Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Lk-emswGZQEFuTw3JpQWgkY7uzs.roa
File: Lk-emswGZQEFuTw3JpQWgkY7uzs.roa (raw, json)
Hash identifier: LDBWtLoXOUsG0rNPZhlMBVC97ElxzMXfuSm6V+fz4no=
Subject key identifier: 2E:4F:9E:9A:CC:06:65:01:05:B9:3C:37:26:94:16:82:46:3B:BB:3B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01941D744E24C24421EC6D87A8E85832A146
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Lk-emswGZQEFuTw3JpQWgkY7uzs.roa
Signing time: Tue 31 Dec 2024 16:02:28 +0000
ROA not before: Tue 31 Dec 2024 16:02:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214025
IP address blocks: 31.56.59.0/24 maxlen: 24
31.56.67.0/24 maxlen: 24
31.56.69.0/24 maxlen: 24
31.56.72.0/24 maxlen: 24
31.56.84.0/24 maxlen: 24
31.56.88.0/24 maxlen: 24
31.56.120.0/24 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.122.0/24 maxlen: 24
31.56.123.0/24 maxlen: 24
31.56.126.0/24 maxlen: 24
31.56.200.0/24 maxlen: 24
31.56.202.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.132.0/24 maxlen: 24
31.57.133.0/24 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.215.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.221.0/24 maxlen: 24
31.57.255.0/24 maxlen: 24
31.58.88.0/24 maxlen: 24
31.58.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1d:74:4e:24:c2:44:21:ec:6d:87:a8:e8:58:32:a1:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 31 16:02:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e4f9e9acc06650105b93c3726941682463bbb3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:eb:05:ba:ef:1b:71:87:63:27:46:1b:4b:3f:
87:4c:f3:26:d1:c1:c9:23:bb:a2:97:e3:84:f2:f7:
69:b6:38:fa:68:0b:03:62:1d:52:ea:47:ca:ea:26:
28:25:ee:1c:64:40:d6:90:3e:6e:90:f0:59:ff:a9:
00:ed:83:09:bf:a5:22:e6:6a:7a:22:90:0f:9f:ab:
fd:f5:72:85:2e:06:ca:c6:6a:05:80:9a:7f:0b:b4:
4e:97:78:58:e3:d9:f6:37:8c:7a:b7:cb:24:c9:5f:
0f:7c:5f:09:12:f7:b4:57:65:7a:4f:c0:f2:2e:6f:
c2:cc:ad:72:5e:90:d0:05:21:7b:d9:bf:9a:51:08:
ba:09:c5:ee:b8:38:1c:1e:81:61:d8:58:25:3d:25:
a0:2e:3f:e8:b0:be:c2:66:a1:90:65:11:1b:42:a9:
cc:e8:b1:e3:80:00:c3:ff:be:fa:fa:81:44:15:30:
aa:ed:77:1e:17:28:55:42:b3:3f:ae:ad:be:82:ef:
f2:32:ee:a6:c2:1f:aa:9e:e3:65:61:9a:13:f9:30:
7d:45:c3:dd:08:6d:6a:a9:e7:d1:f6:41:a6:4e:0c:
74:6b:3c:2b:bc:0a:0e:62:9b:57:7d:8e:7a:6d:c8:
e8:3d:a6:85:20:0b:bd:98:7d:5b:5f:3b:af:95:db:
43:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:4F:9E:9A:CC:06:65:01:05:B9:3C:37:26:94:16:82:46:3B:BB:3B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Lk-emswGZQEFuTw3JpQWgkY7uzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.59.0/24
31.56.67.0/24
31.56.69.0/24
31.56.72.0/24
31.56.84.0/24
31.56.88.0/24
31.56.120.0/22
31.56.126.0/24
31.56.200.0/24
31.56.202.0/24
31.57.104.0/21
31.57.132.0/23
31.57.181.0/24
31.57.215.0/24
31.57.219.0/24
31.57.221.0/24
31.57.255.0/24
31.58.88.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:7a:b7:59:09:12:97:4c:4f:c9:92:10:7c:84:5d:2b:77:bf:
9e:bb:eb:6f:3f:91:ea:b1:59:b3:c3:13:ec:a3:cf:6c:67:1e:
08:36:ad:0e:4b:23:c4:54:56:0f:2a:52:f2:e7:ad:5e:83:b3:
b2:72:63:e0:de:50:b5:b1:82:3c:34:5f:93:76:c0:60:7d:65:
ef:d9:61:35:82:07:0b:a7:7a:c7:f6:56:5f:56:9a:b6:cf:b6:
1d:f5:df:bb:a8:9f:1d:3a:86:67:82:f2:ab:c4:e6:5f:26:57:
84:ed:7d:be:e5:63:87:cb:73:92:05:e4:17:55:68:2c:5e:23:
63:77:67:de:51:29:d3:bd:15:b9:ac:f6:21:cc:a9:42:aa:d0:
3f:5b:f0:aa:a7:ab:7c:bd:05:4f:a9:cc:36:cf:01:fb:e2:bd:
b2:81:41:64:fd:2c:e0:90:62:a8:e7:d6:c1:b7:9a:eb:8a:55:
3e:e2:33:74:04:2b:ee:d6:d7:a1:75:1c:96:6e:d3:47:91:35:
e0:77:95:5d:6f:6b:b0:3e:86:a5:e6:06:21:5b:6a:6c:f3:74:
2b:3f:a9:ba:53:76:6e:14:40:32:fd:3d:27:e2:c4:40:09:0d:
a3:e9:62:98:05:e2:e3:72:de:e1:12:43:f1:7b:a6:55:e7:8a:
ee:e0:90:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:40:51 2025 by rpki-client