Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-NS952DkuAYyMStrDYvCcVBbJ9M.roa
File: 1-NS952DkuAYyMStrDYvCcVBbJ9M.roa (raw, json)
Hash identifier: 8WaYOmQ2cE30HeIls7g64S1ZrWPc/5SqOHLb7jYvt68=
Subject key identifier: F8:D4:BD:E7:60:E4:B8:06:32:31:2B:6B:0D:8B:C2:71:50:5B:27:D3
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193B095B9BB1B9A27034094F4CBE7484969
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-NS952DkuAYyMStrDYvCcVBbJ9M.roa
Signing time: Tue 10 Dec 2024 12:40:22 +0000
ROA not before: Tue 10 Dec 2024 12:40:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.50.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.85.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.156.0/24 maxlen: 24
31.57.65.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.146.0/23 maxlen: 24
31.57.166.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.204.0/24 maxlen: 24
31.57.207.0/24 maxlen: 24
31.57.228.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.58.130.0/24 maxlen: 24
31.58.131.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Dec 2024 13:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b0:95:b9:bb:1b:9a:27:03:40:94:f4:cb:e7:48:49:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 10 12:40:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f8d4bde760e4b80632312b6b0d8bc271505b27d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7c:a9:dd:36:d8:05:17:a9:e5:a5:51:da:c5:
83:e3:bd:7a:15:83:fe:8f:0c:33:e0:65:2b:21:1c:
af:90:93:02:bf:b3:9d:df:bc:3a:fb:8c:4f:b7:2e:
56:08:1c:bf:b1:be:ab:b2:6d:a6:88:51:d7:dc:4a:
d4:27:c1:30:9c:a0:d4:81:19:26:1e:3a:36:c1:fe:
fc:7b:2a:43:30:d3:73:9a:6d:d5:05:43:c1:58:69:
49:93:c1:6f:28:c6:00:b5:2a:e0:b8:17:75:6c:ee:
d9:c5:49:12:92:43:41:1a:50:5c:f5:8f:97:f0:60:
80:90:1b:e0:7f:4f:9c:9f:09:70:85:47:c9:fa:b6:
52:67:38:84:86:0b:3b:a0:6a:a8:5a:07:99:8d:c8:
f1:67:99:98:ed:be:fa:ac:9c:28:b4:73:b2:c5:40:
f0:4e:5c:76:54:44:7d:3c:d4:5b:a1:b0:0c:2a:e8:
15:ea:5a:8c:9f:6f:72:c8:c6:50:50:88:5e:af:21:
5e:f5:f0:d5:1d:10:0c:f6:c8:ba:64:3e:32:3e:0b:
de:b0:b1:59:c9:a2:c6:35:34:84:0b:08:64:12:a0:
d7:be:c2:6b:c1:24:ba:c2:d9:7c:fb:b4:97:c7:21:
75:ff:33:b2:af:f9:a5:9a:14:0f:c1:5e:88:32:b5:
1c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D4:BD:E7:60:E4:B8:06:32:31:2B:6B:0D:8B:C2:71:50:5B:27:D3
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-NS952DkuAYyMStrDYvCcVBbJ9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.50.0/23
31.56.57.0/24
31.56.85.0/24
31.56.89.0/24
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.156.0/24
31.57.65.0/24
31.57.132.0/23
31.57.146.0/23
31.57.166.0/24
31.57.176.0/21
31.57.188.0/24
31.57.192.0/22
31.57.200.0/23
31.57.204.0/24
31.57.207.0/24
31.57.228.0/24
31.57.232.0/22
31.58.130.0/23
31.58.152.0/22
31.59.96.0/22
31.59.112.0/22
31.59.184.0/22
Signature Algorithm: sha256WithRSAEncryption
80:1e:aa:ff:a9:2d:bb:a8:d0:3f:b5:d0:a3:f1:3e:4e:41:99:
9d:4b:9b:35:8f:b0:51:b2:29:18:d2:e4:5b:fd:41:56:8b:23:
11:0b:cf:1c:88:08:9a:c6:2d:f6:6c:ed:ea:06:3d:8c:77:45:
10:1f:c6:d8:93:13:31:c7:0e:10:a3:51:1a:dd:9c:5d:86:27:
b5:d4:d1:8c:64:73:92:58:e2:fa:6a:a9:9b:48:f9:a3:37:90:
ed:0a:db:04:69:9c:b5:2b:f3:cf:aa:24:02:6e:5a:61:a5:a2:
9e:fd:6b:5b:5b:5c:80:a0:9e:ca:b3:e8:5d:a7:65:5c:95:dc:
97:91:3f:10:57:2c:b8:a8:58:2f:d4:a9:60:43:90:48:39:27:
0a:d2:f0:ee:8e:46:1d:67:10:7e:e7:f7:a0:bb:91:24:45:f2:
1c:ae:dd:e3:d2:a7:bb:e8:7b:2b:c5:70:71:6e:6a:9a:36:b1:
de:0b:e1:02:93:81:78:ca:a7:26:bc:4f:5e:8c:da:73:27:2f:
68:a4:68:59:67:a7:80:25:ec:d2:0e:a4:88:71:c0:86:3d:c5:
6a:5b:12:bd:fa:47:e0:8b:b2:61:34:38:ce:d0:80:af:f5:da:
b0:18:4f:2e:42:8f:b4:01:29:4e:a2:b7:07:bb:de:10:6e:0c:
19:1c:51:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:32:28 2025 by rpki-client