Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NbfNfjAOpZXNyZ7uosvIQTxOnvQ.roa
File: NbfNfjAOpZXNyZ7uosvIQTxOnvQ.roa (raw, json)
Hash identifier: +qAEEZgrifk8bYBW8gFb/ebUDQH2PzN1QguOmuPH8so=
Subject key identifier: 35:B7:CD:7E:30:0E:A5:95:CD:C9:9E:EE:A2:CB:C8:41:3C:4E:9E:F4
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195943B514CFD5EB6DFCF9DED33444EA004
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NbfNfjAOpZXNyZ7uosvIQTxOnvQ.roa
Signing time: Fri 14 Mar 2025 10:37:50 +0000
ROA not before: Fri 14 Mar 2025 10:37:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 31.56.73.0/24 maxlen: 24
31.56.85.0/24 maxlen: 24
31.57.153.0/24 maxlen: 24
31.57.236.0/24 maxlen: 24
31.58.43.0/24 maxlen: 24
31.58.76.0/22 maxlen: 24
31.58.128.0/24 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.162.0/24 maxlen: 24
31.58.164.0/24 maxlen: 24
31.58.166.0/24 maxlen: 24
31.59.88.0/24 maxlen: 24
31.59.122.0/24 maxlen: 24
31.59.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 16 Mar 2025 15:43:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:94:3b:51:4c:fd:5e:b6:df:cf:9d:ed:33:44:4e:a0:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 14 10:37:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35b7cd7e300ea595cdc99eeea2cbc8413c4e9ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:42:9a:49:ca:a8:b3:51:b7:37:95:71:91:bd:
20:a2:26:57:27:bf:f5:12:dd:0b:0b:3e:d2:00:7f:
fa:24:55:bc:dd:b2:4e:ba:d7:60:07:19:40:14:ad:
d1:58:44:ea:03:9a:00:73:06:58:af:7f:1e:29:32:
c9:9a:f0:c5:e7:80:94:43:d7:81:a0:6a:b4:9e:1e:
2a:4f:f8:0f:a9:11:6c:00:d4:a2:74:05:7f:e1:77:
da:e9:15:b4:8d:72:f5:d8:53:48:2d:10:5a:48:f7:
12:1c:53:01:32:b6:40:6e:d5:af:e6:45:dd:0e:99:
41:0e:0b:d5:20:7b:f6:ad:58:cc:0c:e6:e7:36:1d:
58:ce:56:2f:5e:2c:37:93:1b:f4:7a:a7:c8:b4:09:
49:0c:7f:3d:48:bd:b3:ba:54:d7:e6:af:0d:e4:8b:
d1:d1:96:2a:a9:7f:b4:16:fe:ef:6c:46:9f:87:12:
b2:8f:2d:48:f0:35:e3:d3:00:4a:32:9f:41:11:cd:
e2:f4:d4:a6:c7:a2:4e:77:9c:f8:59:8f:47:81:0b:
4e:c2:59:93:92:c7:d8:f8:22:5b:80:c5:34:33:01:
b8:20:de:9a:ea:86:46:74:a6:83:65:e8:f6:06:49:
bc:c3:27:ff:d7:54:1a:66:f7:48:98:b2:7a:19:6f:
2a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B7:CD:7E:30:0E:A5:95:CD:C9:9E:EE:A2:CB:C8:41:3C:4E:9E:F4
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NbfNfjAOpZXNyZ7uosvIQTxOnvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.73.0/24
31.56.85.0/24
31.57.153.0/24
31.57.236.0/24
31.58.43.0/24
31.58.76.0/22
31.58.128.0/24
31.58.153.0/24
31.58.162.0/24
31.58.164.0/24
31.58.166.0/24
31.59.88.0/24
31.59.122.0/23
Signature Algorithm: sha256WithRSAEncryption
80:81:23:62:bc:6f:6b:c2:ab:2b:da:a7:d3:25:b4:a4:c0:38:
34:03:f7:db:2a:b5:e3:c0:1a:17:bb:a6:a6:3e:a7:be:24:80:
c2:a3:3b:ef:8a:0e:d8:de:bd:6c:db:68:b0:5b:53:d4:b5:85:
6f:a1:a1:bc:8c:27:e3:b0:af:77:05:8a:8b:8f:82:73:32:eb:
01:89:ea:66:1d:f0:f7:7d:3d:dd:5a:e9:f1:7f:f3:8b:7d:80:
b2:5e:01:a2:82:1d:ea:b9:16:3e:76:b6:af:1c:6b:95:37:71:
1c:6b:94:a1:8b:07:fc:67:9e:0a:eb:e1:60:1c:b6:93:e3:91:
f5:f5:ce:75:0b:1e:05:aa:f5:74:29:f4:02:18:0f:4e:5e:36:
58:e1:4a:af:e5:40:10:3e:1a:d4:7d:65:21:ed:7a:1b:60:40:
0e:52:a9:39:02:30:b8:6b:91:96:5e:91:de:ee:6d:d9:ad:ac:
a2:f6:83:3e:7a:28:85:9d:8e:34:47:39:6d:30:bd:eb:cc:f5:
2e:00:e5:e3:36:ae:1c:0e:90:3c:3d:38:0f:ef:60:b4:42:a7:
3e:a0:84:5c:9e:73:95:ab:22:b6:4e:04:c8:0a:a4:46:01:1b:
29:27:f8:b7:07:27:54:96:09:01:28:c5:85:50:56:3b:12:70:
5c:c3:9b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:54:25 2025 by rpki-client