Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MOyzaB9qMbVB9Wc_mb2Qa-rdDbQ.roa
File: MOyzaB9qMbVB9Wc_mb2Qa-rdDbQ.roa (raw, json)
Hash identifier: BYlaBOxGx+ehz/3gfC99eD54wzm0BE10XJtOi3oPYGM=
Subject key identifier: 30:EC:B3:68:1F:6A:31:B5:41:F5:67:3F:99:BD:90:6B:EA:DD:0D:B4
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194F0C506654D9718F3CC20632E3A6517F5
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MOyzaB9qMbVB9Wc_mb2Qa-rdDbQ.roa
Signing time: Mon 10 Feb 2025 16:50:31 +0000
ROA not before: Mon 10 Feb 2025 16:50:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 31.56.62.0/24 maxlen: 24
31.56.87.0/24 maxlen: 24
31.56.122.0/24 maxlen: 24
31.57.65.0/24 maxlen: 24
31.57.132.0/24 maxlen: 24
31.57.222.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 09:32:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f0:c5:06:65:4d:97:18:f3:cc:20:63:2e:3a:65:17:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 10 16:50:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30ecb3681f6a31b541f5673f99bd906beadd0db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:57:e0:7a:dd:24:a0:fe:c4:a3:23:b0:30:1f:
95:df:04:1f:aa:fa:2b:cc:66:f4:e7:50:f9:b5:92:
b0:4d:1d:3d:d0:5c:a1:ea:d8:14:25:5f:5e:3f:8f:
1b:3e:c9:bb:ca:f4:ce:73:93:45:8f:04:ff:d6:ca:
21:b1:7b:da:c2:31:bb:52:4c:6f:66:d0:bc:ff:49:
0f:13:0e:d1:f9:76:da:e1:6f:36:4d:63:99:ff:2a:
57:50:b2:0b:21:ca:f0:df:4b:69:a4:ca:5e:85:76:
eb:6c:22:ce:a9:3d:4b:01:64:73:ab:0e:85:65:4d:
51:ad:23:37:ce:22:d0:47:e0:02:ab:5b:8d:24:82:
1c:c3:f7:e6:a4:22:61:f5:63:41:37:98:ee:43:e6:
7b:74:32:aa:af:cc:35:6f:bb:c8:66:27:3c:1f:e1:
ae:8c:c1:18:6e:f8:d0:94:07:5c:9b:5d:09:78:1e:
81:f3:5f:bd:b8:28:13:3d:53:b2:92:ff:2f:63:a6:
5e:50:64:06:80:e4:b7:3a:fb:5d:dc:eb:61:31:b8:
4d:8c:48:da:4c:67:c7:ba:65:32:f0:d9:b3:1d:47:
dd:a1:fa:0f:a6:14:c9:77:58:1d:d4:4c:df:5e:2d:
25:1f:54:b3:94:d9:ff:67:10:d8:cf:0f:0b:b6:ec:
fd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EC:B3:68:1F:6A:31:B5:41:F5:67:3F:99:BD:90:6B:EA:DD:0D:B4
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MOyzaB9qMbVB9Wc_mb2Qa-rdDbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.62.0/24
31.56.87.0/24
31.56.122.0/24
31.57.65.0/24
31.57.132.0/24
31.57.222.0/23
Signature Algorithm: sha256WithRSAEncryption
78:69:75:3f:e4:c0:11:1f:e1:ff:d2:8b:ff:b4:6b:fc:41:b3:
c1:d0:35:80:b7:4c:29:7e:ae:db:2f:81:ca:16:6a:6d:eb:75:
04:80:92:cc:fd:82:fe:ea:7d:0a:e1:9d:86:12:b6:cf:dc:ad:
f1:50:cf:1e:11:2a:17:6c:17:73:b5:42:a0:84:7f:4a:aa:a8:
0a:a5:59:8f:76:87:67:f0:ff:6c:6f:17:61:c2:4f:7c:89:a5:
4d:d2:4d:fd:f4:6b:18:e7:b6:cf:93:b6:21:f2:cc:40:8d:5c:
19:80:cf:5f:56:ee:24:40:fb:80:30:71:ae:3e:d0:7f:d7:ec:
aa:1f:54:c4:ec:96:4b:df:88:ae:ce:b4:5d:e0:94:40:b8:32:
88:32:58:09:32:05:77:b2:a4:f6:24:cc:f3:07:6d:e2:a9:07:
50:d7:52:f2:82:5a:cd:55:a5:9f:53:a8:4e:c3:1c:24:51:21:
c8:ad:ca:0b:39:91:96:ff:66:76:93:06:42:89:cf:2c:a8:da:
1b:f9:89:46:cf:39:76:05:a5:03:16:8a:01:03:83:d4:f6:38:
24:b9:3f:f3:2f:ae:f3:bb:88:f9:04:aa:7f:0a:2b:95:f0:4b:
de:bb:74:b5:42:7e:b0:5c:fd:4b:89:3b:31:e6:e1:6a:ea:da:
f5:69:50:ae
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZTwxQZlTZcY88wgYy46ZRf1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMjEwMTY1MDMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMGVjYjM2ODFmNmEzMWI1NDFmNTY3M2Y5OWJkOTA2YmVhZGQwZGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlfget0koP7EoyOwMB+V3wQfqvor
zGb051D5tZKwTR090Fyh6tgUJV9eP48bPsm7yvTOc5NFjwT/1sohsXvawjG7Ukxv
ZtC8/0kPEw7R+Xba4W82TWOZ/ypXULILIcrw30tppMpehXbrbCLOqT1LAWRzqw6F
ZU1RrSM3ziLQR+ACq1uNJIIcw/fmpCJh9WNBN5juQ+Z7dDKqr8w1b7vIZic8H+Gu
jMEYbvjQlAdcm10JeB6B81+9uCgTPVOykv8vY6ZeUGQGgOS3Ovtd3OthMbhNjEja
TGfHumUy8NmzHUfdofoPphTJd1gd1EzfXi0lH1SzlNn/ZxDYzw8Ltuz9ywIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFDDss2gfajG1QfVnP5m9kGvq3Q20MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvTU95emFCOXFNYlZCOVdjX21iMlFhLXJkRGJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAHzg+AwQA
HzhXAwQAHzh6AwQAHzlBAwQAHzmEAwQBHzneMA0GCSqGSIb3DQEBCwUAA4IBAQB4
aXU/5MARH+H/0ov/tGv8QbPB0DWAt0wpfq7bL4HKFmpt63UEgJLM/YL+6n0K4Z2G
ErbP3K3xUM8eESoXbBdztUKghH9KqqgKpVmPdodn8P9sbxdhwk98iaVN0k399GsY
57bPk7Yh8sxAjVwZgM9fVu4kQPuAMHGuPtB/1+yqH1TE7JZL34iuzrRd4JRAuDKI
MlgJMgV3sqT2JMzzB23iqQdQ11LyglrNVaWfU6hOwxwkUSHIrcoLOZGW/2Z2kwZC
ic8sqNob+YlGzzl2BaUDFooBA4PU9jgkuT/zL67zu4j5BKp/CiuV8Eveu3S1Qn6w
XP1LiTsx5uFq6tr1aVCu
-----END CERTIFICATE-----
Generated at Mon Apr 28 14:25:32 2025 by rpki-client