Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uoVYFo7mwwBGc3zX--5XhhE1juI.roa
File: uoVYFo7mwwBGc3zX--5XhhE1juI.roa (raw, json)
Hash identifier: fzwVNqowl+sgQnRC/jNfU3u64pZvti7HC0Gvl6r8guw=
Subject key identifier: BA:85:58:16:8E:E6:C3:00:46:73:7C:D7:FB:EE:57:86:11:35:8E:E2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019470BE9A40295E44A52A9C1C4BFF8025E7
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uoVYFo7mwwBGc3zX--5XhhE1juI.roa
Signing time: Thu 16 Jan 2025 20:12:07 +0000
ROA not before: Thu 16 Jan 2025 20:12:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43641
IP address blocks: 31.56.116.0/24 maxlen: 24
31.56.125.0/24 maxlen: 24
31.56.127.0/24 maxlen: 24
31.57.192.0/24 maxlen: 24
31.57.193.0/24 maxlen: 24
31.57.195.0/24 maxlen: 24
31.57.232.0/24 maxlen: 24
31.57.233.0/24 maxlen: 24
31.57.234.0/24 maxlen: 24
31.57.235.0/24 maxlen: 24
31.58.145.0/24 maxlen: 24
31.58.148.0/24 maxlen: 24
31.58.149.0/24 maxlen: 24
31.58.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Jan 2025 07:49:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:70:be:9a:40:29:5e:44:a5:2a:9c:1c:4b:ff:80:25:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 16 20:12:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba8558168ee6c30046737cd7fbee578611358ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f5:50:78:09:d3:6d:7b:20:c5:85:ef:64:31:
dd:d2:2f:83:b9:dc:46:62:eb:e4:81:f1:c1:f6:d2:
8e:d0:fa:72:d7:ba:1d:de:a8:ca:11:75:56:ba:ba:
14:f3:5d:a0:ef:36:69:1c:cb:2b:d6:7b:be:09:15:
d4:1a:1a:1d:06:a5:bd:a9:f4:cb:ce:51:8e:1f:eb:
37:f9:be:fe:10:26:53:5d:b6:b1:c3:b2:93:29:49:
34:a7:f3:22:6d:99:dc:a0:c6:43:0c:27:15:32:67:
aa:cf:2f:b1:24:5c:44:48:56:72:81:b9:11:2a:93:
37:af:3f:09:ee:55:1c:95:32:d3:77:af:67:8d:9e:
64:e5:93:d3:bd:e2:50:05:b0:0f:ee:9b:c5:9a:cd:
f4:b4:ed:93:e1:90:eb:07:e8:b3:d9:39:21:7a:11:
da:39:77:5c:b0:93:9b:b3:84:91:9d:be:63:5a:00:
dd:ef:ed:ec:56:d7:d1:3e:fe:8c:72:b2:fd:ea:2e:
fe:3a:f3:41:f3:a7:12:be:94:e0:ce:0c:83:18:e9:
a7:f6:a6:71:98:35:7b:7d:f2:cf:08:70:8a:de:62:
c1:31:3d:64:39:6e:71:20:ec:9f:ed:78:8a:b4:08:
5d:d7:f8:5d:10:75:9c:57:43:94:32:e5:5a:52:b9:
66:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:85:58:16:8E:E6:C3:00:46:73:7C:D7:FB:EE:57:86:11:35:8E:E2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uoVYFo7mwwBGc3zX--5XhhE1juI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.116.0/24
31.56.125.0/24
31.56.127.0/24
31.57.192.0/23
31.57.195.0/24
31.57.232.0/22
31.58.145.0/24
31.58.148.0/23
31.58.151.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:ef:06:19:b3:cf:58:d8:00:38:5d:70:e5:83:3a:7a:da:0b:
20:ec:06:f7:5d:01:d7:93:09:43:b0:ac:0f:bb:c3:59:be:9f:
24:0c:b8:d0:16:d7:50:f6:dd:ab:25:29:2c:d2:75:4e:55:65:
1e:3e:69:aa:a5:75:c4:18:4a:ea:0b:a2:04:c5:f8:47:80:f4:
35:10:01:1e:81:c1:6b:83:c0:48:8a:47:b4:59:99:0a:59:46:
ec:eb:e7:28:1e:2b:aa:75:fe:47:04:70:30:4f:33:b5:3f:6e:
1d:bf:f2:ad:7c:e6:e4:d3:51:c8:17:75:2a:56:be:ee:48:29:
57:5a:7c:c8:9e:de:a2:53:51:a9:41:82:88:3d:5a:5d:18:6d:
cd:9b:35:75:ad:89:49:3b:5d:9a:3c:44:07:a4:28:d9:6d:37:
b8:5d:64:bf:70:62:29:47:09:06:49:25:32:8a:d3:9a:85:33:
74:bb:82:a0:74:d2:6f:33:05:76:a7:2f:3b:80:57:6f:6a:f2:
9f:41:47:cb:41:30:9d:19:8d:04:89:24:a0:ff:cc:b5:e2:3a:
f3:13:cf:5d:95:17:73:6a:fa:b4:8c:16:3c:9b:c5:60:10:51:
dd:05:c3:a1:a1:00:d5:27:7c:4f:23:24:96:20:4b:dd:a6:96:
e8:cc:f8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:11 2025 by rpki-client