Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/z7tq1yMf1RPeGDkMi3Xemp9KqUA.roa
File: z7tq1yMf1RPeGDkMi3Xemp9KqUA.roa (raw, json)
Hash identifier: boQ2lzNrkuIfZa3y2/MMwkGFrYSceMb9a3Cgti8JdoY=
Subject key identifier: CF:BB:6A:D7:23:1F:D5:13:DE:18:39:0C:8B:75:DE:9A:9F:4A:A9:40
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01939C3BED4532FC019C0438B97EEEEFD636
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/z7tq1yMf1RPeGDkMi3Xemp9KqUA.roa
Signing time: Fri 06 Dec 2024 13:49:53 +0000
ROA not before: Fri 06 Dec 2024 13:49:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 31.56.8.0/21 maxlen: 24
31.56.142.0/23 maxlen: 24
31.56.148.0/22 maxlen: 24
31.57.184.0/22 maxlen: 24
31.58.208.0/24 maxlen: 24
31.58.209.0/24 maxlen: 24
31.59.68.0/24 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
217.60.245.0/24 maxlen: 24
217.60.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Dec 2024 08:51:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9c:3b:ed:45:32:fc:01:9c:04:38:b9:7e:ee:ef:d6:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 6 13:49:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cfbb6ad7231fd513de18390c8b75de9a9f4aa940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:92:c8:c3:be:63:16:05:33:df:7c:d7:9f:0c:
67:9d:e2:ca:60:56:a1:34:69:2d:21:8b:20:ff:52:
e5:3f:a5:fd:a7:f8:8f:e8:03:67:11:82:d1:fe:bc:
87:98:4c:45:7e:3a:c3:ea:21:4d:3f:57:9e:70:c7:
11:4b:98:aa:88:10:0e:17:01:f1:17:bd:2f:d0:e8:
5c:8b:35:96:62:f0:d7:af:f6:e8:f3:b5:05:f7:5b:
3b:f5:99:64:75:7b:87:57:04:63:a3:04:48:83:59:
7c:fd:40:c8:dd:ed:0c:29:14:73:b1:fe:c8:11:28:
82:f6:22:00:5d:bd:48:34:49:54:b3:f0:7d:db:cd:
6b:8f:5d:52:f2:0c:28:0e:27:b9:c9:c1:fa:e9:00:
3a:3a:fc:33:b6:78:35:a7:30:1f:37:55:b3:81:94:
02:6e:0e:d3:60:ac:2a:49:48:72:ff:4e:39:d8:67:
e8:40:62:a9:c2:84:d6:82:c8:1b:0d:05:58:0e:dd:
da:f9:33:0a:f3:fd:32:a7:0b:e4:6c:be:c9:4f:38:
4e:2b:d0:ac:78:ce:38:38:b7:12:d0:7e:06:28:20:
17:74:56:c8:fe:21:a4:5d:69:e2:60:cb:e7:75:59:
1d:9e:b6:1c:bc:28:3c:83:0e:d2:4f:bc:0f:25:9d:
4b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BB:6A:D7:23:1F:D5:13:DE:18:39:0C:8B:75:DE:9A:9F:4A:A9:40
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/z7tq1yMf1RPeGDkMi3Xemp9KqUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.8.0/21
31.56.142.0/23
31.56.148.0/22
31.57.184.0/22
31.58.208.0/23
31.59.68.0/24
31.59.136.0-31.59.175.255
217.60.245.0/24
217.60.248.0/24
Signature Algorithm: sha256WithRSAEncryption
91:38:1d:0f:6d:61:f1:fb:5b:87:a4:86:dc:5d:87:8f:3c:96:
1a:3a:6a:64:f5:f7:70:01:2b:14:33:49:db:f6:c7:b2:b6:78:
43:f5:da:a5:f6:d8:c2:91:86:05:f5:30:5a:9c:84:63:2c:f1:
fc:96:aa:9e:10:d5:2c:87:db:78:51:5e:78:03:24:c6:92:d7:
f1:4a:cc:c7:a8:01:ea:03:60:be:50:38:44:a3:1c:79:b9:9f:
28:ed:32:93:9c:1f:9d:e5:d5:66:d3:f8:f0:83:7b:97:1a:58:
a5:e1:53:09:17:b8:6f:55:69:f9:b4:e8:4d:d6:3b:41:a4:70:
0e:10:55:ce:35:90:2a:c8:5f:41:17:40:21:c3:60:cc:c2:43:
ad:94:ca:9c:73:42:a3:a9:46:67:d7:55:5d:52:4e:df:bd:a6:
bc:6b:a3:6b:aa:29:ce:23:04:9a:6e:b7:f6:23:ff:8a:46:da:
eb:8d:46:93:4e:93:5c:60:b4:31:dd:25:b4:e2:77:53:82:00:
63:4e:26:13:4f:24:d5:4f:e4:2e:f3:dd:15:c4:a9:b6:da:df:
95:60:c9:36:77:52:8b:ad:8c:ae:e3:79:c9:b9:44:3c:61:c3:
11:31:70:89:08:98:5b:c2:5f:05:22:e1:7f:25:95:74:a5:21:
89:26:a1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:51:05 2025 by rpki-client