Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8dBoB0hzTz21DNDEKLN5G5XpKqg.roa
File: 8dBoB0hzTz21DNDEKLN5G5XpKqg.roa (raw, json)
Hash identifier: ziKji2ah+di3y1eKeNZHTx/zv7zespsRcR/JA5JvRPY=
Subject key identifier: F1:D0:68:07:48:73:4F:3D:B5:0C:D0:C4:28:B3:79:1B:95:E9:2A:A8
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01955B997D2C7A86E3F38816A9154AF7FC39
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8dBoB0hzTz21DNDEKLN5G5XpKqg.roa
Signing time: Mon 03 Mar 2025 10:42:20 +0000
ROA not before: Mon 03 Mar 2025 10:42:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 31.56.8.0/21 maxlen: 24
31.56.126.0/24 maxlen: 24
31.56.142.0/23 maxlen: 24
31.56.148.0/22 maxlen: 24
31.57.184.0/22 maxlen: 24
31.59.68.0/24 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Mar 2025 16:38:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5b:99:7d:2c:7a:86:e3:f3:88:16:a9:15:4a:f7:fc:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 3 10:42:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1d0680748734f3db50cd0c428b3791b95e92aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f8:de:02:31:8b:33:1c:c7:e3:fd:79:ee:61:
54:5f:9a:eb:1d:dc:30:21:a6:76:6d:12:05:37:7b:
df:e6:b6:22:03:a5:d9:c7:9b:0a:2c:15:b0:e1:b3:
92:09:60:3d:16:83:a7:fd:90:3d:69:65:23:3f:15:
80:e6:09:d0:75:3c:75:e9:ad:3f:ac:50:46:5c:cf:
74:7a:41:a9:cd:47:e2:3c:95:97:5e:9c:ba:b8:b4:
b7:c4:5f:04:ec:9f:6b:39:00:15:dd:01:15:27:54:
ed:35:91:1d:56:34:c0:bf:33:8b:7c:26:4e:0b:61:
30:36:97:e9:c5:85:30:48:57:87:39:be:58:32:4f:
fe:9b:23:f6:12:77:69:b2:dd:45:61:dd:08:95:8c:
03:c0:13:0d:de:4d:06:4e:0d:4b:a4:e4:38:4b:3a:
2b:49:a4:52:72:48:0e:9c:60:62:ab:86:13:f9:fd:
bc:60:35:b3:09:9a:ef:78:e3:2e:c2:cc:c5:27:57:
f0:b7:66:00:f7:25:f9:f2:8d:cb:fe:c8:2d:b0:68:
69:77:dc:74:7d:2a:27:78:f0:ac:87:9e:d4:d4:a3:
96:05:cd:af:4a:e5:e4:1c:97:11:70:c6:d1:bc:cb:
15:23:9d:01:f3:7b:a8:dc:11:b2:43:c8:f2:6b:f1:
e7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D0:68:07:48:73:4F:3D:B5:0C:D0:C4:28:B3:79:1B:95:E9:2A:A8
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8dBoB0hzTz21DNDEKLN5G5XpKqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.8.0/21
31.56.126.0/24
31.56.142.0/23
31.56.148.0/22
31.57.184.0/22
31.59.68.0/24
31.59.136.0-31.59.175.255
31.59.228.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:93:b8:f0:d9:06:3c:de:e7:bf:dd:24:65:8c:78:6e:c3:1f:
b1:9f:9a:e8:bf:12:dd:c7:b2:2f:49:62:34:72:60:ee:85:74:
ec:fa:5d:15:14:39:0f:2c:5f:fa:a1:8c:48:25:0f:2e:6d:3f:
ee:1c:b9:3b:45:c4:24:02:68:67:94:84:ac:59:ef:59:7b:32:
bf:4d:b1:77:f8:d9:42:33:88:da:33:b9:79:5a:40:9f:5d:87:
9a:cc:dd:71:9c:e7:16:ef:a0:9c:46:14:23:27:c3:d5:a5:07:
32:99:2b:50:5a:ed:cf:db:b8:0e:03:3d:3c:b4:69:cf:1b:0f:
c9:ce:18:d1:5a:eb:3a:cc:c9:44:0d:b1:68:c3:e5:8c:4f:ec:
1b:f2:ce:93:b3:aa:f3:56:c4:f0:d1:4a:20:25:d8:06:f8:05:
24:f7:f4:51:2b:15:d4:1b:f8:e8:bd:2c:ae:27:79:db:02:6e:
6c:c0:87:c5:e6:64:7e:aa:1b:5d:4c:c9:4d:42:e3:d9:33:cc:
b6:30:50:22:42:f1:5f:c9:b7:c1:50:4c:5b:0e:4f:e5:8e:30:
ac:56:21:1a:ec:21:37:2c:a1:f8:6b:9b:12:2b:ca:67:49:18:
62:39:cd:c4:66:3d:f9:5f:05:d2:02:0b:9e:29:db:fd:a0:5d:
e0:8a:d2:f2
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAZVbmX0seobj84gWqRVK9/w5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMzAzMTA0MjIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWQwNjgwNzQ4NzM0ZjNkYjUwY2QwYzQyOGIzNzkxYjk1ZTkyYWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/jeAjGLMxzH4/157mFUX5rrHdww
IaZ2bRIFN3vf5rYiA6XZx5sKLBWw4bOSCWA9FoOn/ZA9aWUjPxWA5gnQdTx16a0/
rFBGXM90ekGpzUfiPJWXXpy6uLS3xF8E7J9rOQAV3QEVJ1TtNZEdVjTAvzOLfCZO
C2EwNpfpxYUwSFeHOb5YMk/+myP2Endpst1FYd0IlYwDwBMN3k0GTg1LpOQ4Szor
SaRSckgOnGBiq4YT+f28YDWzCZrveOMuwszFJ1fwt2YA9yX58o3L/sgtsGhpd9x0
fSonePCsh57U1KOWBc2vSuXkHJcRcMbRvMsVI50B83uo3BGyQ8jya/HnOQIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFPHQaAdIc089tQzQxCizeRuV6SqoMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvOGRCb0IwaHpUejIxRE5ERUtMTjVHNVhwS3FnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQDHzgIAwQA
Hzh+AwQBHziOAwQCHziUAwQCHzm4AwQAHztEMAwDBAMfO4gDBAQfO6ADBAAfO+Qw
DQYJKoZIhvcNAQELBQADggEBAKOTuPDZBjze57/dJGWMeG7DH7Gfmui/Et3Hsi9J
YjRyYO6FdOz6XRUUOQ8sX/qhjEglDy5tP+4cuTtFxCQCaGeUhKxZ71l7Mr9NsXf4
2UIziNozuXlaQJ9dh5rM3XGc5xbvoJxGFCMnw9WlBzKZK1Ba7c/buA4DPTy0ac8b
D8nOGNFa6zrMyUQNsWjD5YxP7BvyzpOzqvNWxPDRSiAl2Ab4BST39FErFdQb+Oi9
LK4nedsCbmzAh8XmZH6qG11MyU1C49kzzLYwUCJC8V/Jt8FQTFsOT+WOMKxWIRrs
ITcsofhrmxIrymdJGGI5zcRmPflfBdICC54p2/2gXeCK0vI=
-----END CERTIFICATE-----
Generated at Fri May 2 10:59:47 2025 by rpki-client