Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HPQtCCCTkD6f0AJbkulZIdbyalE.roa
File: HPQtCCCTkD6f0AJbkulZIdbyalE.roa (raw, json)
Hash identifier: 1A9RkUD/vgo4dZOvZSfbPGstYurnbKSsVEBJ1l0pm6Y=
Subject key identifier: 1C:F4:2D:08:20:93:90:3E:9F:D0:02:5B:92:E9:59:21:D6:F2:6A:51
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194F459F55BCDB456D9D5DB384F147B78A0
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HPQtCCCTkD6f0AJbkulZIdbyalE.roa
Signing time: Tue 11 Feb 2025 09:32:03 +0000
ROA not before: Tue 11 Feb 2025 09:32:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214025
IP address blocks: 31.56.69.0/24 maxlen: 24
31.56.72.0/24 maxlen: 24
31.56.84.0/24 maxlen: 24
31.56.200.0/24 maxlen: 24
31.56.202.0/24 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.215.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.221.0/24 maxlen: 24
31.57.255.0/24 maxlen: 24
31.58.88.0/24 maxlen: 24
31.58.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Mar 2025 08:03:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f4:59:f5:5b:cd:b4:56:d9:d5:db:38:4f:14:7b:78:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 11 09:32:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1cf42d082093903e9fd0025b92e95921d6f26a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c8:ed:e4:01:7d:12:c6:cb:9a:75:3d:4f:9d:
f1:9a:d1:8c:76:8f:25:4d:6f:23:41:0a:9e:fd:89:
a2:d0:a5:d5:c8:42:4a:4b:a2:6a:9e:8c:73:37:14:
ae:55:c3:12:7f:d7:f3:50:e2:27:61:1f:b6:b0:31:
76:0a:f6:e4:80:14:d4:26:f7:5a:44:a6:64:31:46:
86:09:d3:cf:61:b5:80:21:93:47:33:45:67:10:d3:
b1:60:da:73:11:16:50:f8:87:e1:60:d0:04:48:f6:
b9:10:65:e8:81:4a:19:0f:55:cd:37:ff:8a:ce:56:
30:ff:e0:6d:51:37:e1:b6:6e:e7:e3:77:90:d2:ef:
37:70:88:bb:56:f1:7b:93:e0:a8:67:bf:0f:b9:e6:
2b:9e:9c:b4:7d:24:58:05:58:cd:da:8b:02:e8:d3:
45:0f:30:1f:96:67:cc:73:28:90:40:5a:ae:12:59:
43:f6:8f:9e:57:5e:e5:3b:3e:29:30:42:09:42:c9:
88:5d:f8:23:9d:a3:a6:2b:aa:43:7a:0b:70:d9:4e:
e1:28:05:13:5c:92:62:10:5e:6f:52:f2:90:55:d4:
b1:c4:de:0f:79:38:b5:ba:17:a9:72:38:2d:2a:71:
ae:a3:b1:54:57:1f:59:a1:10:91:ef:47:bc:8b:5f:
93:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F4:2D:08:20:93:90:3E:9F:D0:02:5B:92:E9:59:21:D6:F2:6A:51
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HPQtCCCTkD6f0AJbkulZIdbyalE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.69.0/24
31.56.72.0/24
31.56.84.0/24
31.56.200.0/24
31.56.202.0/24
31.57.181.0/24
31.57.215.0/24
31.57.219.0/24
31.57.221.0/24
31.57.255.0/24
31.58.88.0/23
Signature Algorithm: sha256WithRSAEncryption
be:6d:0e:19:c3:23:18:5e:0d:79:1c:e2:41:74:e9:fb:6c:06:
87:fd:dd:f0:08:53:66:64:64:49:78:af:73:ac:8a:11:65:ff:
1f:b3:bd:07:33:11:bf:50:ec:c2:cd:2b:f3:a8:25:0d:ba:5a:
d8:4e:c2:a5:44:8b:8e:e5:69:26:b1:2f:cc:f3:32:45:c2:55:
f4:b7:60:f3:79:02:b7:12:fe:dd:8c:e9:8c:eb:f4:65:a1:f4:
d1:65:d9:e4:ee:b8:c0:82:9d:25:dd:0c:a0:12:90:ec:aa:f4:
88:5f:7b:99:bf:9d:0d:d7:7c:04:cd:29:26:1e:7b:d7:bb:29:
e4:9c:8a:a9:f5:6c:a4:e4:21:e9:a5:41:64:43:8c:fb:c2:b6:
e7:e3:87:7b:e9:a4:7d:04:0f:d5:32:b4:65:c6:7d:5d:61:4e:
40:23:49:51:33:31:d0:66:77:d7:15:f8:f6:80:5b:d4:60:c6:
53:6d:4b:e0:ab:4d:ee:1f:37:06:7f:5e:e8:25:8f:0d:8b:16:
a7:b8:51:f5:03:51:68:b4:61:6e:68:ba:2f:e0:73:8a:e2:0b:
88:20:0a:3b:4d:f2:e2:90:69:b8:c5:64:99:0b:54:78:97:4d:
83:93:a8:f1:e2:0c:21:7c:2c:b6:9b:48:cd:17:2f:a3:df:85:
03:80:07:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:05:12 2025 by rpki-client