Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RxBB_lk0sMCTo2KFMDbQ5FpBMXE.roa
File: RxBB_lk0sMCTo2KFMDbQ5FpBMXE.roa (raw, json)
Hash identifier: +a4+mGAn1ucs2G8vtCtqZS6gc2kvMdF4Z1NX1GHLgz0=
Subject key identifier: 47:10:41:FE:59:34:B0:C0:93:A3:62:85:30:36:D0:E4:5A:41:31:71
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01948284C534FB493A948416E9D695F4E5ED
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RxBB_lk0sMCTo2KFMDbQ5FpBMXE.roa
Signing time: Mon 20 Jan 2025 07:02:06 +0000
ROA not before: Mon 20 Jan 2025 07:02:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.74.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.120.0/24 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.122.0/24 maxlen: 24
31.56.123.0/24 maxlen: 24
31.56.156.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.65.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.33.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.142.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.163.0/24 maxlen: 24
31.58.230.0/23 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.42.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.108.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
31.59.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Jan 2025 11:46:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:82:84:c5:34:fb:49:3a:94:84:16:e9:d6:95:f4:e5:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 20 07:02:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=471041fe5934b0c093a362853036d0e45a413171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:79:27:d7:61:52:a1:77:80:80:e1:d8:55:7b:
7e:43:cb:76:0f:9e:ef:90:04:13:9d:e4:64:bc:95:
11:46:06:ae:b9:8d:60:bd:7b:ff:18:b6:66:b3:73:
77:b6:8f:02:5c:f9:9b:55:1a:8b:f7:cb:27:54:7e:
95:64:f5:4c:fb:b7:61:30:77:30:e6:8f:e6:c9:ba:
0e:9e:fb:38:76:35:37:55:3b:2f:ba:86:69:eb:74:
87:50:24:4f:c2:4e:97:02:de:62:7f:2c:0e:e3:de:
44:6a:9e:82:16:5f:de:9f:4a:b9:89:25:88:f6:4c:
33:de:4f:bb:1b:55:f4:88:09:9f:3b:46:f5:4c:d7:
88:60:3c:ec:fb:1d:a6:46:7e:14:bd:92:23:03:ad:
45:56:69:2c:bc:a4:b8:3f:84:7a:9c:5e:1f:cd:f9:
4d:be:29:31:57:31:b6:96:a6:7c:71:15:dd:c0:c9:
54:db:4e:d1:c6:5d:95:29:f1:4d:87:a8:cb:90:7a:
a8:02:43:39:9c:6f:df:2d:04:80:cb:5c:94:80:99:
8e:72:e2:dc:21:0d:2d:9d:1b:77:dd:c4:75:e1:8b:
b8:61:77:98:a0:f5:77:c7:25:25:d7:fc:8e:e1:0a:
ce:16:1f:bb:f3:66:d5:96:7a:16:60:e4:e2:30:bf:
c1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:10:41:FE:59:34:B0:C0:93:A3:62:85:30:36:D0:E4:5A:41:31:71
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RxBB_lk0sMCTo2KFMDbQ5FpBMXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.74.0/24
31.56.89.0-31.56.91.255
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.156.0/24
31.56.200.0/22
31.57.65.0/24
31.57.104.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.176.0/21
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.33.0-31.58.35.255
31.58.142.0/24
31.58.152.0/22
31.58.163.0/24
31.58.230.0/23
31.59.41.0-31.59.42.255
31.59.57.0/24
31.59.96.0/22
31.59.108.0/24
31.59.112.0/22
31.59.184.0/22
31.59.228.0/24
Signature Algorithm: sha256WithRSAEncryption
17:d1:81:1a:f7:54:11:2c:0e:2f:20:1b:2f:88:93:21:e1:8d:
6a:fb:94:5d:19:18:b1:33:72:af:fa:24:b2:df:cb:a5:30:5d:
f0:dd:74:6c:fa:ec:a0:5b:31:c7:68:e6:7d:27:e7:12:c2:7f:
a7:24:8c:df:98:44:c6:56:44:1d:55:88:78:8a:cc:9f:7f:38:
fa:a2:60:73:ad:3e:72:44:d1:ef:b0:ad:b2:c6:c7:71:cf:e8:
a6:1d:c8:cd:cf:6f:67:2e:ab:a5:0b:c3:44:a2:47:8e:ea:1d:
c7:67:1f:55:6f:11:f3:b2:7e:dd:5e:52:77:5b:6c:94:37:fc:
cf:82:e8:08:b0:67:ef:36:6e:b5:b0:7b:69:9d:4e:46:30:ae:
8f:18:11:ac:ee:3c:b5:29:db:de:d9:84:16:f2:ac:52:df:e0:
c3:84:10:66:ca:b7:66:01:6a:df:f5:20:38:18:1c:e8:0f:79:
51:72:cd:19:f9:ee:2e:11:01:fe:94:1d:5f:0a:59:51:7b:81:
eb:29:7c:4c:d2:1e:ed:90:12:f6:9d:e2:d5:4a:c8:e5:f7:ee:
14:fe:c9:e7:e0:5c:35:df:b9:78:85:3d:26:b2:f4:49:40:04:
e3:62:40:10:ae:69:76:27:3e:a1:93:65:33:df:e1:ae:54:91:
ca:66:a5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:17:14 2025 by rpki-client