Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Mq9cxC4qDd5VXEzoOtOMNhl1U9A.roa
File: Mq9cxC4qDd5VXEzoOtOMNhl1U9A.roa (raw, json)
Hash identifier: Xehs/sKQUAPntRp5X5XBpwAsYgaiWJSqu6jhDqQW+Oo=
Subject key identifier: 32:AF:5C:C4:2E:2A:0D:DE:55:5C:4C:E8:3A:D3:8C:36:19:75:53:D0
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019374301BCC9074129426158687D49169A6
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Mq9cxC4qDd5VXEzoOtOMNhl1U9A.roa
Signing time: Thu 28 Nov 2024 19:12:10 +0000
ROA not before: Thu 28 Nov 2024 19:12:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.48.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.120.0/22 maxlen: 24
31.56.127.0/24 maxlen: 24
31.56.146.0/24 maxlen: 24
31.57.65.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.146.0/23 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.184.0/23 maxlen: 24
31.57.186.0/23 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.58.129.0/24 maxlen: 24
31.59.68.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Nov 2024 07:08:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:74:30:1b:cc:90:74:12:94:26:15:86:87:d4:91:69:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 28 19:12:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32af5cc42e2a0dde555c4ce83ad38c36197553d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7c:37:10:3a:e1:44:0d:b3:ca:65:e7:a3:47:
df:54:a4:7b:a8:0a:c2:e1:60:a1:5b:36:1a:d2:53:
cd:a1:50:7a:e9:04:31:f3:09:cb:a4:f8:0c:83:77:
b8:c6:c1:50:bd:1c:c3:14:bc:de:b6:f0:70:ba:bf:
db:18:16:cc:13:87:27:74:8b:93:d3:77:24:46:ac:
8e:c9:40:bd:d9:d6:a8:0f:03:8b:fa:3a:7b:f8:fc:
0e:5d:8d:34:e5:45:bb:cf:a8:99:be:96:e0:bd:2d:
c8:26:5d:8b:06:65:8e:16:22:e8:b1:10:98:6b:7c:
1d:f9:45:57:13:4c:64:38:4f:18:b3:f3:86:56:58:
c1:f5:1f:36:69:12:cd:c7:33:a9:f1:5f:25:8e:86:
a2:ea:30:e9:15:c9:eb:ad:0c:b5:63:69:81:0f:dd:
28:50:d8:98:5e:82:b6:e3:8b:79:96:04:a1:2f:eb:
be:8e:d6:dd:bd:00:c7:9f:cf:f8:5d:cb:cf:a8:24:
83:29:78:a1:e8:90:6c:bd:77:55:4c:aa:b7:a1:d4:
7e:87:83:22:26:a8:50:b4:4c:3b:16:c4:30:8c:29:
75:f3:e7:7e:29:a6:5c:3b:46:88:5c:9f:93:6d:44:
f9:b3:65:03:b2:c3:67:ed:df:67:15:4b:b4:b7:c6:
28:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:AF:5C:C4:2E:2A:0D:DE:55:5C:4C:E8:3A:D3:8C:36:19:75:53:D0
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Mq9cxC4qDd5VXEzoOtOMNhl1U9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.48.0/24
31.56.57.0/24
31.56.89.0/24
31.56.104.0/21
31.56.120.0/22
31.56.127.0/24
31.56.146.0/24
31.57.65.0/24
31.57.132.0/23
31.57.146.0/23
31.57.176.0-31.57.188.255
31.57.192.0/22
31.57.232.0/22
31.58.129.0/24
31.59.68.0/24
31.59.96.0/22
31.59.112.0/22
31.59.184.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:c3:36:98:89:5f:6f:79:88:6b:c1:af:69:06:05:21:7f:d2:
c4:84:8e:f0:d8:82:c5:94:90:51:0c:4c:65:a9:fa:34:0c:d8:
5d:d8:71:35:3e:52:17:5f:29:19:74:7a:fd:72:77:d9:70:b0:
3c:7f:a4:9d:23:37:dc:cd:03:e5:4a:8d:e6:7c:7d:d1:b1:1d:
21:22:43:5b:4b:31:71:c9:f9:49:04:16:64:b2:5d:39:d0:79:
2b:d0:7d:ed:37:9a:09:8d:53:ff:81:89:1d:64:c5:2d:f8:f8:
8e:5c:4b:38:8d:ee:f5:ba:ec:28:bc:f0:7b:1f:c1:4c:7b:2e:
75:31:46:47:03:e7:27:8f:f4:0b:8f:9b:3e:5f:f0:e9:79:7c:
01:6a:61:5b:9a:8e:6a:0f:81:1d:6d:a0:e1:67:af:b6:97:68:
b1:bd:d0:68:21:60:fe:73:1d:9e:d9:fd:87:dd:69:11:ef:9c:
5c:5c:d4:3a:71:20:64:93:f5:c9:cf:a2:38:d7:cd:6c:f0:43:
00:cb:8a:d6:c7:4f:2e:8a:65:65:17:5e:d4:1b:bd:c2:0d:ef:
cd:10:bf:05:af:4e:20:d5:82:d6:a4:02:db:b8:6f:50:67:ee:
96:cb:2d:97:dd:e8:bd:12:6f:27:62:f2:b2:ef:8b:81:a3:ee:
b5:71:fe:71
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgISAZN0MBvMkHQSlCYVhofUkWmmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMTI4MTkxMjEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMmFmNWNjNDJlMmEwZGRlNTU1YzRjZTgzYWQzOGMzNjE5NzU1M2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3w3EDrhRA2zymXno0ffVKR7qArC
4WChWzYa0lPNoVB66QQx8wnLpPgMg3e4xsFQvRzDFLzetvBwur/bGBbME4cndIuT
03ckRqyOyUC92daoDwOL+jp7+PwOXY005UW7z6iZvpbgvS3IJl2LBmWOFiLosRCY
a3wd+UVXE0xkOE8Ys/OGVljB9R82aRLNxzOp8V8ljoai6jDpFcnrrQy1Y2mBD90o
UNiYXoK244t5lgShL+u+jtbdvQDHn8/4XcvPqCSDKXih6JBsvXdVTKq3odR+h4Mi
JqhQtEw7FsQwjCl18+d+KaZcO0aIXJ+TbUT5s2UDssNn7d9nFUu0t8YoRwIDAQAB
o4ICjjCCAoowHQYDVR0OBBYEFDKvXMQuKg3eVVxM6DrTjDYZdVPQMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvTXE5Y3hDNHFEZDVWWEV6b090T01OaGwxVTlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGjBggrBgEFBQcBBwEB/wSBkzCBkDCBjQQCAAEwgYYDBAEf
OAQDBAAfOBgDBAEfOCoDBAAfODADBAAfODkDBAAfOFkDBAMfOGgDBAIfOHgDBAAf
OH8DBAAfOJIDBAAfOUEDBAEfOYQDBAEfOZIwDAMEBB85sAMEAB85vAMEAh85wAME
Ah856AMEAB86gQMEAB87RAMEAh87YAMEAh87cAMEAh87uDANBgkqhkiG9w0BAQsF
AAOCAQEAP8M2mIlfb3mIa8GvaQYFIX/SxISO8NiCxZSQUQxMZan6NAzYXdhxNT5S
F18pGXR6/XJ32XCwPH+knSM33M0D5UqN5nx90bEdISJDW0sxccn5SQQWZLJdOdB5
K9B97TeaCY1T/4GJHWTFLfj4jlxLOI3u9brsKLzwex/BTHsudTFGRwPnJ4/0C4+b
Pl/w6Xl8AWphW5qOag+BHW2g4Wevtpdosb3QaCFg/nMdntn9h91pEe+cXFzUOnEg
ZJP1yc+iONfNbPBDAMuK1sdPLoplZRde1Bu9wg3vzRC/Ba9OINWC1qQC27hvUGfu
lsstl93ovRJvJ2Lysu+LgaPutXH+cQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 03:50:45 2025 by rpki-client