Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/V2neQo7ZGbDsBczA848gBdhHWfc.roa
File: V2neQo7ZGbDsBczA848gBdhHWfc.roa (raw, json)
Hash identifier: f1AN4bFOTb7Tmx6ZhJfRfhXvW3NEtZldZSMIMiv6dPs=
Subject key identifier: 57:69:DE:42:8E:D9:19:B0:EC:05:CC:C0:F3:8F:20:05:D8:47:59:F7
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195EB42AC81C48A3FC072CEE21831D9D9A1
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/V2neQo7ZGbDsBczA848gBdhHWfc.roa
Signing time: Mon 31 Mar 2025 08:12:50 +0000
ROA not before: Mon 31 Mar 2025 08:12:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214024
IP address blocks: 31.56.69.0/24 maxlen: 24
31.56.72.0/24 maxlen: 24
31.56.84.0/24 maxlen: 24
31.56.90.0/24 maxlen: 24
31.56.91.0/24 maxlen: 24
31.56.202.0/24 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.221.0/24 maxlen: 24
31.57.252.0/24 maxlen: 24
31.57.253.0/24 maxlen: 24
31.58.88.0/24 maxlen: 24
31.58.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Mar 2025 14:37:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:eb:42:ac:81:c4:8a:3f:c0:72:ce:e2:18:31:d9:d9:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 31 08:12:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5769de428ed919b0ec05ccc0f38f2005d84759f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d1:91:58:41:7f:8e:7b:b9:5d:dc:a8:9a:ad:
85:54:01:29:80:3a:ea:74:cc:8e:b6:a7:09:e8:83:
a3:78:41:4a:9c:02:f9:90:c4:3a:71:63:95:b1:53:
7b:c7:4b:59:e1:2e:fa:6d:c6:96:49:44:4e:fd:d1:
cc:01:d1:0f:8e:92:29:8e:63:22:ee:a8:af:c8:ee:
65:3f:d0:d6:8f:30:b1:c2:7b:f3:ef:b0:da:22:88:
cb:b6:5a:45:1a:1d:5f:b3:99:21:5a:d3:20:68:52:
5b:4d:44:a4:9e:57:d9:2e:17:bf:d6:74:83:4a:a4:
67:ce:73:54:fd:a0:97:58:5d:0b:11:01:53:ee:48:
0a:ca:49:5a:0b:63:e2:43:b8:70:96:a1:ba:84:13:
f3:95:12:9b:06:0b:fc:c1:2a:05:f6:34:e2:a8:f5:
90:1b:14:4d:17:a3:af:19:7d:68:fd:c6:25:95:09:
2b:2d:c5:55:72:64:e7:83:08:a4:58:af:f2:74:08:
b4:1b:af:31:0d:bd:58:4b:05:8b:43:4c:a3:6c:6b:
a5:2e:4c:3d:f2:39:44:87:12:99:c4:b4:1a:c6:4b:
73:a5:88:2f:00:d7:87:20:21:ad:f1:20:8d:4b:22:
95:56:12:35:b0:2e:ab:87:91:b5:aa:06:b1:7a:96:
ac:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:69:DE:42:8E:D9:19:B0:EC:05:CC:C0:F3:8F:20:05:D8:47:59:F7
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/V2neQo7ZGbDsBczA848gBdhHWfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.69.0/24
31.56.72.0/24
31.56.84.0/24
31.56.90.0/23
31.56.202.0/24
31.57.181.0/24
31.57.221.0/24
31.57.252.0/23
31.58.88.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:77:47:f1:75:37:a4:0a:e9:46:e2:ae:3c:b8:b7:96:8a:af:
92:5a:95:36:f7:17:8d:6a:b1:e6:be:56:9e:bc:b6:39:9f:ac:
f1:ea:28:05:d0:43:07:df:4e:10:71:7f:82:54:4b:13:91:74:
bf:d9:9c:65:79:7d:ce:4a:d1:04:69:9c:e2:b5:a2:6b:e6:7f:
a4:46:14:2d:b4:00:d7:44:cd:27:cc:5b:fe:b0:b3:c1:42:0a:
7e:ee:e6:59:bf:6b:be:62:1a:e3:84:66:a8:aa:f4:e7:63:91:
07:72:42:2b:45:2e:a3:d2:c0:18:45:8a:de:57:6e:d6:ad:be:
24:59:f6:9a:f8:3f:3b:d9:8b:1d:a4:eb:8c:98:dd:e1:40:58:
6e:ac:87:6f:5c:23:b2:4d:60:e2:be:f8:1a:ea:68:cf:00:71:
9d:a3:72:2e:2a:57:9d:fe:18:bb:95:16:c7:57:58:d4:c7:89:
f2:ae:ec:6f:8d:1a:8e:1a:25:93:9e:39:c4:37:b8:86:59:d5:
ae:c6:8a:d7:31:f5:1e:f9:16:29:fb:e7:65:23:e1:1f:17:dd:
39:54:8f:2f:af:10:3b:0e:62:73:6a:23:76:44:4f:fb:fe:cf:
45:aa:eb:c3:d4:aa:2f:8f:25:91:1a:69:46:0b:fc:15:d3:a1:
c2:a8:ec:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:10:55 2025 by rpki-client