Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/N3vpnVi2KoXh7gY_9cmfh6gZnLU.roa
File: N3vpnVi2KoXh7gY_9cmfh6gZnLU.roa (raw, json)
Hash identifier: poiZtQrgbZKf+Xhe37j72m8Ork/9sai89MtlEubxCjM=
Subject key identifier: 37:7B:E9:9D:58:B6:2A:85:E1:EE:06:3F:F5:C9:9F:87:A8:19:9C:B5
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019369FB3222E3DC84FD933C1C9FC188EB92
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/N3vpnVi2KoXh7gY_9cmfh6gZnLU.roa
Signing time: Tue 26 Nov 2024 19:38:10 +0000
ROA not before: Tue 26 Nov 2024 19:38:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.3.0/24 maxlen: 24
31.56.4.0/23 maxlen: 23
31.56.22.0/24 maxlen: 24
31.56.24.0/24 maxlen: 24
31.56.26.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.48.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.127.0/24 maxlen: 24
31.57.65.0/24 maxlen: 24
31.57.67.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.146.0/23 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.58.49.0/24 maxlen: 24
31.59.184.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Nov 2024 07:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:fb:32:22:e3:dc:84:fd:93:3c:1c:9f:c1:88:eb:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 26 19:38:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=377be99d58b62a85e1ee063ff5c99f87a8199cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:84:f4:71:4e:eb:45:83:cb:2b:3b:d5:94:45:
29:2e:f9:a3:ff:a0:54:0f:27:ca:31:d4:37:55:a7:
db:d1:9f:36:24:d5:fc:60:aa:41:fa:c9:21:02:3e:
30:13:94:ba:19:13:5f:ae:e7:d9:ff:2e:a0:dc:8e:
5c:65:09:77:28:3b:58:86:05:47:be:0c:2f:ce:24:
0a:fe:e9:09:8d:8f:78:f3:fc:a0:d4:42:db:f5:c0:
ab:74:8a:19:09:a2:cc:f0:fb:ac:ff:e3:d1:cf:a2:
45:8f:57:13:71:9d:bb:eb:6e:88:6b:2b:16:5b:26:
6c:4c:a6:3a:0f:18:87:7d:f2:f4:e1:f2:7c:07:d1:
f6:c2:ce:d4:7b:37:99:cb:3d:77:63:1f:23:db:6f:
6d:ca:d4:b0:a9:17:0e:83:04:fa:f8:52:8f:4d:45:
64:de:ce:a3:d5:1e:f9:eb:f8:2e:43:26:a3:60:c6:
d7:38:49:af:2d:03:94:8a:39:e6:6c:5d:35:36:39:
04:ae:cf:ce:04:b0:bb:fa:fc:88:c8:f6:3a:7c:11:
e7:a8:37:b3:a0:c4:75:fc:56:09:87:c9:3d:71:a9:
6f:cd:bb:60:b8:44:1e:51:b0:74:25:6d:ad:b7:e2:
1c:2b:b2:d4:6a:8c:8b:91:d8:de:37:b1:a9:58:66:
fa:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:7B:E9:9D:58:B6:2A:85:E1:EE:06:3F:F5:C9:9F:87:A8:19:9C:B5
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/N3vpnVi2KoXh7gY_9cmfh6gZnLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.3.0-31.56.5.255
31.56.22.0/24
31.56.24.0/24
31.56.26.0/24
31.56.42.0/23
31.56.48.0/24
31.56.57.0/24
31.56.89.0/24
31.56.120.0/22
31.56.127.0/24
31.57.65.0/24
31.57.67.0/24
31.57.132.0/23
31.57.146.0/23
31.57.176.0/21
31.57.192.0/22
31.57.232.0/22
31.58.49.0/24
31.59.184.0/22
Signature Algorithm: sha256WithRSAEncryption
38:eb:1b:2c:7e:ec:32:a6:f1:e2:18:e0:0d:b9:b6:d5:44:9e:
63:28:32:4a:be:90:e3:9d:ad:02:b8:d9:8d:9d:ae:e9:2f:e7:
c7:f8:97:d8:d7:08:bc:79:18:0c:96:6e:da:1e:77:2f:a3:0a:
e3:ae:65:c7:41:43:86:f0:97:b5:22:1a:36:9a:6a:ca:71:b8:
00:98:1d:83:e3:2d:7b:4c:ab:7c:09:dd:1e:12:e1:7c:f8:b6:
07:ab:0a:6e:83:48:cb:d0:51:47:98:66:cc:e4:35:79:98:fd:
62:5b:10:c0:9c:9c:54:bd:79:d4:79:15:20:29:aa:2e:76:2e:
b1:3e:c2:33:6c:20:c0:7a:b6:ef:26:67:85:09:dc:52:cc:46:
ef:a2:a3:fb:7e:28:ba:75:bb:2a:51:e9:bb:ee:ad:60:b7:4c:
44:b7:6c:2c:f8:39:f1:56:ef:aa:7c:bf:2c:17:1e:b7:3d:55:
70:b4:71:4f:43:e6:25:45:9d:43:1e:8d:c3:16:fc:10:d9:ac:
e8:92:15:3e:7d:25:f6:e7:74:cd:b3:bd:a6:8e:6e:70:f0:cc:
a1:a6:af:35:56:b1:1a:de:fd:10:27:89:22:23:b0:5e:13:fd:
25:2c:e0:c8:72:51:43:b0:bb:3a:af:e8:71:1f:39:a3:3e:cb:
6b:08:4f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:58:47 2025 by rpki-client