Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CJEBfMqvakiG49XRa6clNdbMx0I.roa
File: CJEBfMqvakiG49XRa6clNdbMx0I.roa (raw, json)
Hash identifier: 034jH4cc+IgCq9zqiESjEuVF9PMNsk9WWL4Wg2fmUFU=
Subject key identifier: 08:91:01:7C:CA:AF:6A:48:86:E3:D5:D1:6B:A7:25:35:D6:CC:C7:42
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01959FA02F14256A52929F1C60CA2F236D09
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CJEBfMqvakiG49XRa6clNdbMx0I.roa
Signing time: Sun 16 Mar 2025 15:43:49 +0000
ROA not before: Sun 16 Mar 2025 15:43:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 31.56.73.0/24 maxlen: 24
31.56.85.0/24 maxlen: 24
31.57.153.0/24 maxlen: 24
31.57.236.0/24 maxlen: 24
31.58.43.0/24 maxlen: 24
31.58.76.0/22 maxlen: 24
31.58.76.0/24 maxlen: 24
31.58.128.0/24 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.162.0/24 maxlen: 24
31.58.164.0/24 maxlen: 24
31.58.166.0/24 maxlen: 24
31.59.88.0/24 maxlen: 24
31.59.122.0/24 maxlen: 24
31.59.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 16 Mar 2025 19:42:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:9f:a0:2f:14:25:6a:52:92:9f:1c:60:ca:2f:23:6d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 16 15:43:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0891017ccaaf6a4886e3d5d16ba72535d6ccc742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:be:67:e1:3e:bd:41:7d:89:6f:67:63:4f:f9:
fb:92:10:94:92:2e:7b:c4:5e:2c:b1:fa:11:18:a0:
08:1c:93:84:b8:62:4d:d2:4a:7a:9c:b1:61:39:db:
af:05:14:9c:f8:20:4f:74:5d:1f:47:63:85:e8:07:
96:d4:6c:a7:36:dd:ae:6e:76:0a:ae:05:73:bd:7b:
92:2b:fe:2c:d6:7e:3c:e8:66:d7:b5:e1:90:1e:b8:
f8:ec:c9:34:c7:c6:8d:d2:0a:3b:c9:46:15:04:4a:
2e:8d:3d:b0:10:a0:f0:97:44:2d:e7:bf:cc:60:f8:
3a:99:11:dc:d7:54:7c:32:cc:1a:f7:b7:23:37:a3:
ba:ff:3d:ae:53:73:cd:2c:fa:a2:05:65:8c:bb:d4:
d5:e1:55:2b:ee:0a:63:f6:1a:b0:2c:8d:51:0c:44:
62:25:c7:8f:b2:2c:29:90:ff:ef:3e:9b:a5:7c:a4:
7e:9c:3c:43:d6:2b:36:6b:3b:15:5c:1f:39:af:bc:
e2:2f:b7:47:43:8d:64:ef:48:97:cf:d7:34:e8:da:
fb:9c:39:c9:7c:14:86:52:8c:86:a4:e4:bb:c7:ca:
99:dd:dd:d4:68:36:e8:22:96:61:a9:cd:dd:e6:cd:
ae:83:88:29:44:bf:1f:2f:3e:5a:9c:b9:45:76:d8:
d8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:91:01:7C:CA:AF:6A:48:86:E3:D5:D1:6B:A7:25:35:D6:CC:C7:42
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CJEBfMqvakiG49XRa6clNdbMx0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.73.0/24
31.56.85.0/24
31.57.153.0/24
31.57.236.0/24
31.58.43.0/24
31.58.76.0/22
31.58.128.0/24
31.58.153.0/24
31.58.162.0/24
31.58.164.0/24
31.58.166.0/24
31.59.88.0/24
31.59.122.0/23
Signature Algorithm: sha256WithRSAEncryption
13:23:18:f7:4e:04:38:db:47:94:13:e4:8c:47:60:cc:a5:43:
c8:91:ac:a4:95:f9:20:5c:29:53:32:e6:51:ac:15:44:01:19:
88:c0:50:6f:63:70:b1:e3:fa:57:59:21:5d:00:3d:07:aa:6d:
55:de:15:83:94:46:f3:51:b2:27:33:98:76:0b:1e:68:72:d5:
1b:3f:30:1d:b9:45:57:3e:72:02:13:d9:5b:b4:67:d8:e1:c9:
f4:6e:5c:c1:40:c3:93:c0:60:64:37:11:88:ba:ae:c5:50:63:
cf:34:8d:9a:45:21:13:d6:76:73:a6:b4:2a:50:cf:c2:99:73:
17:6f:68:bb:2e:ac:6f:37:28:43:e3:19:f8:2f:b9:7a:f1:87:
a9:b6:07:95:47:7b:3f:b7:e3:73:19:a6:1e:da:0b:48:4d:d9:
0d:37:36:20:ac:a5:bb:12:05:61:4b:4c:21:ef:be:47:96:4d:
be:34:75:34:50:a4:f1:f5:c5:f8:1a:5b:2b:35:2a:8f:a2:b1:
2d:1f:cb:c3:ad:4a:96:2b:38:10:46:8d:c0:aa:f5:a6:1d:a8:
ec:a9:18:3e:45:14:c3:fb:13:0c:43:50:5c:75:1f:ff:e8:fc:
72:ab:99:42:0c:13:ea:aa:fb:e8:1a:11:54:2e:cc:a2:5e:7b:
d7:5c:7f:fa
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgISAZWfoC8UJWpSkp8cYMovI20JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMzE2MTU0MzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODkxMDE3Y2NhYWY2YTQ4ODZlM2Q1ZDE2YmE3MjUzNWQ2Y2NjNzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyb5n4T69QX2Jb2djT/n7khCUki57
xF4ssfoRGKAIHJOEuGJN0kp6nLFhOduvBRSc+CBPdF0fR2OF6AeW1GynNt2ubnYK
rgVzvXuSK/4s1n486GbXteGQHrj47Mk0x8aN0go7yUYVBEoujT2wEKDwl0Qt57/M
YPg6mRHc11R8Mswa97cjN6O6/z2uU3PNLPqiBWWMu9TV4VUr7gpj9hqwLI1RDERi
JcePsiwpkP/vPpulfKR+nDxD1is2azsVXB85r7ziL7dHQ41k70iXz9c06Nr7nDnJ
fBSGUoyGpOS7x8qZ3d3UaDboIpZhqc3d5s2ug4gpRL8fLz5anLlFdtjYKQIDAQAB
o4ICUTCCAk0wHQYDVR0OBBYEFAiRAXzKr2pIhuPV0WunJTXWzMdCMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvQ0pFQmZNcXZha2lHNDlYUmE2Y2xOZGJNeDBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQAHzhJAwQA
HzhVAwQAHzmZAwQAHznsAwQAHzorAwQCHzpMAwQAHzqAAwQAHzqZAwQAHzqiAwQA
HzqkAwQAHzqmAwQAHztYAwQBHzt6MA0GCSqGSIb3DQEBCwUAA4IBAQATIxj3TgQ4
20eUE+SMR2DMpUPIkayklfkgXClTMuZRrBVEARmIwFBvY3Cx4/pXWSFdAD0Hqm1V
3hWDlEbzUbInM5h2Cx5octUbPzAduUVXPnICE9lbtGfY4cn0blzBQMOTwGBkNxGI
uq7FUGPPNI2aRSET1nZzprQqUM/CmXMXb2i7LqxvNyhD4xn4L7l68YeptgeVR3s/
t+NzGaYe2gtITdkNNzYgrKW7EgVhS0wh775Hlk2+NHU0UKTx9cX4GlsrNSqPorEt
H8vDrUqWKzgQRo3AqvWmHajsqRg+RRTD+xMMQ1BcdR//6Pxyq5lCDBPqqvvoGhFU
LsyiXnvXXH/6
-----END CERTIFICATE-----
Generated at Mon Apr 28 00:55:23 2025 by rpki-client