Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/p2RUQKcOwm8sTH34WDs9eBwdoBg.roa
File: p2RUQKcOwm8sTH34WDs9eBwdoBg.roa (raw, json)
Hash identifier: zO12fIyujm5AjKacnqR253h5zNlRUXJo2EuaEGf02Ek=
Subject key identifier: A7:64:54:40:A7:0E:C2:6F:2C:4C:7D:F8:58:3B:3D:78:1C:1D:A0:18
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195A9C75E5723F03E36F02D0F33BE4CFEA0
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/p2RUQKcOwm8sTH34WDs9eBwdoBg.roa
Signing time: Tue 18 Mar 2025 15:02:50 +0000
ROA not before: Tue 18 Mar 2025 15:02:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 31.56.8.0/21 maxlen: 24
31.56.126.0/24 maxlen: 24
31.56.142.0/23 maxlen: 24
31.56.148.0/22 maxlen: 24
31.57.184.0/22 maxlen: 24
31.59.79.0/24 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.228.0/24 maxlen: 24
31.59.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Mar 2025 06:11:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a9:c7:5e:57:23:f0:3e:36:f0:2d:0f:33:be:4c:fe:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 18 15:02:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7645440a70ec26f2c4c7df8583b3d781c1da018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:70:b2:ce:ba:14:7a:ab:85:d4:10:00:02:23:
c8:53:51:be:f2:d8:d6:b2:69:91:11:2d:c6:fb:fc:
13:d3:99:f3:34:31:bb:de:07:e1:69:d5:8a:ba:b6:
0e:c7:f0:fe:7d:ee:4e:1d:6f:e8:9e:87:f3:fe:01:
50:f1:85:9e:02:f3:65:8d:0b:25:c1:a9:0b:e0:17:
67:a1:2a:ff:02:71:5d:5b:70:f1:86:7f:d8:96:01:
e5:f3:a3:d9:5f:99:b2:13:05:37:bc:2b:0a:ee:0e:
7b:f2:5b:d3:41:bf:da:dc:1f:bb:6b:a9:d8:c6:45:
63:1c:e0:6f:99:03:5c:63:51:a0:5d:10:88:4e:d2:
70:17:1e:62:4c:b4:f0:88:71:74:5d:1e:29:6b:1d:
24:d7:57:85:75:3f:c6:79:41:40:1b:cb:f5:88:06:
a9:c2:44:f4:b1:d4:b2:90:d3:6d:5a:85:a4:c8:a0:
c0:65:eb:c2:8a:d7:84:26:fb:ee:32:49:6d:13:24:
6f:06:79:1f:3f:d8:94:5a:66:f5:3b:78:e2:79:75:
0b:f8:c4:bc:a6:cc:47:48:0a:1e:10:81:86:7f:b9:
b2:e1:d3:1b:8f:3c:96:6f:ad:58:a9:08:05:bf:08:
49:79:a0:89:14:e1:e4:2f:92:40:6c:d0:14:bf:44:
f3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:64:54:40:A7:0E:C2:6F:2C:4C:7D:F8:58:3B:3D:78:1C:1D:A0:18
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/p2RUQKcOwm8sTH34WDs9eBwdoBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.8.0/21
31.56.126.0/24
31.56.142.0/23
31.56.148.0/22
31.57.184.0/22
31.59.79.0/24
31.59.136.0-31.59.175.255
31.59.228.0/24
31.59.230.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:28:0d:6b:bf:3b:73:5a:ad:7a:79:09:83:6e:46:8c:b8:36:
a7:3f:b4:c7:51:61:a5:36:f9:d2:8e:a1:46:73:b3:26:95:f9:
2d:e5:ad:21:a3:d0:09:31:1d:32:56:1e:18:86:c1:2f:c0:4e:
e1:32:07:b6:58:de:94:e2:df:2d:92:ff:e8:dd:68:ac:7c:70:
13:5a:dd:17:8d:2e:74:a9:1a:39:00:fa:a8:96:ef:0e:45:06:
d0:39:3e:ba:02:cb:9c:6a:31:eb:1e:01:eb:0f:08:28:7f:e2:
9a:0f:28:8a:b3:4a:5b:48:6a:ed:2e:1b:9c:9c:c6:d6:62:8b:
31:fa:97:ac:84:31:28:64:18:e7:ff:dc:d2:39:09:19:0f:b3:
d8:99:65:0f:80:c4:ac:1c:db:b9:ea:54:be:58:34:4c:4b:ff:
ae:47:ad:61:67:8c:2c:05:6f:2b:00:19:83:01:bf:15:a5:cd:
8f:60:39:42:78:e0:9f:c1:0b:93:d4:b9:7d:79:23:bc:73:e8:
03:10:2d:51:d6:b5:77:88:2b:34:40:11:cb:b4:4d:04:23:59:
a2:77:62:04:06:4c:53:4e:a0:09:c0:c2:38:9d:d3:10:ad:4a:
cc:05:a2:2d:4b:75:f4:14:85:a7:bb:c5:2c:4c:a1:38:4f:b8:
88:f3:e2:82
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAZWpx15XI/A+NvAtDzO+TP6gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMzE4MTUwMjUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzY0NTQ0MGE3MGVjMjZmMmM0YzdkZjg1ODNiM2Q3ODFjMWRhMDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3CyzroUequF1BAAAiPIU1G+8tjW
smmRES3G+/wT05nzNDG73gfhadWKurYOx/D+fe5OHW/onofz/gFQ8YWeAvNljQsl
wakL4BdnoSr/AnFdW3Dxhn/YlgHl86PZX5myEwU3vCsK7g578lvTQb/a3B+7a6nY
xkVjHOBvmQNcY1GgXRCITtJwFx5iTLTwiHF0XR4pax0k11eFdT/GeUFAG8v1iAap
wkT0sdSykNNtWoWkyKDAZevCiteEJvvuMkltEyRvBnkfP9iUWmb1O3jieXUL+MS8
psxHSAoeEIGGf7my4dMbjzyWb61YqQgFvwhJeaCJFOHkL5JAbNAUv0TzWQIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFKdkVECnDsJvLEx9+Fg7PXgcHaAYMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvcDJSVVFLY093bThzVEgzNFdEczllQndkb0JnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQDHzgIAwQA
Hzh+AwQBHziOAwQCHziUAwQCHzm4AwQAHztPMAwDBAMfO4gDBAQfO6ADBAAfO+QD
BAAfO+YwDQYJKoZIhvcNAQELBQADggEBADwoDWu/O3NarXp5CYNuRoy4Nqc/tMdR
YaU2+dKOoUZzsyaV+S3lrSGj0AkxHTJWHhiGwS/ATuEyB7ZY3pTi3y2S/+jdaKx8
cBNa3ReNLnSpGjkA+qiW7w5FBtA5ProCy5xqMeseAesPCCh/4poPKIqzSltIau0u
G5ycxtZiizH6l6yEMShkGOf/3NI5CRkPs9iZZQ+AxKwc27nqVL5YNExL/65HrWFn
jCwFbysAGYMBvxWlzY9gOUJ44J/BC5PUuX15I7xz6AMQLVHWtXeIKzRAEcu0TQQj
WaJ3YgQGTFNOoAnAwjid0xCtSswFoi1LdfQUhae7xSxMoThPuIjz4oI=
-----END CERTIFICATE-----
Generated at Fri Apr 18 09:50:49 2025 by rpki-client