Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/orgS31RH2vxScDPAU6iBxZmhrZg.roa
File: orgS31RH2vxScDPAU6iBxZmhrZg.roa (raw, json)
Hash identifier: ABcv0vKKvQpSoGeOsgnTZFXSdIYngwRojrmYLDNajMo=
Subject key identifier: A2:B8:12:DF:54:47:DA:FC:52:70:33:C0:53:A8:81:C5:99:A1:AD:98
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019428236EC7F35A0B106267FB80C19A77FB
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/orgS31RH2vxScDPAU6iBxZmhrZg.roa
Signing time: Thu 02 Jan 2025 17:49:58 +0000
ROA not before: Thu 02 Jan 2025 17:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214025
IP address blocks: 31.56.59.0/24 maxlen: 24
31.56.67.0/24 maxlen: 24
31.56.69.0/24 maxlen: 24
31.56.72.0/24 maxlen: 24
31.56.84.0/24 maxlen: 24
31.56.88.0/24 maxlen: 24
31.56.120.0/24 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.122.0/24 maxlen: 24
31.56.123.0/24 maxlen: 24
31.56.126.0/24 maxlen: 24
31.56.200.0/24 maxlen: 24
31.56.202.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.132.0/24 maxlen: 24
31.57.133.0/24 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.215.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.221.0/24 maxlen: 24
31.57.255.0/24 maxlen: 24
31.58.88.0/24 maxlen: 24
31.58.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Jan 2025 15:42:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:6e:c7:f3:5a:0b:10:62:67:fb:80:c1:9a:77:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2b812df5447dafc527033c053a881c599a1ad98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e7:37:70:0f:c3:8d:00:a7:85:45:c0:89:fe:
e6:2a:9e:f3:17:06:91:24:ab:ee:93:79:66:b9:e0:
aa:c6:20:54:a9:fa:d6:cb:41:9e:37:91:46:57:2c:
f1:b7:32:95:35:2a:ce:1c:2d:b4:52:c4:cb:16:d2:
f8:aa:ff:af:e0:47:c5:03:4d:40:3f:6d:4e:41:e0:
52:59:69:90:06:68:c6:81:89:32:be:bc:9b:c0:93:
e8:18:71:c3:97:3b:81:bc:02:12:58:97:49:32:f0:
fe:91:f3:c5:ba:1a:1e:23:52:cf:ae:f7:01:c4:90:
fc:5b:1b:bc:25:48:ef:05:38:ea:73:b0:5f:a5:07:
07:ea:30:57:99:aa:b0:13:44:9a:76:31:d8:4b:c0:
28:a7:9d:9e:f6:30:0f:38:ac:e8:8b:ed:94:32:b4:
71:39:24:e4:76:9a:73:c8:5f:56:37:d3:e8:6d:d6:
e9:0e:6d:0e:14:0d:1a:ee:f0:8e:22:41:ac:cc:4e:
95:59:3a:65:26:f6:b7:af:0d:01:04:65:46:85:b7:
99:91:0f:48:8a:41:bb:0b:ad:82:64:49:ba:a0:4f:
44:31:76:46:7a:0e:b7:80:c1:ef:e7:c8:69:67:b9:
fd:55:d9:c9:4f:f5:a0:14:fe:d7:4d:04:6b:83:81:
bb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B8:12:DF:54:47:DA:FC:52:70:33:C0:53:A8:81:C5:99:A1:AD:98
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/orgS31RH2vxScDPAU6iBxZmhrZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.59.0/24
31.56.67.0/24
31.56.69.0/24
31.56.72.0/24
31.56.84.0/24
31.56.88.0/24
31.56.120.0/22
31.56.126.0/24
31.56.200.0/24
31.56.202.0/24
31.57.104.0/21
31.57.132.0/23
31.57.181.0/24
31.57.215.0/24
31.57.219.0/24
31.57.221.0/24
31.57.255.0/24
31.58.88.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:f6:5c:72:8a:04:fb:3b:f4:a5:5a:9a:84:32:1c:f2:e1:a5:
da:1c:f9:2d:bc:c0:53:e6:b3:3b:5e:af:64:f7:6d:9a:0c:2e:
42:06:44:84:30:1d:01:d9:8e:dc:8a:d5:f0:dd:26:d8:31:96:
ee:e7:01:2d:03:3e:d5:25:b8:e8:f4:11:42:95:49:c2:57:c1:
46:25:a7:e3:eb:70:33:fa:04:3d:a1:43:3c:6f:02:20:eb:27:
df:92:2f:90:fe:27:24:0c:22:0f:87:54:4b:2e:51:aa:d2:c1:
60:d1:b0:5f:40:57:bd:3d:8e:e8:43:11:51:3b:4a:b6:38:00:
8e:10:d0:5f:87:20:37:64:42:17:64:95:e5:78:c5:38:ad:44:
35:eb:b2:2b:c4:2b:e5:6f:bc:14:d5:6a:7f:71:0a:08:00:e5:
72:de:fa:aa:b1:bb:21:09:0c:8d:b2:70:dc:25:f8:d1:54:7f:
58:36:c6:14:d9:5e:44:7d:ee:79:42:7d:98:41:34:d7:d9:c8:
ec:92:37:af:98:17:54:23:7b:b9:8f:2e:1b:39:93:50:94:66:
4d:d9:12:84:56:43:90:7b:c9:92:f6:70:91:25:2a:d6:d2:1d:
c0:4a:10:83:c7:55:8b:fa:4f:36:97:ad:b1:5e:b8:bf:bc:8e:
ad:c4:3d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:48:43 2025 by rpki-client