Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sNeogtn0FV-tu01KjFNLlgNXbjA.roa
File: sNeogtn0FV-tu01KjFNLlgNXbjA.roa (raw, json)
Hash identifier: B/h7FKT9HBgAwKISo+rRYxF7rnYOtXue+39jBOfA54E=
Subject key identifier: B0:D7:A8:82:D9:F4:15:5F:AD:BB:4D:4A:8C:53:4B:96:03:57:6E:30
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193E8B4244A8730634134DC4A9167BC738E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sNeogtn0FV-tu01KjFNLlgNXbjA.roa
Signing time: Sat 21 Dec 2024 10:12:20 +0000
ROA not before: Sat 21 Dec 2024 10:12:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.74.0/24 maxlen: 24
31.56.75.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.156.0/24 maxlen: 24
31.57.65.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.145.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.147.0/24 maxlen: 24
31.57.151.0/24 maxlen: 24
31.57.152.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.178.0/24 maxlen: 24
31.57.179.0/24 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.182.0/24 maxlen: 24
31.57.183.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.232.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.66.0/24 maxlen: 24
31.58.67.0/24 maxlen: 24
31.58.131.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.167.0/24 maxlen: 24
31.59.42.0/24 maxlen: 24
31.59.43.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.130.0/24 maxlen: 24
31.59.184.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 21 Dec 2024 21:20:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e8:b4:24:4a:87:30:63:41:34:dc:4a:91:67:bc:73:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 21 10:12:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0d7a882d9f4155fadbb4d4a8c534b9603576e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:65:02:51:1d:0a:2c:d5:fc:d5:46:10:db:b8:
c8:38:8f:5b:86:30:87:78:dc:0a:ec:a0:ce:61:5d:
23:47:7a:a2:56:3e:a6:f6:94:cb:4b:01:69:c5:35:
d8:9b:aa:36:ed:e2:eb:82:07:d3:6d:e8:70:c3:47:
b3:ff:9b:3f:ba:2f:d7:8b:e9:ea:3d:39:f2:22:0f:
6a:21:90:a7:07:b4:bc:e3:7f:18:09:83:10:51:62:
e8:27:7a:29:12:0b:37:4d:34:c9:5b:39:72:cc:da:
e6:87:8e:d8:27:fe:e6:e2:19:88:37:ce:f3:e2:87:
e5:39:b9:90:2a:b0:b1:b2:ba:75:19:09:33:b2:1d:
b4:79:2f:f4:56:3a:c0:87:53:f5:13:56:d4:40:26:
aa:d4:6f:31:cb:e6:ea:a4:4a:5c:2f:a4:a4:b2:a0:
8f:6f:42:3c:10:70:08:ba:67:0f:70:91:0d:2a:eb:
87:29:f3:be:4c:77:9c:fe:c7:87:00:22:ff:59:e9:
de:46:29:8d:49:1a:39:4c:0f:1f:f3:0e:7d:fe:f6:
43:20:08:68:a4:55:f1:61:6b:92:39:72:c2:e6:33:
39:88:0e:e2:d2:ca:94:87:f0:40:c8:d0:e3:35:f6:
2f:13:bd:69:b8:28:7b:d9:c4:47:52:15:06:e3:07:
f6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D7:A8:82:D9:F4:15:5F:AD:BB:4D:4A:8C:53:4B:96:03:57:6E:30
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sNeogtn0FV-tu01KjFNLlgNXbjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.71.0/24
31.56.74.0/23
31.56.89.0/24
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.156.0/24
31.57.65.0/24
31.57.132.0/23
31.57.145.0-31.57.147.255
31.57.151.0-31.57.152.255
31.57.176.0/21
31.57.192.0/22
31.57.200.0/23
31.57.208.0/20
31.57.232.0/22
31.58.34.0/23
31.58.66.0/23
31.58.131.0/24
31.58.152.0/22
31.58.167.0/24
31.59.42.0/23
31.59.96.0/22
31.59.112.0/22
31.59.130.0/24
31.59.184.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:2b:a7:0e:4d:1a:04:5e:81:af:91:ff:15:51:f1:62:58:68:
47:ac:6b:ed:82:09:35:b2:09:b8:72:3c:da:d8:3f:f3:77:87:
82:5a:01:8c:58:88:0f:e1:37:36:1e:f9:4e:57:ab:d8:5a:7d:
06:9a:ad:95:32:14:3a:05:3b:fa:6d:05:aa:42:8a:02:67:6e:
70:6c:f5:a7:ab:d3:38:eb:3a:c8:e8:3a:6a:fe:a3:cd:db:33:
74:02:af:d8:e1:3d:3d:05:be:6c:d7:b4:d8:30:64:8b:03:f3:
47:d5:c8:08:5c:e5:51:a8:62:af:4a:47:7e:c3:08:df:48:cb:
76:68:fe:5c:52:de:6e:9b:df:43:fa:15:7e:92:b7:91:b3:d0:
67:0e:a3:c3:49:26:1d:69:7b:04:61:ac:66:07:84:b8:6f:f2:
66:16:d3:94:62:34:13:3a:9f:69:e2:25:ca:9a:0a:ba:3a:ce:
8a:94:df:ae:0b:e3:55:55:f5:3e:29:dc:44:49:3c:98:71:9e:
d7:70:87:36:30:30:02:23:d4:cb:24:18:6c:fc:9f:c4:27:1e:
e9:2d:49:7f:bc:0a:40:92:9d:bb:c5:a6:c1:2c:6b:af:87:8d:
9b:b7:c9:ce:d0:d5:3b:bf:dc:6a:e5:33:ac:32:85:b4:8a:70:
e1:a5:7c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:51:10 2025 by rpki-client