Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ttGJu6HoFNQ_AsIhmcpb8q843tU.roa
File: ttGJu6HoFNQ_AsIhmcpb8q843tU.roa (raw, json)
Hash identifier: 6B3sfVK2mL8HfHaGjPADNucZWL/WAAS+Q4MvWfX31Kg=
Subject key identifier: B6:D1:89:BB:A1:E8:14:D4:3F:02:C2:21:99:CA:5B:F2:AF:38:DE:D5
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195CBEF935C1D32830E73D6048167A26D7C
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ttGJu6HoFNQ_AsIhmcpb8q843tU.roa
Signing time: Tue 25 Mar 2025 06:13:50 +0000
ROA not before: Tue 25 Mar 2025 06:13:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 31.56.8.0/21 maxlen: 24
31.56.126.0/24 maxlen: 24
31.56.142.0/23 maxlen: 24
31.56.148.0/22 maxlen: 24
31.57.184.0/22 maxlen: 24
31.59.79.0/24 maxlen: 24
31.59.228.0/24 maxlen: 24
31.59.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Mar 2025 19:44:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cb:ef:93:5c:1d:32:83:0e:73:d6:04:81:67:a2:6d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 25 06:13:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6d189bba1e814d43f02c22199ca5bf2af38ded5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:08:bd:a9:72:d0:3c:93:a6:2c:8b:bd:27:25:
bc:9a:c3:e9:43:6f:f7:91:b8:b4:e3:39:a3:bc:c0:
f0:4e:61:90:be:0e:f3:fe:11:fa:39:ea:f6:67:4d:
8b:e9:ab:e3:db:72:64:fe:68:62:7a:c5:61:5a:dc:
ef:35:18:39:c0:e5:f6:0a:c5:28:e4:32:e1:29:4f:
21:e1:9b:3e:19:a8:f9:6d:0c:ba:e8:6a:c1:f7:ea:
05:75:b0:05:a1:46:e3:5e:52:04:91:c8:ff:34:01:
6d:a6:bc:1b:87:71:dd:70:ea:c0:ce:47:14:17:c9:
1d:f6:29:23:db:b8:47:11:39:53:33:88:74:9b:53:
23:54:39:dc:a8:b9:0e:46:ad:74:48:58:81:4c:34:
49:60:53:3b:3b:e5:f8:98:e1:a8:6a:45:a4:f3:e1:
31:0c:ca:f7:c7:d5:ee:d8:2e:f4:3b:b9:bc:47:76:
5f:55:ee:e2:01:87:4d:45:cc:2b:a6:4e:0d:70:87:
f0:87:9f:5b:8f:6f:a5:27:ce:53:45:65:81:b6:bc:
34:cb:ff:82:d4:ca:39:a4:f6:c0:2d:3b:76:38:13:
74:53:7c:9a:21:5e:3b:17:d6:fa:9c:40:5d:33:bb:
59:4b:ca:8e:d0:f7:05:46:e8:70:3b:2f:ce:95:1a:
49:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D1:89:BB:A1:E8:14:D4:3F:02:C2:21:99:CA:5B:F2:AF:38:DE:D5
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ttGJu6HoFNQ_AsIhmcpb8q843tU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.8.0/21
31.56.126.0/24
31.56.142.0/23
31.56.148.0/22
31.57.184.0/22
31.59.79.0/24
31.59.228.0/24
31.59.230.0/24
Signature Algorithm: sha256WithRSAEncryption
19:90:01:2a:0f:05:f6:ba:0b:15:86:f0:8a:23:76:34:47:c2:
f7:70:37:32:f5:3a:ff:ae:4f:04:5c:12:16:12:77:00:94:13:
62:d7:26:54:89:88:76:68:cb:43:8c:6f:30:98:30:34:82:28:
a2:9a:2a:5b:e0:3b:c3:45:f1:db:f3:52:89:21:6c:e3:d9:74:
d2:16:ce:b4:53:1f:08:c4:d1:11:c8:ed:58:8c:1d:e6:ae:9c:
b1:1a:39:d5:61:09:8a:02:3e:03:ea:48:ff:03:98:b7:95:cb:
80:94:2b:f2:d5:7b:54:3d:ea:08:60:18:cb:db:6b:1d:a0:55:
1c:6d:d2:3a:bd:42:a7:18:06:b0:a5:e0:7d:c5:c0:b5:6a:7e:
e1:7d:c4:20:77:4a:5e:cb:98:1e:5c:16:1f:c8:98:79:54:5c:
6b:ce:20:f6:38:76:f7:30:bb:4f:6a:0e:d9:1c:07:1c:55:ac:
7f:b4:60:78:8f:ff:0b:bd:d4:b1:67:73:05:2c:f2:77:6f:ab:
ae:08:28:c7:0a:25:35:a3:64:70:e9:e0:3e:b4:88:07:66:c5:
69:c9:1c:7b:6b:2b:1e:0f:da:1f:31:0b:b9:29:c1:22:ac:00:
ac:42:28:46:b7:11:f6:09:a1:0b:da:c2:ea:34:5a:68:3b:56:
47:54:ed:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:58:19 2025 by rpki-client