Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/P904TC1jhMQ_qHyeSaqFUTKuuOo.roa
File: P904TC1jhMQ_qHyeSaqFUTKuuOo.roa (raw, json)
Hash identifier: liaMtz6X6JEuQivhMTNvEivc2WPkR92l5zaIxJ46Jis=
Subject key identifier: 3F:DD:38:4C:2D:63:84:C4:3F:A8:7C:9E:49:AA:85:51:32:AE:B8:EA
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01946EF6AA05D4BC5B6EF4DE1B0FEF85C13D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/P904TC1jhMQ_qHyeSaqFUTKuuOo.roa
Signing time: Thu 16 Jan 2025 11:54:06 +0000
ROA not before: Thu 16 Jan 2025 11:54:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36530
IP address blocks: 31.56.69.0/24 maxlen: 24
31.56.72.0/24 maxlen: 24
31.56.84.0/24 maxlen: 24
31.56.200.0/24 maxlen: 24
31.56.202.0/24 maxlen: 24
31.57.132.0/24 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.221.0/24 maxlen: 24
31.57.255.0/24 maxlen: 24
31.58.88.0/24 maxlen: 24
31.58.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 Jan 2025 11:55:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6e:f6:aa:05:d4:bc:5b:6e:f4:de:1b:0f:ef:85:c1:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 16 11:54:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3fdd384c2d6384c43fa87c9e49aa855132aeb8ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b1:06:33:ca:5c:1d:a3:e4:fb:50:d2:4b:52:
9e:f3:2d:cd:81:4f:a6:7f:fd:9b:27:32:58:9a:2a:
e3:8a:1d:64:fa:41:12:4a:0d:a1:bc:d6:df:6e:de:
36:c6:9a:d5:26:9a:62:2f:04:d9:1f:c6:25:b4:6b:
b4:aa:20:2a:7a:f4:56:06:96:a9:4a:14:e8:28:1a:
32:42:1b:1a:22:ec:56:a0:26:c8:5f:c7:ef:2e:14:
36:c9:e8:e3:fa:8c:7c:2d:cf:72:f3:e4:4d:8d:11:
ba:54:0a:19:08:d2:8e:25:33:e1:8d:09:6a:79:78:
42:4d:d0:09:71:67:c1:52:c6:ba:a7:20:f3:be:f8:
88:b9:7f:cc:03:f0:80:7c:ee:0a:0e:2d:d3:cc:21:
09:02:9e:aa:6e:ba:b3:7a:4e:6d:47:76:c9:2a:0d:
d3:8c:55:1d:19:f2:87:ff:a9:f7:d9:39:68:f6:2e:
15:3a:d1:a2:b1:c2:9b:fd:a4:93:5a:33:9b:8e:b4:
e2:b4:e3:01:80:6e:42:94:fa:47:3b:9c:07:ee:f6:
6b:d4:10:da:08:98:17:2d:15:f2:06:ca:6a:02:a0:
91:2e:b8:73:11:8e:b3:da:c8:b3:26:5c:93:0a:a2:
15:ae:1b:4d:0d:a9:f1:30:59:9b:81:ee:a6:17:5a:
f0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DD:38:4C:2D:63:84:C4:3F:A8:7C:9E:49:AA:85:51:32:AE:B8:EA
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/P904TC1jhMQ_qHyeSaqFUTKuuOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.69.0/24
31.56.72.0/24
31.56.84.0/24
31.56.200.0/24
31.56.202.0/24
31.57.132.0/24
31.57.181.0/24
31.57.219.0/24
31.57.221.0/24
31.57.255.0/24
31.58.88.0/23
Signature Algorithm: sha256WithRSAEncryption
59:df:28:d4:90:96:7a:02:ec:ea:d7:bc:2e:61:0c:b0:4d:e6:
d0:78:6b:af:b3:89:19:51:97:cb:c1:bd:e1:ab:6a:d9:4b:8d:
be:3a:c3:e3:d7:1f:37:81:f1:ba:10:2b:1a:75:94:59:07:71:
a6:2c:e0:d3:3c:63:31:e2:8d:79:64:74:ea:cd:9d:81:25:72:
0c:fb:2e:54:e5:ce:13:c2:25:20:da:70:82:4c:3a:8b:df:3c:
d9:db:6c:a0:9d:ca:c0:7d:e7:0b:61:a0:a1:f8:fd:ee:f2:18:
36:6e:de:dc:ae:45:1f:55:7a:2c:35:48:86:56:bf:a1:eb:6e:
a5:16:87:8b:bb:0f:9a:e9:42:ad:f4:72:9b:3f:4b:b1:cc:8e:
9a:b6:8f:98:a8:21:a5:74:01:90:cc:54:7f:1c:c5:01:e8:87:
fb:c7:af:86:5b:d8:fa:53:d8:e3:29:0c:6f:15:04:69:03:41:
5c:60:81:c0:cb:fe:b1:ab:3a:ae:d7:47:56:fa:d3:f5:af:db:
f7:bb:f8:7a:a3:85:34:ac:f2:f9:eb:2c:58:1f:43:a6:f2:d1:
3c:ff:2e:e7:51:79:2d:a2:a0:13:69:1c:3b:3e:7e:65:79:f8:
9e:47:b3:80:5c:07:0e:b0:b5:9e:06:27:72:1d:e0:3d:a6:ea:
3b:9b:93:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:16:20 2025 by rpki-client