Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tMuv0Yly_9Dfuvesby3Jp8RKTWM.roa
File: tMuv0Yly_9Dfuvesby3Jp8RKTWM.roa (raw, json)
Hash identifier: SR5aONqyumL2LByyX572d97a3Se4uPqQMKVRcpAm4hI=
Subject key identifier: B4:CB:AF:D1:89:72:FF:D0:DF:BA:F7:AC:6F:2D:C9:A7:C4:4A:4D:63
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01944172F21B3F6079EDA44C877BE23B94B8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tMuv0Yly_9Dfuvesby3Jp8RKTWM.roa
Signing time: Tue 07 Jan 2025 15:47:19 +0000
ROA not before: Tue 07 Jan 2025 15:47:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215304
IP address blocks: 31.56.69.0/24 maxlen: 24
31.56.72.0/24 maxlen: 24
31.56.84.0/24 maxlen: 24
31.56.88.0/24 maxlen: 24
31.56.120.0/24 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.122.0/24 maxlen: 24
31.56.123.0/24 maxlen: 24
31.56.200.0/24 maxlen: 24
31.56.202.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.132.0/24 maxlen: 24
31.57.133.0/24 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.215.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.221.0/24 maxlen: 24
31.57.252.0/24 maxlen: 24
31.57.253.0/24 maxlen: 24
31.57.255.0/24 maxlen: 24
31.58.88.0/24 maxlen: 24
31.58.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 11 Jan 2025 06:42:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:41:72:f2:1b:3f:60:79:ed:a4:4c:87:7b:e2:3b:94:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 7 15:47:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4cbafd18972ffd0dfbaf7ac6f2dc9a7c44a4d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6e:83:71:5f:22:63:bb:50:51:54:27:17:b6:
c4:5c:ab:91:67:ac:3f:1b:2d:4f:8e:59:be:cb:56:
2d:7f:41:41:68:64:de:87:48:a6:12:c2:63:0e:08:
b6:0c:49:4a:e3:56:5d:ae:ea:54:64:36:ba:0a:be:
69:65:d6:94:f9:dd:d5:4e:9f:02:12:b0:4d:04:82:
3f:85:f6:d6:d0:52:9a:46:6b:7b:b0:41:2c:19:f3:
3f:e4:8e:b5:85:8a:2b:01:dd:d7:74:0c:f4:23:6b:
c3:b5:52:7c:c4:e7:fb:ae:2a:45:fe:3a:61:44:c9:
94:47:d8:0d:3e:fe:4e:83:87:5e:75:3a:72:b8:66:
4a:17:eb:28:99:84:c4:5c:29:43:c7:32:52:15:70:
8f:64:30:25:0d:3f:a0:bc:c7:32:e2:12:54:18:e7:
8d:9f:4c:b2:d7:67:96:ff:60:65:9e:60:9e:ff:e8:
1b:2b:29:be:57:d7:0d:e1:e8:81:6a:3d:8c:87:41:
84:e7:3f:eb:03:f9:ae:6e:e9:31:81:6b:af:67:f0:
a6:34:00:c4:d5:c9:53:93:5b:6f:73:82:e2:61:53:
f5:06:7b:7a:8b:1f:e5:0f:8c:42:5c:5e:41:5c:9b:
78:60:01:48:f2:95:5f:54:d4:3e:90:f8:73:b2:7d:
21:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:CB:AF:D1:89:72:FF:D0:DF:BA:F7:AC:6F:2D:C9:A7:C4:4A:4D:63
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tMuv0Yly_9Dfuvesby3Jp8RKTWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.69.0/24
31.56.72.0/24
31.56.84.0/24
31.56.88.0/24
31.56.120.0/22
31.56.200.0/24
31.56.202.0/24
31.57.104.0/21
31.57.132.0/23
31.57.181.0/24
31.57.215.0/24
31.57.219.0/24
31.57.221.0/24
31.57.252.0/23
31.57.255.0/24
31.58.88.0/23
Signature Algorithm: sha256WithRSAEncryption
97:07:68:55:8f:99:d1:ca:37:cc:d9:5c:c7:5e:34:b4:a0:ca:
f4:57:93:62:0f:e7:86:22:ef:c1:5c:f1:3c:86:c5:68:76:64:
1f:48:f9:14:91:d3:65:cb:80:3e:f0:49:55:6d:65:7f:17:b3:
ca:13:5c:d0:04:c2:1c:5f:34:50:a5:c7:8d:81:7b:f5:a8:a0:
a6:64:e2:20:95:44:2d:a3:91:36:2f:bc:4d:5c:7e:c1:7a:af:
6c:54:05:a1:62:6f:39:f9:e4:b7:c7:5c:22:66:af:06:ed:9f:
05:a5:0d:32:6d:aa:50:52:bd:8f:27:53:ac:f6:e0:87:fc:16:
00:d1:4b:05:a6:d4:51:f9:23:51:89:f2:ce:7c:34:02:10:d2:
23:dc:71:64:68:3c:27:a8:b3:31:11:83:80:b0:41:c1:e0:db:
e3:98:94:22:d9:ae:46:4b:eb:64:6c:10:78:02:cd:66:3e:2f:
01:77:d0:42:de:78:0a:4c:76:cf:50:91:67:03:06:95:40:62:
01:b5:01:e7:44:d0:c6:8c:27:27:ba:8c:11:ef:f0:fb:92:4d:
06:8f:a0:65:a2:31:87:17:35:c6:91:a0:98:06:e2:77:42:d9:
da:75:6c:af:f0:5c:00:38:21:e4:8e:d4:97:ab:0d:93:5d:9c:
d9:a8:2a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:48:38 2025 by rpki-client