Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qW_Nz9K-jMm8yqCuwCE_AuXHjnk.roa
File: qW_Nz9K-jMm8yqCuwCE_AuXHjnk.roa (raw, json)
Hash identifier: wyiergJjK6UOwImhrvf/QeLQIT0cao50Wh356mmV5FY=
Subject key identifier: A9:6F:CD:CF:D2:BE:8C:C9:BC:CA:A0:AE:C0:21:3F:02:E5:C7:8E:79
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193F491F0FB6D5A2F65BCCDC895609E3A1C
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qW_Nz9K-jMm8yqCuwCE_AuXHjnk.roa
Signing time: Mon 23 Dec 2024 17:30:25 +0000
ROA not before: Mon 23 Dec 2024 17:30:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 31.56.8.0/21 maxlen: 24
31.56.142.0/23 maxlen: 24
31.56.148.0/22 maxlen: 24
31.57.184.0/22 maxlen: 24
31.59.68.0/24 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
217.60.62.0/24 maxlen: 24
217.60.236.0/24 maxlen: 24
217.60.245.0/24 maxlen: 24
217.60.248.0/24 maxlen: 24
217.60.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Dec 2024 14:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f4:91:f0:fb:6d:5a:2f:65:bc:cd:c8:95:60:9e:3a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 23 17:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a96fcdcfd2be8cc9bccaa0aec0213f02e5c78e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c8:9b:d1:59:c7:ef:c0:20:4f:bd:bf:b7:06:
b1:70:b0:84:15:d1:eb:79:5b:9b:7c:97:02:35:36:
cb:f1:96:8a:3d:73:b4:e6:7f:53:c2:a6:0a:77:4e:
dc:e8:70:0d:03:99:cb:26:a0:1c:2a:61:e9:8a:18:
f1:bd:0a:01:91:a7:fc:1f:f6:fe:1c:10:89:8d:93:
9a:73:6c:11:45:12:b1:ff:e0:ce:66:9d:aa:36:44:
91:b1:95:c6:53:a7:a8:c6:67:c9:a1:61:48:0c:70:
a7:2e:c6:dd:29:33:a5:cb:f4:4a:e5:5c:08:5e:b8:
d6:15:bf:61:10:5a:d6:23:3f:3b:51:a0:d5:f8:c7:
a6:9e:6b:d8:5a:eb:9a:ff:2b:a1:ad:93:93:91:00:
32:91:0b:60:05:ed:18:04:3a:67:59:7b:5c:c2:6e:
2d:69:22:21:2b:03:7e:1e:e9:b2:2b:72:87:c3:81:
75:66:ba:15:6d:02:41:1b:ea:95:c2:1b:e3:19:99:
cf:d1:a3:a7:a0:20:3d:9a:fc:62:d3:7b:a7:28:c4:
1d:d1:30:cb:be:0c:18:b5:c0:16:ba:ff:cb:1d:15:
d0:51:08:f8:3e:b7:0c:71:ad:a0:33:29:9d:d3:c4:
7f:60:ff:bb:23:d0:e0:65:66:4b:6b:fb:6a:42:b2:
e9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6F:CD:CF:D2:BE:8C:C9:BC:CA:A0:AE:C0:21:3F:02:E5:C7:8E:79
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qW_Nz9K-jMm8yqCuwCE_AuXHjnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.8.0/21
31.56.142.0/23
31.56.148.0/22
31.57.184.0/22
31.59.68.0/24
31.59.136.0-31.59.175.255
217.60.62.0/24
217.60.236.0/24
217.60.245.0/24
217.60.248.0/24
217.60.254.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:0d:5a:3e:51:96:6e:0f:22:cb:a0:a9:17:7c:2a:9d:05:91:
e6:1e:a6:f9:d5:7f:ba:3c:ec:64:d8:c9:d0:45:b3:df:f1:8c:
9c:06:38:90:a2:d8:8d:c1:c8:da:89:46:a0:58:35:20:db:9e:
a2:7a:c5:3b:47:ab:ab:00:40:07:04:4d:c3:d1:1f:d6:66:e8:
21:e9:77:c2:16:e7:d3:58:b9:36:a0:03:07:11:6e:70:e4:6c:
5f:d3:6a:06:09:04:87:2b:44:6f:72:60:f7:b7:87:e9:e4:bc:
e3:cb:26:0a:1a:6d:02:e0:c5:ff:25:5a:2b:e5:ec:95:85:50:
a1:0b:45:4f:fb:1d:0c:86:0f:76:d6:cd:0a:27:37:34:ac:24:
a7:d6:48:19:43:13:e2:41:1c:0c:b6:a7:50:2a:79:d6:ac:58:
46:b9:06:8f:e3:fd:51:27:20:85:85:e8:9c:1b:0f:75:2d:5c:
8c:cf:9b:12:36:3b:80:2e:6f:ea:75:23:71:d9:1c:3d:60:a2:
d3:57:f3:8b:eb:f4:57:93:6d:2b:9c:ff:87:9f:6a:1b:b1:4a:
0d:1a:07:02:bf:15:58:83:1d:d4:11:7d:09:3d:c3:71:0e:2b:
0b:33:08:99:5f:fa:29:4c:92:34:0d:42:22:87:ee:65:50:84:
8e:ef:7a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:48:38 2025 by rpki-client