Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HJOYmlT_-AIgf08Bh8mqkxWceoY.roa
File: HJOYmlT_-AIgf08Bh8mqkxWceoY.roa (raw, json)
Hash identifier: r5OCnoArwiqcOPlOgc2d/Q7K7TrwicE02LqxtIwiZRs=
Subject key identifier: 1C:93:98:9A:54:FF:F8:02:20:7F:4F:01:87:C9:AA:93:15:9C:7A:86
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019432E4BE85E8A29A9961A4002A6E62A796
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HJOYmlT_-AIgf08Bh8mqkxWceoY.roa
Signing time: Sat 04 Jan 2025 19:57:19 +0000
ROA not before: Sat 04 Jan 2025 19:57:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 31.56.23.0/24 maxlen: 24
31.56.25.0/24 maxlen: 24
31.56.27.0/24 maxlen: 24
31.56.28.0/22 maxlen: 24
31.56.32.0/24 maxlen: 24
31.56.34.0/24 maxlen: 24
31.56.36.0/24 maxlen: 24
31.56.38.0/24 maxlen: 24
31.56.40.0/24 maxlen: 24
31.56.58.0/24 maxlen: 24
31.56.61.0/24 maxlen: 24
31.56.68.0/24 maxlen: 24
31.56.70.0/24 maxlen: 24
31.56.80.0/22 maxlen: 22
31.56.92.0/22 maxlen: 22
31.56.96.0/22 maxlen: 22
31.56.100.0/22 maxlen: 22
31.57.119.0/24 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.226.0/24 maxlen: 24
31.58.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Jan 2025 17:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:32:e4:be:85:e8:a2:9a:99:61:a4:00:2a:6e:62:a7:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 4 19:57:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c93989a54fff802207f4f0187c9aa93159c7a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0e:06:01:91:85:91:99:4e:c9:b8:d1:69:46:
73:7a:5d:ff:7b:c3:0e:53:c3:81:db:08:0a:0e:68:
9e:12:ab:ae:f8:13:df:f8:c5:8e:08:55:35:81:1c:
c6:4b:dd:11:ef:6f:80:4c:08:95:c7:ea:ed:c4:81:
17:34:95:d4:cd:44:63:ec:f5:f4:5a:18:34:08:3e:
b5:18:ac:6e:a8:e9:df:7a:3d:e6:51:5f:da:21:6c:
fe:5f:e3:9b:fa:66:9c:c1:a8:8d:f5:8c:1d:ce:9e:
e1:d7:8f:6b:ee:95:c8:cb:79:70:69:a0:a6:15:a6:
84:5b:c2:16:8f:df:55:32:a0:ca:5f:f2:d6:7b:cf:
2b:80:b8:b1:44:2e:a5:e0:8b:81:52:1d:11:c5:66:
28:97:82:b0:0c:74:1c:5f:c0:d7:64:80:bb:6f:26:
2f:31:93:61:83:35:de:f1:26:cb:03:f1:3e:2d:97:
de:d2:0b:23:3d:41:f1:0e:f5:84:27:43:dc:a9:03:
93:f6:57:c7:97:d3:2f:f7:88:39:9d:4c:34:ce:4c:
ac:90:bc:11:d0:54:e3:76:80:4f:a1:43:78:6a:36:
da:80:81:30:fd:7e:1c:f7:82:c9:24:6e:de:9f:e2:
99:d7:d8:f3:df:f2:d0:57:6c:62:38:94:05:12:17:
bf:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:93:98:9A:54:FF:F8:02:20:7F:4F:01:87:C9:AA:93:15:9C:7A:86
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HJOYmlT_-AIgf08Bh8mqkxWceoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.23.0/24
31.56.25.0/24
31.56.27.0-31.56.32.255
31.56.34.0/24
31.56.36.0/24
31.56.38.0/24
31.56.40.0/24
31.56.58.0/24
31.56.61.0/24
31.56.68.0/24
31.56.70.0/24
31.56.80.0/22
31.56.92.0-31.56.103.255
31.57.119.0/24
31.57.168.0/22
31.57.226.0/24
31.58.130.0/24
Signature Algorithm: sha256WithRSAEncryption
03:ab:ac:d6:e3:13:ea:b9:d8:d9:2c:96:80:40:cb:f1:87:84:
31:31:64:ea:97:67:5e:85:aa:4f:dc:4a:45:c3:03:cb:b0:bb:
48:94:36:61:94:d9:73:28:14:00:3e:5b:a2:27:5e:48:20:15:
62:97:90:06:ad:5c:da:88:ea:0e:36:51:58:77:38:49:a0:53:
60:8f:54:d9:50:7c:5b:26:23:de:90:a0:87:db:50:58:eb:82:
c5:14:05:53:b4:64:70:91:2b:06:b4:99:5b:0a:0d:47:33:ac:
60:b0:be:5a:cb:e2:69:c4:13:c0:33:aa:76:f1:d1:9e:cd:ee:
4e:7a:52:07:c2:89:dc:bb:15:c1:a0:c6:1e:d7:fb:a0:1b:c7:
d0:2e:45:22:31:39:7d:6d:ff:91:c9:82:9a:49:56:8f:a1:e7:
ee:38:be:e2:f4:01:11:69:6e:9f:60:60:c6:7b:4d:ca:1a:40:
fd:ff:2b:82:90:9e:21:e4:cf:98:b0:6e:aa:eb:78:b4:4b:c5:
cc:3e:a7:80:8f:a9:e6:40:90:84:59:fe:50:88:b4:e5:a2:cd:
f3:49:b4:c4:88:d4:b3:91:cc:ff:3c:3b:54:7b:4f:26:11:03:
51:b8:7e:79:7e:23:a6:53:05:66:05:43:45:f2:c4:f1:d1:59:
8f:be:f2:40
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgISAZQy5L6F6KKamWGkACpuYqeWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMTA0MTk1NzE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzkzOTg5YTU0ZmZmODAyMjA3ZjRmMDE4N2M5YWE5MzE1OWM3YTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQ4GAZGFkZlOybjRaUZzel3/e8MO
U8OB2wgKDmieEquu+BPf+MWOCFU1gRzGS90R72+ATAiVx+rtxIEXNJXUzURj7PX0
Whg0CD61GKxuqOnfej3mUV/aIWz+X+Ob+macwaiN9Ywdzp7h149r7pXIy3lwaaCm
FaaEW8IWj99VMqDKX/LWe88rgLixRC6l4IuBUh0RxWYol4KwDHQcX8DXZIC7byYv
MZNhgzXe8SbLA/E+LZfe0gsjPUHxDvWEJ0PcqQOT9lfHl9Mv94g5nUw0zkyskLwR
0FTjdoBPoUN4ajbagIEw/X4c94LJJG7en+KZ19jz3/LQV2xiOJQFEhe/cQIDAQAB
o4ICezCCAncwHQYDVR0OBBYEFByTmJpU//gCIH9PAYfJqpMVnHqGMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvSEpPWW1sVF8tQUlnZjA4Qmg4bXFreFdjZW9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGQBggrBgEFBQcBBwEB/wSBgDB+MHwEAgABMHYDBAAfOBcD
BAAfOBkwDAMEAB84GwMEAB84IAMEAB84IgMEAB84JAMEAB84JgMEAB84KAMEAB84
OgMEAB84PQMEAB84RAMEAB84RgMEAh84UDAMAwQCHzhcAwQDHzhgAwQAHzl3AwQC
HzmoAwQAHzniAwQAHzqCMA0GCSqGSIb3DQEBCwUAA4IBAQADq6zW4xPqudjZLJaA
QMvxh4QxMWTql2dehapP3EpFwwPLsLtIlDZhlNlzKBQAPluiJ15IIBVil5AGrVza
iOoONlFYdzhJoFNgj1TZUHxbJiPekKCH21BY64LFFAVTtGRwkSsGtJlbCg1HM6xg
sL5ay+JpxBPAM6p28dGeze5OelIHwoncuxXBoMYe1/ugG8fQLkUiMTl9bf+RyYKa
SVaPoefuOL7i9AERaW6fYGDGe03KGkD9/yuCkJ4h5M+YsG6q63i0S8XMPqeAj6nm
QJCEWf5QiLTlos3zSbTEiNSzkcz/PDtUe08mEQNRuH55fiOmUwVmBUNF8sTx0VmP
vvJA
-----END CERTIFICATE-----
Generated at Mon Apr 28 16:00:19 2025 by rpki-client