Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/t-9dT76NjiZr3FEvtkm1O3ndFos.roa
File: t-9dT76NjiZr3FEvtkm1O3ndFos.roa (raw, json)
Hash identifier: 2ueiR3cNVSqBkc+A0VnVtIAucbXDYT2aNvLJtkl9F7o=
Subject key identifier: B7:EF:5D:4F:BE:8D:8E:26:6B:DC:51:2F:B6:49:B5:3B:79:DD:16:8B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194894AC784D304518EC5F55DFCAD297416
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/t-9dT76NjiZr3FEvtkm1O3ndFos.roa
Signing time: Tue 21 Jan 2025 14:36:06 +0000
ROA not before: Tue 21 Jan 2025 14:36:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214024
IP address blocks: 31.56.69.0/24 maxlen: 24
31.56.72.0/24 maxlen: 24
31.56.84.0/24 maxlen: 24
31.56.90.0/24 maxlen: 24
31.56.91.0/24 maxlen: 24
31.56.200.0/24 maxlen: 24
31.56.202.0/24 maxlen: 24
31.57.132.0/24 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.215.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.221.0/24 maxlen: 24
31.57.252.0/24 maxlen: 24
31.57.253.0/24 maxlen: 24
31.57.255.0/24 maxlen: 24
31.58.88.0/24 maxlen: 24
31.58.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 09:32:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:89:4a:c7:84:d3:04:51:8e:c5:f5:5d:fc:ad:29:74:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 21 14:36:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7ef5d4fbe8d8e266bdc512fb649b53b79dd168b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a5:21:58:41:41:f1:5b:90:90:8c:cb:91:84:
68:ea:34:f5:bc:f6:9e:f8:f2:58:ec:13:8d:ed:db:
23:fc:6d:56:7e:ee:84:ba:6d:5a:91:19:9b:bf:38:
6e:00:52:02:e3:87:d7:e9:ea:4a:bd:b4:1e:4d:f8:
03:f9:1c:55:da:0d:36:78:3d:2b:9b:e2:53:30:5b:
a1:55:c5:6f:ea:f1:2a:fe:81:dd:d3:e4:09:c7:99:
34:10:1e:c7:3c:a5:3d:09:89:e2:24:37:92:61:fa:
73:63:68:5c:10:35:78:42:23:6f:ab:f7:6e:58:48:
e7:ba:03:c9:a0:07:f4:7e:41:ba:c5:b8:b8:21:1a:
8c:10:41:85:cd:85:00:68:4a:05:9d:0f:cd:fe:dc:
90:d0:ce:2f:a0:4d:96:fa:99:dd:a2:66:32:8d:20:
ba:b4:0b:b4:10:d1:b2:a0:64:dd:ee:6f:9e:16:92:
dd:6e:3f:38:56:b8:6c:46:b8:d5:44:11:ae:7f:be:
d2:1a:75:09:c1:ed:54:f5:d9:55:61:5e:ae:08:cd:
96:cd:b4:6b:df:2b:a1:67:7d:25:25:6d:0c:e8:f9:
68:fa:48:c9:8d:78:c9:93:92:e8:bd:16:45:ec:f5:
b7:f6:fa:23:90:79:ab:17:91:a9:50:89:da:76:bf:
a1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:EF:5D:4F:BE:8D:8E:26:6B:DC:51:2F:B6:49:B5:3B:79:DD:16:8B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/t-9dT76NjiZr3FEvtkm1O3ndFos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.69.0/24
31.56.72.0/24
31.56.84.0/24
31.56.90.0/23
31.56.200.0/24
31.56.202.0/24
31.57.132.0/24
31.57.181.0/24
31.57.215.0/24
31.57.219.0/24
31.57.221.0/24
31.57.252.0/23
31.57.255.0/24
31.58.88.0/23
Signature Algorithm: sha256WithRSAEncryption
70:97:a4:e5:a3:64:8a:89:9f:2c:09:ed:41:f3:65:cf:7a:11:
07:7c:66:7a:c6:5a:c6:95:3b:26:d8:6e:65:7d:96:7a:6b:8d:
62:0f:ba:4f:8d:16:45:56:98:03:53:ba:08:b5:55:b4:d4:64:
95:5d:c0:c9:d5:60:a4:2e:77:22:eb:cb:3f:13:41:4f:78:56:
68:5a:37:80:5e:f6:7d:7e:6d:91:29:13:7a:93:2e:5e:50:8e:
47:07:57:7e:4e:10:46:f6:e8:8f:dd:da:74:3f:5d:1c:01:99:
9e:45:32:92:5e:ab:39:72:36:b9:b3:cd:db:cf:b9:ac:e0:b4:
32:11:05:48:d5:b7:df:02:49:31:49:4f:c9:4e:e1:c3:05:15:
45:1d:94:2c:41:fd:cb:ee:f0:6b:d0:bd:bf:8e:6d:26:e7:71:
a4:d8:d1:dd:7f:f5:8d:63:e4:a5:94:f0:eb:d0:70:04:04:ed:
ad:16:7d:ab:3f:b4:07:6f:cb:1a:50:d5:cc:39:6b:b9:c5:0f:
75:97:75:0c:18:b4:42:87:ae:1b:f6:ca:11:85:f3:e4:7d:cc:
08:ce:a7:0c:1c:af:4a:c6:80:1f:3a:44:ee:32:42:cb:91:9a:
2a:8e:c4:9e:1b:68:ca:fb:a4:52:80:e6:ca:41:09:56:46:7e:
13:e6:13:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:13 2025 by rpki-client