Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5f9BSReAt7JF0r6LuEW6tGOlLko.roa
File: 5f9BSReAt7JF0r6LuEW6tGOlLko.roa (raw, json)
Hash identifier: H9mYaydaMz+J0f6qw6+yzhXJGP0vB+hr4EoCVwnSEIw=
Subject key identifier: E5:FF:41:49:17:80:B7:B2:45:D2:BE:8B:B8:45:BA:B4:63:A5:2E:4A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01958032137A5612CE2A4CEE2A1F53DE741A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5f9BSReAt7JF0r6LuEW6tGOlLko.roa
Signing time: Mon 10 Mar 2025 13:15:20 +0000
ROA not before: Mon 10 Mar 2025 13:15:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 31.56.59.0/24 maxlen: 24
31.56.86.0/24 maxlen: 24
31.56.107.0/24 maxlen: 24
31.57.140.0/24 maxlen: 24
31.57.162.0/23 maxlen: 23
31.57.164.0/23 maxlen: 23
31.57.180.0/24 maxlen: 24
31.58.41.0/24 maxlen: 24
31.58.42.0/24 maxlen: 24
31.58.48.0/24 maxlen: 24
31.58.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 16 Mar 2025 19:43:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:80:32:13:7a:56:12:ce:2a:4c:ee:2a:1f:53:de:74:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 10 13:15:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5ff41491780b7b245d2be8bb845bab463a52e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:39:09:01:82:f3:e5:aa:eb:59:ec:07:5c:dd:
ea:42:05:ea:fd:51:91:21:c6:5f:7c:60:96:41:76:
8d:d8:7d:02:e9:2d:dd:95:c8:01:ab:fb:b5:92:bf:
77:5d:62:6d:24:80:bd:af:6e:92:53:cb:5e:7d:d2:
da:18:23:1b:c8:18:ac:32:c8:24:34:06:d8:65:b6:
46:7f:e0:c6:09:4e:c9:7f:f4:37:7d:b6:57:e8:25:
0a:22:55:6c:b4:03:ac:92:ae:26:cd:7b:b4:92:5b:
24:44:ae:af:6a:b0:09:0b:38:6d:ac:9e:14:75:57:
7f:ba:f6:76:bf:74:37:44:71:69:46:4e:87:d8:48:
7d:71:b4:45:fa:fd:b6:1a:15:7f:e3:22:80:8b:cd:
8b:13:39:46:d0:85:1a:cd:65:1e:bc:29:0d:b3:ba:
58:4c:3c:77:59:b2:18:a6:51:bc:df:0a:a9:c3:db:
5f:b9:dd:6d:b6:de:fa:70:47:eb:bd:68:21:f9:39:
88:dd:4e:6e:83:ef:b1:cf:c7:13:dc:1a:70:43:e4:
78:29:3d:a7:8c:5b:6f:22:7f:c3:41:87:48:b9:b7:
b5:8b:3d:6e:98:1b:5f:16:01:bb:a2:66:d1:c7:fd:
f5:5e:72:e2:69:26:72:b4:34:e8:56:7e:18:d9:21:
a0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FF:41:49:17:80:B7:B2:45:D2:BE:8B:B8:45:BA:B4:63:A5:2E:4A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5f9BSReAt7JF0r6LuEW6tGOlLko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.59.0/24
31.56.86.0/24
31.56.107.0/24
31.57.140.0/24
31.57.162.0-31.57.165.255
31.57.180.0/24
31.58.41.0-31.58.42.255
31.58.48.0/24
31.58.87.0/24
Signature Algorithm: sha256WithRSAEncryption
75:cd:45:a3:58:2d:3b:a2:dc:c8:22:c4:08:3b:a4:24:02:64:
5a:ed:ef:c3:aa:e6:7e:47:ee:9b:1e:97:3c:02:ce:ba:4b:38:
a0:06:f6:72:fe:18:d7:d1:a2:67:50:e6:95:fc:44:e3:f6:44:
df:57:55:f2:55:21:b0:95:95:be:27:1f:0c:6b:f2:ed:29:f2:
61:e0:c9:b0:a3:33:3b:8a:a3:88:52:c5:7d:f2:55:04:08:d3:
e5:fd:ba:d4:75:87:7a:52:6e:4f:c4:58:93:98:01:ff:0d:45:
80:f4:9b:5c:8e:77:38:5d:76:78:8b:e1:ec:67:51:e6:7a:f1:
da:7b:fc:d0:5f:76:63:42:6f:43:10:49:3d:d2:4b:fe:0b:27:
68:a2:df:52:0b:a3:56:fa:3e:fa:a9:98:e1:94:aa:8a:22:4e:
95:48:bc:87:5f:60:81:e0:59:4f:8d:fd:11:95:a5:27:35:70:
f3:f5:80:73:61:1e:8f:0c:6a:ed:ff:89:08:a4:1a:57:48:e7:
79:6f:74:d7:e9:13:3b:90:30:c5:ac:7b:a1:63:d6:fa:41:34:
03:ce:0c:b0:f1:e8:0c:13:40:93:4b:46:ba:4e:6e:ee:fe:e1:
a5:eb:ba:dd:52:7e:5c:7c:4b:c1:70:aa:81:21:e9:13:27:6c:
a1:dc:f3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:11:10 2025 by rpki-client