Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/q2xO4gbxS24TQG7DX8nPp8I5bw8.roa
File: q2xO4gbxS24TQG7DX8nPp8I5bw8.roa (raw, json)
Hash identifier: 7ZEIRVYzmk8kxbU3bNxULH6PFCMO12xeQz7NFXLX7Xs=
Subject key identifier: AB:6C:4E:E2:06:F1:4B:6E:13:40:6E:C3:5F:C9:CF:A7:C2:39:6F:0F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01944172F15C9B0362D31D73678BBEE4E98E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/q2xO4gbxS24TQG7DX8nPp8I5bw8.roa
Signing time: Tue 07 Jan 2025 15:47:19 +0000
ROA not before: Tue 07 Jan 2025 15:47:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214024
IP address blocks: 31.56.69.0/24 maxlen: 24
31.56.72.0/24 maxlen: 24
31.56.84.0/24 maxlen: 24
31.56.88.0/24 maxlen: 24
31.56.120.0/24 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.122.0/24 maxlen: 24
31.56.123.0/24 maxlen: 24
31.56.200.0/24 maxlen: 24
31.56.202.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.132.0/24 maxlen: 24
31.57.133.0/24 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.215.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.221.0/24 maxlen: 24
31.57.252.0/24 maxlen: 24
31.57.253.0/24 maxlen: 24
31.57.255.0/24 maxlen: 24
31.58.88.0/24 maxlen: 24
31.58.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 11 Jan 2025 06:42:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:41:72:f1:5c:9b:03:62:d3:1d:73:67:8b:be:e4:e9:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 7 15:47:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab6c4ee206f14b6e13406ec35fc9cfa7c2396f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:86:cf:98:11:d6:e9:ea:32:d7:73:9d:ea:f2:
ac:f5:cc:51:99:6b:0a:e0:da:d1:bf:7b:9b:66:07:
ec:3a:9d:d0:12:60:32:9d:0e:06:7e:b9:74:79:b7:
41:a0:24:98:16:3c:c7:b7:88:85:f3:bf:e3:1e:bd:
f0:79:a9:82:a5:af:d0:a9:37:79:1a:04:7f:b3:b5:
18:b1:0e:62:07:e1:12:01:f4:ae:9c:10:a1:78:44:
18:a2:41:01:84:39:d7:34:db:66:56:d2:e1:a4:6d:
bb:cb:9c:2b:16:18:7b:29:ce:8f:a2:b5:4a:57:3c:
f3:ad:2c:e9:66:75:ba:e8:f0:71:ae:eb:9a:75:e6:
cb:0f:28:04:c4:e3:b6:29:a2:7a:47:0a:b2:82:5a:
91:fa:c1:ff:25:39:63:fd:b3:a9:a3:9f:25:b2:85:
ea:e6:60:f4:16:f6:2a:01:f3:30:a3:b3:44:7b:05:
51:56:87:68:05:82:4a:24:97:06:ab:15:8d:d0:b1:
ec:ef:52:5d:28:20:ed:03:a6:71:51:49:9e:41:de:
bc:f0:2a:0e:2d:96:e8:c6:7a:cc:60:cd:17:0a:87:
dc:d7:53:e0:cf:57:c4:72:48:5f:d8:11:96:d1:37:
60:fc:c6:6f:3f:3a:06:c4:9a:bd:23:af:01:16:75:
cd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6C:4E:E2:06:F1:4B:6E:13:40:6E:C3:5F:C9:CF:A7:C2:39:6F:0F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/q2xO4gbxS24TQG7DX8nPp8I5bw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.69.0/24
31.56.72.0/24
31.56.84.0/24
31.56.88.0/24
31.56.120.0/22
31.56.200.0/24
31.56.202.0/24
31.57.104.0/21
31.57.132.0/23
31.57.181.0/24
31.57.215.0/24
31.57.219.0/24
31.57.221.0/24
31.57.252.0/23
31.57.255.0/24
31.58.88.0/23
Signature Algorithm: sha256WithRSAEncryption
49:07:11:65:77:9f:15:a4:11:47:19:c2:92:89:cd:79:b5:96:
8a:a5:e0:61:2f:ed:71:d3:98:bc:94:92:3b:2a:3a:0f:55:c9:
e4:e1:4a:e0:ff:9c:4b:46:02:72:a3:94:02:82:06:f6:56:49:
c2:8e:0f:2d:e4:bf:d1:a5:d0:36:2c:98:1f:ca:3b:11:e5:71:
59:a0:4b:5e:0b:00:83:5a:04:3f:07:08:fc:90:5d:44:33:df:
8d:34:d3:53:8f:bd:ba:84:b5:24:d1:25:e0:4c:1a:12:5c:19:
97:81:95:4d:1d:56:04:61:83:99:e6:a4:3e:43:1d:c3:eb:af:
13:7d:a8:8b:a2:d7:5e:5e:cd:d8:3c:4e:2c:58:6b:14:97:13:
ef:c5:99:65:25:2d:e9:eb:49:d9:2b:4e:4a:48:99:d7:57:5d:
c2:6a:93:af:35:c1:aa:f3:ae:9b:36:f4:2e:21:29:54:4c:f0:
81:85:2d:8d:ad:89:10:86:dc:64:4b:5c:9e:a7:6f:27:e5:7a:
db:0d:f5:f7:4a:19:13:d9:fe:d4:cd:1d:71:9e:af:4c:a9:28:
51:dc:49:62:0a:5a:4e:b0:86:e9:be:94:e0:f3:ae:1f:80:76:
ce:af:9d:a9:b4:35:2e:7b:e5:57:24:94:ea:96:e4:0e:a6:ff:
b5:aa:a8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:07 2025 by rpki-client