Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rCo_cuFOm1qgopi4qNvvxvnkcCk.roa
File: rCo_cuFOm1qgopi4qNvvxvnkcCk.roa (raw, json)
Hash identifier: TC8gI/gTfz5LsOHU3JNh8dGhD6wjSCYF1ShrCq0QguQ=
Subject key identifier: AC:2A:3F:72:E1:4E:9B:5A:A0:A2:98:B8:A8:DB:EF:C6:F9:E4:70:29
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01941C1CD5BAC788325B75B8307A2C8EF702
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rCo_cuFOm1qgopi4qNvvxvnkcCk.roa
Signing time: Tue 31 Dec 2024 09:47:19 +0000
ROA not before: Tue 31 Dec 2024 09:47:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 31.56.75.0/24 maxlen: 24
31.56.86.0/24 maxlen: 24
31.56.107.0/24 maxlen: 24
31.56.112.0/24 maxlen: 24
31.57.162.0/23 maxlen: 23
31.57.164.0/23 maxlen: 23
31.57.180.0/24 maxlen: 24
31.57.227.0/24 maxlen: 24
31.58.41.0/24 maxlen: 24
31.58.42.0/24 maxlen: 24
31.58.48.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.56.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:06:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1c:1c:d5:ba:c7:88:32:5b:75:b8:30:7a:2c:8e:f7:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 31 09:47:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac2a3f72e14e9b5aa0a298b8a8dbefc6f9e47029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:c8:8c:ae:6d:66:0d:dd:e3:be:61:6d:38:98:
41:2c:61:08:e2:9f:ac:d7:41:f0:df:f3:fc:36:6d:
e0:74:b5:82:4f:0d:a3:8b:c6:a7:99:b5:c6:7b:46:
7a:3f:65:19:64:8e:81:f1:d2:fb:84:31:df:90:3f:
2d:3c:12:04:f4:73:85:66:98:4d:11:99:00:78:9d:
c1:d0:73:97:d5:b7:de:4f:e9:57:4e:43:c2:2a:1b:
18:16:84:ec:43:75:69:be:5e:2b:49:c2:e7:38:77:
d6:38:48:22:8a:78:b5:44:c9:9f:fe:04:dc:95:c7:
08:b3:9f:ab:58:70:c5:a4:fd:81:87:66:9c:a9:29:
2e:74:7c:88:b0:75:89:96:40:03:8c:aa:60:8f:45:
85:53:df:a4:e7:9d:3d:b5:f1:bf:fd:44:c7:93:92:
32:f1:60:57:45:8b:e8:0d:eb:f4:65:89:45:d1:7c:
da:e9:2e:8c:ba:1f:e1:b6:50:51:31:6e:d6:10:87:
8a:d0:8d:8f:c1:06:6a:07:a9:36:73:9e:22:a5:fc:
10:ba:71:99:ef:53:b4:b5:ab:29:00:72:e6:4c:38:
55:f6:a4:b3:92:8d:6a:44:ea:e3:1a:eb:47:9f:ba:
59:03:2b:b1:e1:b7:8e:98:d5:72:72:10:7d:bc:ba:
5b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2A:3F:72:E1:4E:9B:5A:A0:A2:98:B8:A8:DB:EF:C6:F9:E4:70:29
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rCo_cuFOm1qgopi4qNvvxvnkcCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.75.0/24
31.56.86.0/24
31.56.107.0/24
31.56.112.0/24
31.57.162.0-31.57.165.255
31.57.180.0/24
31.57.227.0/24
31.58.41.0-31.58.42.255
31.58.48.0/24
31.58.50.0/23
31.58.56.0/23
31.58.64.0/23
31.58.153.0/24
Signature Algorithm: sha256WithRSAEncryption
55:98:82:20:52:d7:64:1e:d7:c2:9f:50:9b:2a:22:fb:c2:5c:
1f:3d:20:c3:22:3c:84:fd:07:8e:d4:dc:8a:6d:35:21:ef:75:
6d:37:41:ba:68:fc:9e:b2:6b:e5:8a:37:c4:ee:5a:23:38:90:
cc:c0:bd:49:98:1b:a3:25:0c:be:6a:d3:ff:c6:af:88:31:fd:
be:4f:39:6c:d7:13:14:64:dd:6f:c4:64:ec:46:0d:36:fc:53:
6e:2a:a4:e9:3c:cd:75:14:5b:be:87:54:7a:16:f4:d6:06:db:
f0:c3:6d:64:35:6e:1d:52:f9:e7:8e:dc:f8:65:33:3f:82:a2:
a3:ee:f4:2a:d8:ec:53:2e:83:f2:c3:49:94:24:b6:84:ec:3e:
16:56:33:a8:0b:86:d8:37:f8:e0:04:bf:c3:b9:bb:05:48:dd:
58:b2:28:96:f7:55:51:55:ef:96:8f:e9:42:52:9b:0e:03:03:
83:13:cb:91:62:6b:99:30:7b:7d:89:bd:b9:c0:46:f5:2a:2e:
a8:4a:bc:f9:12:9f:ff:41:64:1c:5e:ef:04:3f:f3:38:8b:a6:
6f:61:5a:5c:32:9b:d8:d4:36:d3:20:55:41:b2:e4:39:f5:f5:
6e:4c:37:a3:d8:39:89:10:d7:45:c4:9e:c2:65:94:0f:d0:09:
b6:99:1a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:45:37 2025 by rpki-client