c:9e:93:0c:a0:21:57:e2:7b:
24:47:d7:bd:11:28:f6:e2:56:d3:d8:0d:0e:8f:d9:30:3d:15:
a4:f3:3f:fd:a4:5b:2f:bb:5d:e2:d2:c1:11:55:34:92:1e:b8:
9e:ae:24:80:7f:72:dd:31:96:c6:17:8e:f3:f0:2a:52:a8:28:
06:f4:1d:91:92:db:82:56:81:3d:c3:4d:f1:7e:32:43:85:77:
c3:52:ca:a3:4d:75:7d:4b:55:96:a3:f2:f1:a0:08:91:6c:85:
79:b6:3f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:06 2025 by rpki-client