Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ne-FdOmTy9RlVEmxsLgOGcKO-E8.roa
File: ne-FdOmTy9RlVEmxsLgOGcKO-E8.roa (raw, json)
Hash identifier: OXhgJkjBGsKqTFLqJsjA65PKoW0csoSyIc7/kHE/cNI=
Subject key identifier: 9D:EF:85:74:E9:93:CB:D4:65:54:49:B1:B0:B8:0E:19:C2:8E:F8:4F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01944B5E9CF0EF90FEF2B51514E6CB2D0D4D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ne-FdOmTy9RlVEmxsLgOGcKO-E8.roa
Signing time: Thu 09 Jan 2025 14:01:19 +0000
ROA not before: Thu 09 Jan 2025 14:01:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 31.56.154.0/24 maxlen: 24
31.56.158.0/24 maxlen: 24
31.56.159.0/24 maxlen: 24
31.56.168.0/24 maxlen: 24
31.56.169.0/24 maxlen: 24
31.56.170.0/24 maxlen: 24
31.56.171.0/24 maxlen: 24
31.56.174.0/24 maxlen: 24
31.56.175.0/24 maxlen: 24
31.57.24.0/22 maxlen: 24
31.57.28.0/22 maxlen: 24
31.57.48.0/22 maxlen: 24
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.92.0/22 maxlen: 24
31.57.96.0/22 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.196.0/22 maxlen: 24
31.58.204.0/22 maxlen: 24
31.58.212.0/22 maxlen: 24
31.58.220.0/22 maxlen: 24
31.58.224.0/22 maxlen: 24
31.59.120.0/22 maxlen: 24
217.60.0.0/18 maxlen: 24
217.60.1.0/24 maxlen: 24
217.60.5.0/24 maxlen: 24
217.60.11.0/24 maxlen: 24
217.60.13.0/24 maxlen: 24
217.60.24.0/24 maxlen: 24
217.60.25.0/24 maxlen: 24
217.60.26.0/24 maxlen: 24
217.60.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 11 Jan 2025 20:25:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4b:5e:9c:f0:ef:90:fe:f2:b5:15:14:e6:cb:2d:0d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 9 14:01:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9def8574e993cbd4655449b1b0b80e19c28ef84f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0a:4b:47:ee:b2:86:53:54:45:44:1b:5d:f4:
af:39:56:4f:62:7c:48:cd:71:65:9f:4c:23:e0:4c:
97:50:f7:44:b8:4c:6a:cb:e0:cf:a4:7d:b2:d6:de:
55:b0:cb:ac:5f:ef:95:84:f2:68:94:22:49:ef:b8:
b0:e7:08:c4:29:2c:48:43:e3:27:18:e2:a5:06:71:
7e:05:e0:ed:8d:a8:10:08:5a:26:61:ff:d4:e7:ae:
46:7c:af:46:9e:fd:a2:c0:6c:23:a4:33:25:2c:97:
86:ae:34:3b:35:42:a1:5d:c0:35:e6:28:7a:3e:66:
65:80:f4:fa:fe:ee:20:29:62:31:00:a2:5a:ab:8f:
62:90:19:e7:4c:3a:23:5a:c0:33:fe:83:bc:20:fc:
6f:83:c2:09:66:97:28:40:d8:37:19:b7:6c:d4:83:
58:16:29:7a:72:ac:d8:c3:b7:81:2a:65:43:c5:b4:
ec:37:74:aa:09:d1:93:d7:eb:e5:c9:de:99:3b:1f:
83:a3:72:f6:fa:fa:e6:f2:5b:6c:62:0e:d1:6e:5f:
f8:4f:3a:0c:d3:21:22:a3:08:b7:0c:3a:cd:d6:19:
80:fa:ad:3b:47:f9:25:a9:34:8c:9e:c3:a5:19:15:
67:56:bf:12:c6:38:3a:0c:b1:6c:e9:b7:0e:97:31:
a2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:EF:85:74:E9:93:CB:D4:65:54:49:B1:B0:B8:0E:19:C2:8E:F8:4F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ne-FdOmTy9RlVEmxsLgOGcKO-E8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.154.0/24
31.56.158.0/23
31.56.168.0/22
31.56.174.0/23
31.57.24.0/21
31.57.48.0/20
31.57.92.0-31.57.99.255
31.57.120.0/21
31.58.34.0/23
31.58.196.0/22
31.58.204.0/22
31.58.212.0/22
31.58.220.0-31.58.227.255
31.59.120.0/22
217.60.0.0/18
Signature Algorithm: sha256WithRSAEncryption
8a:0d:e2:1b:77:be:e1:dd:51:8e:76:73:8b:0c:e6:80:20:fe:
c1:ae:4c:05:87:28:99:7a:74:65:b6:69:1a:04:e8:66:19:22:
92:a9:4c:1a:b1:82:20:25:1b:fb:c0:de:6e:4d:7e:1c:90:e0:
5f:0f:93:ba:40:bb:97:17:b9:7e:41:c4:bc:b3:a2:ff:ed:9e:
ea:74:5e:76:43:3a:13:ba:80:d0:5a:e4:ed:d4:83:19:54:c6:
be:e2:cc:eb:78:93:22:78:c7:33:34:e9:78:bb:af:22:8f:b3:
86:c9:ec:c4:c5:92:44:e2:90:30:11:e6:e6:7c:dc:21:39:f4:
5d:d8:9a:cd:f4:78:98:e7:17:9c:e6:2d:24:0a:ea:65:15:15:
40:6c:8c:ed:3b:6c:a2:cb:57:2f:b0:6d:20:25:82:7c:ba:39:
6b:64:73:bf:46:1c:12:d5:49:20:a8:9e:08:b8:d7:e5:ef:87:
06:b8:be:c7:35:57:4f:5b:e8:6d:0a:7f:8b:f9:33:e1:c0:9d:
9e:89:e9:eb:f6:e5:f8:ea:11:78:a3:29:c4:df:4c:c0:bb:89:
d7:aa:12:f9:29:31:f0:5e:bb:58:c2:ea:af:70:75:cb:54:2f:
07:af:5e:2a:01:ff:f6:40:cf:1d:d3:f1:48:f7:cc:2a:7a:22:
de:65:b7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:51:34 2025 by rpki-client