Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/q72JtWFTu5xPPD40nq3p2sU0UrM.roa
File: q72JtWFTu5xPPD40nq3p2sU0UrM.roa (raw, json)
Hash identifier: bdjPfrwS4CGx0AoVQtyrKxP9D05piCLfBzpgJBOC2Vc=
Subject key identifier: AB:BD:89:B5:61:53:BB:9C:4F:3C:3E:34:9E:AD:E9:DA:C5:34:52:B3
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019586BA3AD4E1DD3D9A9F7E1FA39B6E9BE4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/q72JtWFTu5xPPD40nq3p2sU0UrM.roa
Signing time: Tue 11 Mar 2025 19:41:46 +0000
ROA not before: Tue 11 Mar 2025 19:41:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 31.56.88.0/24 maxlen: 24
31.56.112.0/21 maxlen: 24
31.57.11.0/24 maxlen: 24
31.57.131.0/24 maxlen: 24
31.57.150.0/24 maxlen: 24
31.57.176.0/24 maxlen: 24
31.57.194.0/24 maxlen: 24
31.58.59.0/24 maxlen: 24
31.58.146.0/24 maxlen: 24
31.59.14.0/24 maxlen: 24
31.59.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Mar 2025 14:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:86:ba:3a:d4:e1:dd:3d:9a:9f:7e:1f:a3:9b:6e:9b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 11 19:41:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abbd89b56153bb9c4f3c3e349eade9dac53452b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f4:75:5a:2d:58:2e:a6:b3:1c:7f:6c:c5:8b:
01:ec:8f:08:86:b3:d7:4d:78:65:85:cf:a8:29:b3:
fd:24:f6:1e:e0:ff:97:d1:8c:ef:9c:d8:3a:bd:7d:
93:b6:d7:c1:27:17:5c:73:0c:e9:a1:94:1e:1b:ae:
10:8c:bf:6f:f7:1a:8a:e7:87:28:94:80:3c:c2:57:
a1:1e:04:63:9b:f5:73:5a:b5:d5:ab:45:d1:21:9d:
44:ae:40:2b:d4:41:68:33:5c:c6:23:f1:14:f0:58:
93:ba:86:12:51:da:8e:dc:1b:54:00:51:f3:8e:13:
98:36:4d:e8:54:0c:17:f3:62:a4:19:55:ac:bb:81:
f0:12:17:f7:bd:68:2f:38:de:d9:ed:0b:a0:13:ea:
d7:48:ae:16:0e:6d:14:1f:95:70:9d:fc:a6:4d:52:
d0:87:3e:da:ce:c2:85:95:a2:da:50:9d:80:eb:ba:
c9:0e:57:f3:b2:ea:6e:36:84:a6:d5:18:e0:c9:5d:
c1:6f:a1:8c:a9:11:60:bd:4d:6a:39:6a:e3:b2:5c:
70:8b:77:be:7d:b8:fe:d6:aa:e6:cc:af:55:5e:60:
c3:80:dd:5a:c3:cc:1c:67:96:16:69:df:95:19:ec:
4d:91:bd:2c:4f:c4:3e:4f:be:1e:ab:df:ab:0c:68:
24:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BD:89:B5:61:53:BB:9C:4F:3C:3E:34:9E:AD:E9:DA:C5:34:52:B3
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/q72JtWFTu5xPPD40nq3p2sU0UrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.88.0/24
31.56.112.0/21
31.57.11.0/24
31.57.131.0/24
31.57.150.0/24
31.57.176.0/24
31.57.194.0/24
31.58.59.0/24
31.58.146.0/24
31.59.14.0/24
31.59.30.0/24
Signature Algorithm: sha256WithRSAEncryption
44:59:c5:a5:b5:c9:ef:8b:a6:4a:c9:c4:c2:c1:a6:97:53:4d:
d6:06:af:fa:35:fa:e7:4c:d5:f0:e7:40:78:8e:c0:f5:fc:b1:
10:db:d8:35:cd:c2:48:1b:19:a2:cc:a9:d5:8a:bd:53:db:a3:
8b:87:e6:6e:92:8a:5e:a7:bf:5d:03:00:af:02:57:b4:e4:3f:
17:b9:32:69:10:5f:0b:c0:a7:c6:0e:5f:72:72:38:62:1c:c1:
6b:80:03:84:21:5f:a5:01:6a:43:b1:a9:9e:7d:d4:ba:8d:8b:
fd:c2:96:eb:aa:09:9c:98:67:4e:6d:92:c3:c7:1d:76:18:40:
e5:99:73:b5:c7:14:25:6e:13:62:d2:85:65:17:4c:54:66:c5:
f0:d3:17:e4:8b:00:81:0b:53:5e:df:42:d9:ec:b1:31:be:de:
b4:fc:45:8d:3f:ba:11:a6:65:c0:ae:4b:8e:30:81:49:e9:34:
41:d1:19:55:80:c8:66:ff:0d:e1:b5:83:e7:b5:e1:c6:f4:e7:
fc:1f:ef:63:f2:d7:bc:24:36:f3:de:92:76:cc:b3:51:86:02:
ac:8a:08:b4:70:5a:2c:4c:76:13:b2:75:84:87:cc:b9:21:83:
45:5f:97:bf:41:39:65:15:3f:e8:11:a1:1f:97:ad:d1:63:65:
72:01:3b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:50:54 2025 by rpki-client