Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/y1IGsssqJsiZEMgoCGwhrrOOJbg.roa
File: y1IGsssqJsiZEMgoCGwhrrOOJbg.roa (raw, json)
Hash identifier: k1zrcwjezVSQOOlyeTKXbNG9RRgNkwxyxLs2MiUwYrU=
Subject key identifier: CB:52:06:B2:CB:2A:26:C8:99:10:C8:28:08:6C:21:AE:B3:8E:25:B8
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194A653071A0D4D23FC2DDA28C648F5DFFF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/y1IGsssqJsiZEMgoCGwhrrOOJbg.roa
Signing time: Mon 27 Jan 2025 05:54:06 +0000
ROA not before: Mon 27 Jan 2025 05:54:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48678
IP address blocks: 31.56.16.0/22 maxlen: 24
31.56.60.0/24 maxlen: 24
31.57.16.0/21 maxlen: 24
31.57.135.0/24 maxlen: 24
31.58.176.0/22 maxlen: 24
31.58.200.0/22 maxlen: 24
31.58.216.0/22 maxlen: 24
31.58.235.0/24 maxlen: 24
31.58.240.0/22 maxlen: 24
31.58.244.0/24 maxlen: 24
31.58.251.0/24 maxlen: 24
31.58.252.0/22 maxlen: 24
31.59.64.0/22 maxlen: 24
31.59.80.0/22 maxlen: 24
31.59.124.0/22 maxlen: 24
31.59.176.0/21 maxlen: 24
31.59.188.0/22 maxlen: 24
31.59.192.0/22 maxlen: 24
31.59.216.0/22 maxlen: 24
217.60.64.0/18 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Jan 2025 13:18:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a6:53:07:1a:0d:4d:23:fc:2d:da:28:c6:48:f5:df:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 27 05:54:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb5206b2cb2a26c89910c828086c21aeb38e25b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bb:0c:a4:50:52:7c:1a:d6:fb:91:3c:db:5a:
9b:f4:f8:60:cd:22:33:cf:e6:13:cf:69:e8:6f:0c:
bc:2b:1a:8d:73:5c:46:09:ce:c3:0d:ca:df:eb:81:
ff:8b:97:bc:bb:d6:0c:57:43:cf:e9:b5:6b:2a:22:
fa:65:fb:0a:67:bf:da:5a:7d:be:12:5f:de:07:46:
fb:38:23:f8:bc:eb:8b:c5:ca:ef:d4:bf:a1:a4:8b:
d7:43:59:72:5c:7b:e2:1b:03:ec:7f:dd:15:16:76:
39:a2:23:a5:6e:f8:03:a8:55:de:ef:d1:b4:c9:93:
0d:2c:22:3a:89:07:5c:64:0f:ac:91:3f:75:37:a7:
97:fb:68:00:12:87:e6:1d:ae:90:7c:6d:33:bd:10:
f9:50:c0:74:7f:42:3c:27:9f:24:7e:3b:29:ab:c6:
76:bc:2b:5c:37:2b:df:99:4a:49:98:ed:cb:47:f8:
2f:6a:c3:29:2c:24:b0:ab:4e:82:c9:06:dd:83:46:
ee:f6:f1:0b:cd:26:13:5a:9a:4e:63:3c:7b:24:6a:
bb:74:fd:0e:5b:95:93:73:0e:1c:c6:69:10:ac:75:
96:6d:75:0a:c4:44:3f:77:49:34:70:33:c2:fe:dd:
ea:01:13:39:fa:af:c0:86:bc:fb:41:d9:60:ef:26:
85:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:52:06:B2:CB:2A:26:C8:99:10:C8:28:08:6C:21:AE:B3:8E:25:B8
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/y1IGsssqJsiZEMgoCGwhrrOOJbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.16.0/22
31.56.60.0/24
31.57.16.0/21
31.57.135.0/24
31.58.176.0/22
31.58.200.0/22
31.58.216.0/22
31.58.235.0/24
31.58.240.0-31.58.244.255
31.58.251.0-31.58.255.255
31.59.64.0/22
31.59.80.0/22
31.59.124.0/22
31.59.176.0/21
31.59.188.0-31.59.195.255
31.59.216.0/22
217.60.64.0/18
Signature Algorithm: sha256WithRSAEncryption
94:61:e3:de:ed:bc:cb:e5:39:c3:69:0d:05:ba:04:15:c9:00:
be:65:da:8f:d1:1d:0e:22:9f:3e:61:ab:47:51:8c:f6:f3:7e:
b3:3e:66:87:07:69:2f:3c:e9:74:36:1a:56:2d:18:2e:25:f8:
d9:5c:d4:51:2f:9c:2b:c7:88:44:34:06:12:7e:30:ef:89:4c:
51:82:1d:c2:af:bf:d7:fa:1a:46:51:ee:d8:fb:fc:1a:c0:3f:
f9:c9:db:80:b3:3d:6c:a8:b0:81:6b:14:d8:a5:8b:8c:38:c0:
3d:45:fe:5a:88:8f:9c:d4:e3:23:b4:be:84:86:48:93:4b:88:
8a:c9:41:b3:17:d2:3c:e4:17:fc:1c:fa:b5:7a:0e:cb:05:ed:
db:2f:0b:e7:02:2d:dc:f6:92:05:df:a7:cd:94:c2:16:42:2a:
e1:fa:0c:97:30:35:4a:a6:93:e1:91:9f:bd:95:b1:f7:49:26:
14:18:dd:fb:14:44:c1:9c:14:ed:9a:19:e1:ff:3e:e5:3e:07:
79:8f:6c:92:81:28:32:57:41:7d:0d:d0:7b:6a:5d:56:a2:18:
16:94:cc:6d:63:a7:1b:0a:a7:90:8f:37:7b:67:de:74:5a:7a:
7a:29:8d:31:85:6a:27:1c:cd:64:6a:8e:f1:5b:ab:8d:34:3c:
38:78:bb:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:51:15 2025 by rpki-client