Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QH4kJE00JUifanhR9zebcARxAOs.roa
File: QH4kJE00JUifanhR9zebcARxAOs.roa (raw, json)
Hash identifier: DJ/U9hQk0LT6dz3I6wD86TgQZ2DHPgOvTjbz2sL2Mx0=
Subject key identifier: 40:7E:24:24:4D:34:25:48:9F:6A:78:51:F7:37:9B:70:04:71:00:EB
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193BBA0E02A5F02DD80D6D0C72E2CD30166
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QH4kJE00JUifanhR9zebcARxAOs.roa
Signing time: Thu 12 Dec 2024 16:08:22 +0000
ROA not before: Thu 12 Dec 2024 16:08:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.50.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.85.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.156.0/24 maxlen: 24
31.57.65.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.146.0/23 maxlen: 24
31.57.166.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.204.0/24 maxlen: 24
31.57.207.0/24 maxlen: 24
31.57.228.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.58.130.0/24 maxlen: 24
31.58.131.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.167.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Dec 2024 08:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bb:a0:e0:2a:5f:02:dd:80:d6:d0:c7:2e:2c:d3:01:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 12 16:08:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=407e24244d3425489f6a7851f7379b70047100eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b4:25:ca:cb:1a:99:c4:f1:2d:37:35:e7:6c:
ee:0e:ca:ef:f6:12:a0:78:11:75:73:17:b7:09:81:
f6:a4:12:7f:d7:06:7b:39:b7:62:97:57:cb:97:bf:
7d:cc:d9:ec:6e:30:e3:b2:e4:62:c0:b1:fc:ac:a7:
91:4c:17:82:60:fb:73:5c:17:c7:43:16:65:81:a5:
cd:08:17:86:f4:75:d4:c2:6a:70:fe:a1:bd:4c:4f:
a4:56:a9:d6:b9:4e:26:fc:9b:17:78:6a:93:b9:e3:
ed:f6:53:0f:61:87:75:87:12:37:08:ec:56:e8:c9:
d7:78:28:8a:5a:bf:bf:3e:14:55:1e:c0:f6:26:fc:
26:ab:3a:26:c7:42:b9:f5:e9:ec:fc:59:28:37:32:
87:7c:a5:23:39:35:ea:00:3e:0c:ad:a5:7c:6b:f5:
bf:7e:6e:04:c5:8f:76:a0:27:82:30:fe:82:e3:d9:
00:47:9b:8d:7c:91:13:db:92:95:2b:59:fa:bc:02:
7c:6e:07:73:80:97:a4:00:08:1a:8d:a5:11:a1:ff:
55:dc:00:ec:99:99:89:8c:ec:df:ed:35:3b:63:b6:
36:d7:da:c8:04:45:d1:19:d0:dd:2d:61:d9:c1:e5:
dc:71:0e:e7:66:72:8d:16:04:02:c4:c3:82:39:0c:
2f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7E:24:24:4D:34:25:48:9F:6A:78:51:F7:37:9B:70:04:71:00:EB
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QH4kJE00JUifanhR9zebcARxAOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.50.0/23
31.56.57.0/24
31.56.85.0/24
31.56.89.0/24
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.156.0/24
31.57.65.0/24
31.57.132.0/23
31.57.146.0/23
31.57.166.0/24
31.57.176.0/21
31.57.188.0/24
31.57.192.0/22
31.57.200.0/23
31.57.204.0/24
31.57.207.0/24
31.57.228.0/24
31.57.232.0/22
31.58.130.0/23
31.58.152.0/22
31.58.167.0/24
31.59.96.0/22
31.59.112.0/22
31.59.184.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:fc:a6:7d:0e:cb:13:00:ce:9a:21:46:d2:ab:a1:f0:78:50:
74:56:13:a8:d1:ee:fc:8d:45:c5:7f:20:4a:1c:f1:b0:32:7c:
0b:d4:6f:d6:67:6d:36:c9:63:c6:47:a6:3f:8e:5e:9b:93:92:
f5:e0:dc:99:49:0a:e1:0a:a0:c0:1b:48:11:1e:c3:3f:7c:53:
ad:04:76:a9:f5:e4:96:04:3c:f4:45:87:68:f9:e4:34:51:4b:
9c:5f:09:6d:6c:ba:af:d2:89:92:69:27:05:3d:fc:eb:07:84:
7b:5a:af:6f:b3:7f:64:43:0a:5b:e7:22:bf:72:41:6b:06:9e:
62:19:5d:47:70:52:ce:ba:69:a4:dc:3d:71:3c:68:c6:e4:45:
6c:8e:1a:ee:ac:d5:94:7b:c6:fe:50:a2:2a:fc:a1:6b:06:9f:
ed:18:0b:07:2b:7b:92:f9:c5:f3:40:4a:54:60:d0:4e:1a:1c:
00:2e:4a:b2:bd:5f:22:ee:d4:84:85:c3:38:2a:14:5d:30:97:
b9:9f:ea:eb:8c:50:24:c3:9c:23:67:84:f5:52:43:0d:ff:27:
6e:64:18:68:7f:25:e9:0c:a0:b1:fa:70:74:74:ab:19:74:aa:
1c:62:ce:e3:b6:82:1a:81:61:4d:db:ce:b3:0c:31:40:1d:b5:
08:56:3f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:24:11 2025 by rpki-client