Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ncbZL0sTX6cRHgrjjdVh1RDcmwA.roa
File: ncbZL0sTX6cRHgrjjdVh1RDcmwA.roa (raw, json)
Hash identifier: fbGiKgQ77bqQc+R+aG522BCZIthTupGfQz4g/txJhOs=
Subject key identifier: 9D:C6:D9:2F:4B:13:5F:A7:11:1E:0A:E3:8D:D5:61:D5:10:DC:9B:00
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194644F648C1A04BA586468ADF85003041A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ncbZL0sTX6cRHgrjjdVh1RDcmwA.roa
Signing time: Tue 14 Jan 2025 10:15:12 +0000
ROA not before: Tue 14 Jan 2025 10:15:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26737
IP address blocks: 31.56.42.0/24 maxlen: 24
31.56.43.0/24 maxlen: 24
31.56.87.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.57.208.0/24 maxlen: 24
31.57.209.0/24 maxlen: 24
31.57.210.0/24 maxlen: 24
31.57.211.0/24 maxlen: 24
31.57.212.0/24 maxlen: 24
31.57.213.0/24 maxlen: 24
31.57.214.0/24 maxlen: 24
31.57.216.0/24 maxlen: 24
31.58.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 Jan 2025 11:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:64:4f:64:8c:1a:04:ba:58:64:68:ad:f8:50:03:04:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 14 10:15:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9dc6d92f4b135fa7111e0ae38dd561d510dc9b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:00:d5:b7:d8:4b:ef:11:ca:09:a5:e3:ef:66:
75:3d:ce:77:1c:12:d8:55:0f:d8:cb:37:53:12:b8:
ba:bf:69:87:90:c2:48:b8:f0:94:2f:40:c8:76:00:
8c:c4:27:4e:ca:b3:35:55:7c:44:e2:8b:50:84:ba:
70:fb:e6:3e:78:12:cd:45:78:1e:d6:29:d0:96:2d:
3f:ea:2c:7d:ef:97:fd:29:4a:a5:b2:62:83:7c:39:
bc:cc:e2:7c:cd:94:b7:cb:c3:a2:4b:47:59:1e:65:
3f:b2:d7:ec:e2:35:62:56:12:24:c3:83:e6:b3:ec:
71:fa:7e:4c:3f:9c:69:44:06:78:91:2e:0b:5e:61:
30:8a:79:24:92:d7:d0:5d:52:3e:3b:49:81:61:ee:
df:e7:81:6d:c1:4b:14:ba:2d:e2:1f:e6:2a:3f:da:
22:7f:26:94:cf:ce:83:3a:a9:8e:a8:db:dd:44:20:
5b:24:6d:85:2d:3f:8c:22:b8:0f:77:9a:9d:c6:46:
7b:d7:4f:95:d2:1b:8f:6b:86:4b:f4:c4:a8:2c:26:
5a:7c:1e:88:fd:19:3c:49:b6:57:19:0b:d8:db:94:
08:87:dd:97:09:6c:e2:79:93:27:19:da:50:cd:52:
c8:75:70:b6:cc:c0:60:4b:d0:5d:09:f3:4e:fb:a1:
2a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C6:D9:2F:4B:13:5F:A7:11:1E:0A:E3:8D:D5:61:D5:10:DC:9B:00
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ncbZL0sTX6cRHgrjjdVh1RDcmwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.42.0/23
31.56.87.0/24
31.56.89.0/24
31.57.208.0-31.57.214.255
31.57.216.0/24
31.58.33.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:f5:3a:e6:69:8e:c4:f5:ec:5e:7a:ef:43:fc:34:97:74:0d:
72:e0:fe:e5:6e:9e:2e:b8:41:37:0c:b1:e7:85:89:2d:6a:74:
23:06:cf:27:2a:1f:7b:f2:f2:a4:41:cb:ed:74:f5:2e:a7:98:
77:be:4b:ca:02:97:79:7a:37:15:15:1e:f2:28:d1:d9:09:75:
9e:db:9e:3c:a0:ca:bd:f2:68:93:4f:90:cb:f1:b8:d5:b7:28:
13:09:94:78:1f:ed:e3:17:fc:7d:ca:82:ec:fb:56:83:dc:69:
41:5d:75:fa:3f:74:bb:1c:59:31:1c:ea:7a:90:ee:47:d5:ee:
f0:a7:db:02:63:67:f0:97:ca:43:b9:33:3b:4f:2a:4f:5c:21:
8c:dc:3f:f1:87:04:e8:2e:2a:bc:97:b5:87:51:12:74:33:b2:
6e:b5:ad:65:51:ef:af:0c:4c:6d:15:d2:de:6e:53:6e:97:86:
80:e0:1e:a8:e2:1b:81:91:0f:56:fb:5e:4c:08:b1:68:0d:83:
a3:2d:b3:0c:c4:7a:f7:97:bb:be:9e:32:2c:7d:61:34:f8:94:
00:24:23:46:73:8b:cc:c6:48:8b:91:be:f4:0f:af:57:70:14:
e8:a5:38:96:88:39:98:1b:41:8c:e2:23:3f:75:f1:cc:48:62:
96:3b:5b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:48:41 2025 by rpki-client