Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wie2lFj4uF-8UWGd4MhfwMc18Ng.roa
File: wie2lFj4uF-8UWGd4MhfwMc18Ng.roa (raw, json)
Hash identifier: ppVurRVo4HzdrLyT62tEvnJZN/xreiR/YCbibfLIxT4=
Subject key identifier: C2:27:B6:94:58:F8:B8:5F:BC:51:61:9D:E0:C8:5F:C0:C7:35:F0:D8
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01955B7381C6E910E7C623C18EF9AE7E5ED2
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wie2lFj4uF-8UWGd4MhfwMc18Ng.roa
Signing time: Mon 03 Mar 2025 10:00:51 +0000
ROA not before: Mon 03 Mar 2025 10:00:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4766
IP address blocks: 31.56.172.0/24 maxlen: 24
31.56.173.0/24 maxlen: 24
31.56.242.0/24 maxlen: 24
31.56.243.0/24 maxlen: 24
31.56.244.0/24 maxlen: 24
31.56.245.0/24 maxlen: 24
217.60.0.0/18 maxlen: 24
217.60.0.0/21 maxlen: 24
217.60.1.0/24 maxlen: 24
217.60.3.0/24 maxlen: 24
217.60.5.0/24 maxlen: 24
217.60.7.0/24 maxlen: 24
217.60.8.0/21 maxlen: 24
217.60.9.0/24 maxlen: 24
217.60.11.0/24 maxlen: 24
217.60.13.0/24 maxlen: 24
217.60.15.0/24 maxlen: 24
217.60.24.0/22 maxlen: 24
217.60.24.0/24 maxlen: 24
217.60.25.0/24 maxlen: 24
217.60.26.0/24 maxlen: 24
217.60.27.0/24 maxlen: 24
217.60.28.0/24 maxlen: 24
217.60.29.0/24 maxlen: 24
217.60.30.0/24 maxlen: 24
217.60.31.0/24 maxlen: 24
217.60.32.0/21 maxlen: 24
217.60.56.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Mar 2025 10:39:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5b:73:81:c6:e9:10:e7:c6:23:c1:8e:f9:ae:7e:5e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 3 10:00:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c227b69458f8b85fbc51619de0c85fc0c735f0d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:57:f5:e5:31:6c:d0:2d:aa:34:a6:6a:9c:40:
b4:62:b8:64:f3:4b:4c:78:74:bc:37:8a:c7:ce:43:
a7:4e:55:af:2f:08:b1:a9:00:20:4b:bc:93:9f:8a:
a4:9e:d9:7e:07:34:12:88:a9:24:e9:4c:9c:70:ca:
87:9b:52:28:83:d1:ea:c8:13:f6:77:42:0a:46:08:
17:fe:3d:fe:a3:37:07:45:4e:57:21:9a:8a:a3:65:
d4:e7:ed:bc:24:90:36:17:44:f5:b4:fc:8d:d8:d3:
32:0b:3e:b3:ae:85:37:97:34:b2:f0:c8:b4:20:f2:
6d:c4:ad:fb:57:c1:5e:c6:1f:57:ac:e0:66:14:6d:
f3:8f:6e:1f:e0:24:92:de:5f:f1:3d:2a:9b:d5:45:
d8:6f:1f:b1:b1:01:13:ce:a0:be:70:9c:da:15:8b:
72:3a:23:1d:6a:f2:e6:8b:dc:72:3d:4b:20:32:26:
88:b7:80:e1:ff:6f:5c:ff:45:c8:02:c7:26:48:2b:
fb:b5:20:6a:c4:ea:7c:b4:66:9e:53:06:56:1a:71:
c6:80:69:d0:0d:63:ea:f7:c5:a2:13:b3:c2:96:b7:
7d:cb:c9:23:23:31:e5:48:db:2c:a7:c6:e9:d5:4b:
a4:c9:7c:3a:86:e4:f4:02:1d:fb:d0:44:9c:3a:ed:
eb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:27:B6:94:58:F8:B8:5F:BC:51:61:9D:E0:C8:5F:C0:C7:35:F0:D8
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wie2lFj4uF-8UWGd4MhfwMc18Ng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.172.0/23
31.56.242.0-31.56.245.255
217.60.0.0/18
Signature Algorithm: sha256WithRSAEncryption
b9:66:c6:5b:d0:dc:84:fc:54:8e:8e:1b:46:13:8f:5d:b5:0c:
3d:80:83:a9:d3:c6:06:ed:d9:66:5f:1a:92:5c:e4:f2:38:38:
fd:52:6e:1e:a7:9c:57:bb:0a:e6:a0:cc:c8:a1:92:f4:5f:73:
7f:68:e5:48:25:1a:a1:84:06:95:03:93:f7:2b:f8:3e:d4:9e:
56:c7:96:61:f3:da:58:d7:e0:5b:4f:84:18:f0:c6:56:b5:dd:
21:d2:2f:e8:dc:65:2c:41:e3:18:24:2b:f1:d3:ea:eb:13:c0:
f9:dd:ca:50:7b:c5:28:17:88:0f:23:11:f0:a7:3b:d3:8f:61:
c0:be:c6:f3:55:84:9e:df:a0:99:93:32:df:7d:6a:38:68:93:
07:d9:fc:5e:f3:57:cd:32:16:e3:9d:61:f5:88:ce:3e:1d:1b:
e6:8f:0f:8b:53:5b:ab:4b:a4:67:d2:85:5e:e9:b8:78:44:99:
05:c6:f6:4c:ee:f7:3e:44:7b:a0:32:26:10:78:ec:b4:ae:5e:
4e:76:71:33:e5:70:fd:1f:9b:8c:15:ea:4c:64:d1:09:dd:0c:
f0:75:45:e2:95:d6:a5:bd:3e:fb:80:8b:78:92:96:6f:c8:64:
86:a2:05:b7:e6:9b:7e:7c:8e:6f:dc:05:7b:ff:87:70:9e:98:
d2:bb:cb:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:49:27 2025 by rpki-client