Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mgKeYS4kaKtf6mNSdRz8JqI_1NI.roa
File: mgKeYS4kaKtf6mNSdRz8JqI_1NI.roa (raw, json)
Hash identifier: DxA6UMOst71bwmA89/ECSRWP/JxAJIV6/cr9muc8N/w=
Subject key identifier: 9A:02:9E:61:2E:24:68:AB:5F:EA:63:52:75:1C:FC:26:A2:3F:D4:D2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194282337E44EF65FE09E7EC40373F62D13
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mgKeYS4kaKtf6mNSdRz8JqI_1NI.roa
Signing time: Thu 02 Jan 2025 17:49:44 +0000
ROA not before: Thu 02 Jan 2025 17:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 31.56.8.0/21 maxlen: 24
31.56.142.0/23 maxlen: 24
31.56.148.0/22 maxlen: 24
31.57.184.0/22 maxlen: 24
31.59.68.0/24 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
217.60.62.0/24 maxlen: 24
217.60.236.0/24 maxlen: 24
217.60.248.0/24 maxlen: 24
217.60.253.0/24 maxlen: 24
217.60.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Jan 2025 13:32:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:37:e4:4e:f6:5f:e0:9e:7e:c4:03:73:f6:2d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a029e612e2468ab5fea6352751cfc26a23fd4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cf:2c:48:a1:40:29:3c:61:c5:13:91:c3:41:
26:29:5e:8f:75:5a:97:ad:f5:b0:64:5c:b5:c5:3c:
76:72:2b:a4:59:a0:17:5b:23:49:a3:b1:c7:34:4c:
58:a1:d5:fe:ab:91:6c:9d:1f:e6:46:55:12:9e:2e:
66:e1:91:a6:a4:14:6e:d9:1b:21:14:2e:cb:99:2d:
f7:00:45:3b:4e:54:2f:17:16:4f:fb:86:13:82:60:
76:7c:17:44:e1:e7:a3:0a:ae:5d:fe:87:ab:a1:c6:
28:d5:62:5d:c6:22:52:db:22:76:7c:47:dc:26:79:
16:45:b8:fc:2f:e2:00:ab:08:10:e0:4c:c8:5a:57:
7f:f7:b5:c0:7c:7b:31:9a:f6:17:4f:df:b5:a2:fe:
cf:bf:c3:65:19:07:05:f7:55:72:dc:98:80:e0:12:
84:69:a5:2f:88:c1:6a:25:03:b7:37:58:8c:33:7d:
10:61:4a:fd:cb:1d:ab:f4:d0:03:59:0b:0b:ec:fb:
d3:c9:ac:d0:62:af:e3:9f:20:82:12:3c:87:42:95:
7d:15:ec:b2:58:c2:83:e2:8a:be:87:cd:c5:aa:33:
da:c2:23:49:9d:bb:31:81:5a:c2:b2:cd:f4:d0:8f:
0c:8a:7b:81:42:0d:e9:4c:5d:49:70:40:55:ab:7e:
bb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:02:9E:61:2E:24:68:AB:5F:EA:63:52:75:1C:FC:26:A2:3F:D4:D2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mgKeYS4kaKtf6mNSdRz8JqI_1NI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.8.0/21
31.56.142.0/23
31.56.148.0/22
31.57.184.0/22
31.59.68.0/24
31.59.136.0-31.59.175.255
217.60.62.0/24
217.60.236.0/24
217.60.248.0/24
217.60.253.0-217.60.254.255
Signature Algorithm: sha256WithRSAEncryption
4f:3f:e8:29:71:f7:b8:b2:c1:ed:de:07:52:c5:99:3f:8b:ec:
0e:c6:00:af:02:9e:dc:27:5b:5f:50:42:f6:56:25:6a:8a:4e:
90:e3:d9:10:05:16:5f:45:b9:ab:37:eb:01:7a:9d:3f:45:a0:
14:3b:5e:51:d5:e6:64:ee:a0:8c:29:3a:c1:23:30:be:93:20:
aa:d8:be:13:e4:4c:e9:57:8c:a2:b6:ea:93:1f:58:6b:a6:ec:
bb:fb:2b:ed:dc:32:7c:41:7d:6a:16:1c:ac:39:47:09:69:9c:
7c:12:6d:9e:c2:03:71:5e:c5:70:a1:fd:d9:93:df:9a:66:5c:
0d:41:01:00:f6:88:c4:a5:69:0f:dd:cc:46:a0:c4:43:da:1f:
76:a6:7e:c8:6c:b9:8e:79:e6:53:8c:a6:ff:44:64:98:2b:d3:
14:8f:a7:b0:ed:9c:3e:d5:df:40:95:4e:e7:ca:85:b2:83:90:
7b:68:9d:04:60:f9:87:fc:4e:2b:b6:3b:3e:bb:84:24:92:f7:
63:87:d3:74:7d:32:64:99:f4:8e:5b:a9:87:b1:17:91:46:91:
95:f9:c2:47:46:e5:a6:9a:a8:d0:3f:f9:d7:41:5b:81:ad:aa:
ea:ed:84:38:50:5b:96:f4:79:e5:d4:36:e5:8b:0e:d1:0b:69:
e4:43:c5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:51:00 2025 by rpki-client