Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vSGOED9fTqN0kvsFkZybD9byfrs.roa
File: vSGOED9fTqN0kvsFkZybD9byfrs.roa (raw, json)
Hash identifier: ij/SL/ZG5dqdul81na5CVeC3Wd0O7Wokzab5QPXwF/k=
Subject key identifier: BD:21:8E:10:3F:5F:4E:A3:74:92:FB:05:91:9C:9B:0F:D6:F2:7E:BB
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019398BCCD30CA9AE5EB41B01B70C150CF6A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vSGOED9fTqN0kvsFkZybD9byfrs.roa
Signing time: Thu 05 Dec 2024 21:32:10 +0000
ROA not before: Thu 05 Dec 2024 21:32:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.57.65.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.146.0/23 maxlen: 24
31.57.166.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.204.0/24 maxlen: 24
31.57.228.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.58.129.0/24 maxlen: 24
31.58.130.0/24 maxlen: 24
31.58.131.0/24 maxlen: 24
31.58.150.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.59.68.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Dec 2024 21:34:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:98:bc:cd:30:ca:9a:e5:eb:41:b0:1b:70:c1:50:cf:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 5 21:32:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd218e103f5f4ea37492fb05919c9b0fd6f27ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e0:3a:c0:f9:dd:47:fa:cb:2e:ed:ed:1c:34:
4e:3b:77:6c:84:be:ba:a9:b3:ce:46:66:47:11:28:
4d:7e:81:6e:18:fe:37:44:4a:91:84:8c:79:70:63:
c1:67:6e:e7:66:7f:c0:4f:67:31:08:9b:6f:04:b8:
69:72:b9:e9:f0:fa:9b:a0:bf:f3:4a:a8:ae:29:62:
9e:19:c5:b8:b6:a0:33:af:9e:02:db:31:b2:c9:6f:
e0:3d:f8:5e:db:60:ad:16:31:3f:4e:a1:0d:51:23:
ec:df:10:64:72:be:7c:66:44:ad:54:b8:98:80:97:
bb:28:d8:68:3c:ce:24:41:d9:91:8e:28:19:d0:26:
79:e7:8b:4b:2d:db:08:08:ac:c6:4f:8e:9b:96:00:
db:2b:d0:6c:80:60:51:a1:04:da:27:c6:75:ab:10:
1a:d8:4a:e5:cb:41:ae:2a:96:d1:80:78:dd:de:e1:
fb:90:f8:0d:b8:c5:b2:79:0c:7c:77:ae:bf:fb:24:
76:34:7f:fb:54:5b:8f:07:8a:90:37:2e:b0:c2:7f:
11:44:28:de:36:94:ec:13:38:61:39:61:20:14:93:
9d:3b:53:cb:61:ca:3d:6a:01:b4:d9:61:43:0c:18:
ff:db:5e:49:fd:60:50:45:5f:70:63:0b:6a:54:f0:
e8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:21:8E:10:3F:5F:4E:A3:74:92:FB:05:91:9C:9B:0F:D6:F2:7E:BB
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vSGOED9fTqN0kvsFkZybD9byfrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.89.0/24
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.57.65.0/24
31.57.132.0/23
31.57.146.0/23
31.57.166.0/24
31.57.176.0/21
31.57.188.0/24
31.57.192.0/22
31.57.204.0/24
31.57.228.0/24
31.57.232.0/22
31.58.129.0-31.58.131.255
31.58.150.0/24
31.58.152.0/22
31.59.68.0/24
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.184.0/22
Signature Algorithm: sha256WithRSAEncryption
75:bf:4f:65:b3:d0:84:aa:b6:1c:cc:76:43:71:e4:75:16:91:
73:ca:85:32:0b:84:89:28:cd:a0:77:7e:ba:34:10:2f:22:f1:
2f:2e:ae:65:7d:57:4e:fb:18:28:fd:28:21:a9:df:82:53:7e:
dd:a3:95:df:54:9c:77:eb:c9:17:7b:8c:b4:1c:ac:67:6a:76:
83:01:8e:00:cc:6b:a1:33:6e:c7:0f:3b:e8:64:33:87:be:46:
64:7e:c0:a1:cc:44:c7:e6:fd:be:35:aa:74:73:c3:d3:b4:6f:
cf:7b:bc:6c:f8:9b:29:bb:40:17:ca:d3:f8:b4:33:19:dd:cc:
56:18:06:82:ed:b0:9a:05:a9:9c:2a:d2:cb:95:2f:78:61:09:
d8:56:55:fc:ef:8b:f9:ad:c4:b8:7f:ec:7b:ef:78:f9:76:d8:
d8:c3:6e:de:8a:18:70:01:83:ac:80:85:7a:7a:2f:97:9a:65:
fb:4a:64:a7:8a:27:9a:87:cb:ff:b1:b9:9c:91:73:64:3a:a8:
7e:cf:79:e9:47:35:00:0b:7a:74:a7:7e:5a:66:db:69:e6:eb:
d0:47:3b:67:37:2c:ea:a5:92:f3:61:28:86:4e:e5:80:91:21:
33:55:a6:51:58:42:8d:f5:bd:19:86:b2:ad:78:30:48:4d:58:
18:22:fa:9c
-----BEGIN CERTIFICATE-----
MIIFqDCCBJCgAwIBAgISAZOYvM0wyprl60GwG3DBUM9qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMjA1MjEzMjEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDIxOGUxMDNmNWY0ZWEzNzQ5MmZiMDU5MTljOWIwZmQ2ZjI3ZWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+A6wPndR/rLLu3tHDROO3dshL66
qbPORmZHEShNfoFuGP43REqRhIx5cGPBZ27nZn/AT2cxCJtvBLhpcrnp8PqboL/z
SqiuKWKeGcW4tqAzr54C2zGyyW/gPfhe22CtFjE/TqENUSPs3xBkcr58ZkStVLiY
gJe7KNhoPM4kQdmRjigZ0CZ554tLLdsICKzGT46blgDbK9BsgGBRoQTaJ8Z1qxAa
2Erly0GuKpbRgHjd3uH7kPgNuMWyeQx8d66/+yR2NH/7VFuPB4qQNy6wwn8RRCje
NpTsEzhhOWEgFJOdO1PLYco9agG02WFDDBj/215J/WBQRV9wYwtqVPDoVwIDAQAB
o4ICtDCCArAwHQYDVR0OBBYEFL0hjhA/X06jdJL7BZGcmw/W8n67MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvdlNHT0VEOWZUcU4wa3ZzRmtaeWJEOWJ5ZnJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHJBggrBgEFBQcBBwEB/wSBuTCBtjCBswQCAAEwgawDBAEf
OAQDBAAfOBgDBAEfOCoDBAAfODkDBAAfOFkDBAMfOGgDBAEfOHIwDAMEAR84dgME
Ah84eAMEAB85QQMEAR85hAMEAR85kgMEAB85pgMEAx85sAMEAB85vAMEAh85wAME
AB85zAMEAB855AMEAh856DAMAwQAHzqBAwQCHzqAAwQAHzqWAwQCHzqYAwQAHztE
AwQCHztgAwQCHztwAwQCHzt4AwQCHzu4MA0GCSqGSIb3DQEBCwUAA4IBAQB1v09l
s9CEqrYczHZDceR1FpFzyoUyC4SJKM2gd366NBAvIvEvLq5lfVdO+xgo/Sghqd+C
U37do5XfVJx368kXe4y0HKxnanaDAY4AzGuhM27HDzvoZDOHvkZkfsChzETH5v2+
Nap0c8PTtG/Pe7xs+Jspu0AXytP4tDMZ3cxWGAaC7bCaBamcKtLLlS94YQnYVlX8
74v5rcS4f+x773j5dtjYw27eihhwAYOsgIV6ei+XmmX7SmSniieah8v/sbmckXNk
Oqh+z3npRzUAC3p0p35aZttp5uvQRztnNyzqpZLzYSiGTuWAkSEzVaZRWEKN9b0Z
hrKteDBITVgYIvqc
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:06 2025 by rpki-client