Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GuiIxBtn6ce439Wh1ONtZJqK3rA.roa
File: GuiIxBtn6ce439Wh1ONtZJqK3rA.roa (raw, json)
Hash identifier: NJwn+psxl7RuoySB2+8R2+Jv1gnq938sl6uUk5a0UWE=
Subject key identifier: 1A:E8:88:C4:1B:67:E9:C7:B8:DF:D5:A1:D4:E3:6D:64:9A:8A:DE:B0
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195F4FFA772A98812E38C8DC16E0024EE3F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GuiIxBtn6ce439Wh1ONtZJqK3rA.roa
Signing time: Wed 02 Apr 2025 05:35:50 +0000
ROA not before: Wed 02 Apr 2025 05:35:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 31.56.59.0/24 maxlen: 24
31.56.86.0/24 maxlen: 24
31.56.107.0/24 maxlen: 24
31.57.122.0/24 maxlen: 24
31.57.124.0/24 maxlen: 24
31.57.125.0/24 maxlen: 24
31.57.140.0/24 maxlen: 24
31.57.162.0/23 maxlen: 23
31.57.164.0/23 maxlen: 23
31.57.180.0/24 maxlen: 24
31.58.41.0/24 maxlen: 24
31.58.42.0/24 maxlen: 24
31.58.48.0/24 maxlen: 24
31.58.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Apr 2025 05:36:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f4:ff:a7:72:a9:88:12:e3:8c:8d:c1:6e:00:24:ee:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 2 05:35:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ae888c41b67e9c7b8dfd5a1d4e36d649a8adeb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:18:c8:d4:e7:b9:3d:3e:ca:a2:71:7e:34:26:
ab:b8:20:4a:f5:e8:e2:7c:8a:0e:e9:df:2e:84:99:
0c:78:24:e3:f3:d3:ea:21:55:22:34:70:58:4b:61:
1c:8d:fb:73:46:8c:c5:0f:e9:57:5f:b1:7e:20:eb:
89:d0:36:93:8f:9d:c8:c1:36:d1:52:f3:47:46:2c:
c9:3b:ca:0d:ba:1d:24:53:0d:74:b6:0b:57:6a:5e:
b5:ba:85:56:f1:6c:3c:bf:a3:ee:64:38:42:a7:eb:
6e:d7:5d:b6:dd:97:08:4a:3f:aa:b3:77:af:54:cf:
19:d2:0a:f5:79:6f:a1:f9:1a:e7:fe:b6:02:1d:f8:
87:7d:ef:cb:d8:bb:79:aa:00:c7:27:8a:18:c8:2e:
f6:00:b9:00:a2:a2:1b:e1:06:57:e5:6e:b5:02:8f:
66:1d:ba:07:f4:3a:29:ea:a0:ec:7a:1f:bc:05:1d:
fb:80:21:3e:c3:a1:c7:0f:48:46:16:8c:62:b5:d1:
17:2a:8a:91:84:10:45:4e:2d:35:b3:6a:3f:8c:19:
9a:af:87:6f:91:00:c5:24:10:94:60:14:78:f6:63:
98:2c:ca:4c:db:b2:44:00:60:0e:aa:e6:d9:ee:9a:
bd:09:22:78:4b:eb:26:f2:be:71:ee:bc:36:18:32:
dc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E8:88:C4:1B:67:E9:C7:B8:DF:D5:A1:D4:E3:6D:64:9A:8A:DE:B0
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GuiIxBtn6ce439Wh1ONtZJqK3rA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.59.0/24
31.56.86.0/24
31.56.107.0/24
31.57.122.0/24
31.57.124.0/23
31.57.140.0/24
31.57.162.0-31.57.165.255
31.57.180.0/24
31.58.41.0-31.58.42.255
31.58.48.0/24
31.58.50.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:bd:91:5d:15:6f:2c:d9:d5:f4:63:10:75:63:a9:6a:51:24:
aa:76:03:55:d6:85:2b:6b:ba:bb:e8:ed:ab:78:0f:bf:64:61:
f6:af:6d:16:25:b9:c6:be:54:45:11:9b:a5:8c:a4:fb:32:44:
20:5c:2a:08:39:22:a4:5f:f4:e5:08:38:11:0d:1d:a6:b7:ec:
e8:35:88:23:c7:04:67:e4:7f:39:95:ca:17:33:fb:24:11:5e:
23:e7:8a:aa:eb:95:45:77:f9:42:fc:42:b5:e6:83:2a:f7:aa:
e2:6c:55:3d:9a:b1:7f:0d:1e:a1:ae:78:a9:72:2d:97:ca:02:
8d:b4:22:81:07:93:e1:0d:ac:78:41:5c:01:5e:dc:38:e2:5b:
b0:e9:6a:74:29:19:8f:5d:c1:c4:43:ab:ed:e5:80:c7:07:d6:
f0:24:ae:62:0b:f8:9f:01:f1:3a:70:0c:7f:8e:63:9b:5e:03:
36:c0:68:74:79:2e:94:ea:24:8f:59:86:69:83:18:fd:ac:b1:
4b:83:56:e1:a2:5f:58:02:9e:c0:62:3a:3d:1f:7e:03:ba:a3:
84:5d:e8:d9:5c:6a:5d:a5:c0:e7:1d:dd:f0:c3:31:d3:d0:78:
3c:dd:3d:ea:7e:a4:13:c2:7b:e2:5b:46:41:25:d0:0f:29:03:
90:d4:19:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:27:30 2025 by rpki-client