Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1NCjfB6oVBM17fLXtIUWa1j50Ak.roa
File: 1NCjfB6oVBM17fLXtIUWa1j50Ak.roa (raw, json)
Hash identifier: 6Nj73r0rWAHPyh4yCsP3HJc1YEePh++lyy6R+JtsXsI=
Subject key identifier: D4:D0:A3:7C:1E:A8:54:13:35:ED:F2:D7:B4:85:16:6B:58:F9:D0:09
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196200D6AA8BF01946BE72F43FE36526D02
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1NCjfB6oVBM17fLXtIUWa1j50Ak.roa
Signing time: Thu 10 Apr 2025 14:14:32 +0000
ROA not before: Thu 10 Apr 2025 14:14:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 31.56.52.0/22 maxlen: 22
31.56.59.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.57.118.0/24 maxlen: 24
31.57.199.0/24 maxlen: 24
31.58.86.0/24 maxlen: 24
31.59.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 18 Apr 2025 07:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:20:0d:6a:a8:bf:01:94:6b:e7:2f:43:fe:36:52:6d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 10 14:14:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4d0a37c1ea8541335edf2d7b485166b58f9d009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:94:2b:3b:24:ae:13:dc:03:63:9b:2b:b0:e2:
90:e8:eb:af:57:8d:1a:a6:fa:b5:74:c0:a9:6b:b9:
ba:2d:6c:a5:ea:9c:d0:11:f7:ee:81:bf:d1:27:af:
8f:18:f2:33:fc:26:ee:b0:94:3d:a6:1e:0b:6e:d5:
bd:b0:f5:79:59:32:6a:20:ac:51:1d:32:5f:62:62:
33:d4:86:d6:9f:b9:20:e5:60:f9:23:a7:db:54:cb:
cd:21:ff:19:48:c9:e4:4c:24:18:b9:7c:b5:c3:bf:
d0:ee:48:ae:1e:c9:8e:d8:47:32:a2:b8:45:ca:dc:
c2:60:38:78:c9:c2:3c:39:35:ba:d8:21:e5:af:bb:
bb:79:6a:d5:45:5f:4d:70:5d:32:44:7f:c3:b3:42:
f9:54:18:5b:6d:40:fc:05:01:67:32:92:a1:1a:5e:
1f:21:ec:6d:a7:3d:f5:c2:49:81:45:6e:0e:8c:a7:
24:8c:ea:b3:a5:d4:04:16:67:95:75:0c:91:d0:6f:
6e:04:bd:91:ac:e0:e9:92:37:56:63:76:63:f6:71:
2d:63:d0:77:d5:a4:61:17:77:bf:f8:29:46:b9:52:
94:48:fb:70:54:cc:41:be:6b:c0:7e:fe:50:e2:5c:
e2:59:2f:85:63:8d:03:80:bc:e7:0e:b6:41:10:d8:
fd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D0:A3:7C:1E:A8:54:13:35:ED:F2:D7:B4:85:16:6B:58:F9:D0:09
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1NCjfB6oVBM17fLXtIUWa1j50Ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.52.0/22
31.56.59.0/24
31.56.77.0/24
31.57.118.0/24
31.57.199.0/24
31.58.86.0/24
31.59.68.0/24
Signature Algorithm: sha256WithRSAEncryption
77:cb:6f:a4:56:4c:b0:07:2a:4a:76:04:ae:5d:4a:cd:be:e7:
ec:63:c4:c2:d8:1b:87:32:7d:25:94:20:61:09:78:3d:77:ea:
aa:12:e9:13:11:d1:6f:18:77:34:4c:f3:2f:38:1a:38:d9:fe:
6b:4d:8d:da:26:40:1f:09:7e:86:5d:07:7a:2e:c5:39:9b:8f:
ee:2e:ca:60:24:17:00:08:29:a8:10:c2:d4:99:71:04:7e:6e:
14:32:65:44:63:dc:cb:eb:1a:f5:f4:89:e9:2e:94:8b:2c:85:
68:e9:11:35:24:65:ee:43:eb:a3:a0:9c:9c:d7:3b:44:c3:7e:
6f:8b:97:6b:2e:f7:55:2a:2a:9e:61:38:29:8a:6a:c5:fe:e1:
d6:05:3c:dd:2f:69:4e:c8:1d:e3:67:19:a7:fb:67:8c:43:e9:
1c:5f:21:72:fa:be:9d:a4:71:0c:21:45:8f:c0:c6:b4:36:80:
70:da:73:3d:77:61:63:b9:9b:1a:62:e4:4f:52:74:5b:9f:f8:
9c:31:84:bc:9c:17:81:cd:34:8a:4a:34:e9:3d:78:36:08:e4:
ad:a1:0c:b9:8c:ab:b8:e9:d2:12:b6:c9:a8:8d:79:94:fa:4d:
24:81:70:d0:fd:ab:9e:3c:d4:91:e6:58:45:4c:f9:c4:e7:96:
38:68:88:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:25:53 2025 by rpki-client