Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/V8B_01R9VZTzj8QX7ZiAHGvSV00.roa
File: V8B_01R9VZTzj8QX7ZiAHGvSV00.roa (raw, json)
Hash identifier: WITFTC6SJbKOCzTxdUtnXsIa/myO+ISPhsK40YklDJ4=
Subject key identifier: 57:C0:7F:D3:54:7D:55:94:F3:8F:C4:17:ED:98:80:1C:6B:D2:57:4D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196453F7E81FD7B8A0C81CD2D64307A7A5A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/V8B_01R9VZTzj8QX7ZiAHGvSV00.roa
Signing time: Thu 17 Apr 2025 19:35:11 +0000
ROA not before: Thu 17 Apr 2025 19:35:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 31.56.86.0/24 maxlen: 24
31.56.107.0/24 maxlen: 24
31.57.122.0/24 maxlen: 24
31.57.124.0/24 maxlen: 24
31.57.125.0/24 maxlen: 24
31.57.140.0/24 maxlen: 24
31.57.162.0/23 maxlen: 23
31.57.164.0/23 maxlen: 23
31.57.180.0/24 maxlen: 24
31.58.41.0/24 maxlen: 24
31.58.42.0/24 maxlen: 24
31.58.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 18 Apr 2025 18:23:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:3f:7e:81:fd:7b:8a:0c:81:cd:2d:64:30:7a:7a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 17 19:35:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57c07fd3547d5594f38fc417ed98801c6bd2574d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e2:e1:90:3c:ea:3e:07:ba:eb:bf:22:46:8a:
8f:4f:ca:10:fd:8a:6d:83:52:20:84:38:92:a6:fd:
f9:41:ca:64:03:ac:3c:bd:7f:2d:f8:ff:9b:30:c9:
08:82:ca:eb:55:fd:f0:96:3e:09:cc:57:5b:0d:12:
71:5d:43:a9:6a:21:96:d2:36:37:c1:b1:a8:57:4d:
1f:b8:21:af:0f:20:65:44:99:bb:14:17:e1:a2:b6:
d7:b9:6c:95:2d:17:d3:ba:6b:77:6c:fd:ac:42:d6:
c4:ca:ea:d2:17:51:c9:d6:e0:ce:73:30:81:3e:f0:
b8:8f:db:23:07:14:90:2a:d0:07:7e:80:ce:e1:40:
4f:a9:64:8b:5f:24:ab:79:a3:d2:f7:40:57:f3:0e:
c2:32:4d:55:50:30:dd:cd:d1:17:b1:bb:85:e4:0a:
f3:ed:12:ab:0f:d5:36:82:2c:42:a5:7d:a6:8d:43:
f4:5e:b4:7e:0d:b4:bf:da:c9:61:94:be:72:cb:a9:
ce:6a:16:55:f7:a9:d3:f4:5e:db:ca:51:84:c9:23:
37:65:e5:04:28:5a:49:cb:8d:59:70:32:8c:c4:83:
06:36:c4:ef:33:c1:f3:42:97:8b:84:45:02:b4:76:
c2:cf:7c:18:4d:92:e0:07:e9:56:f6:8a:c1:76:2f:
32:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C0:7F:D3:54:7D:55:94:F3:8F:C4:17:ED:98:80:1C:6B:D2:57:4D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/V8B_01R9VZTzj8QX7ZiAHGvSV00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.86.0/24
31.56.107.0/24
31.57.122.0/24
31.57.124.0/23
31.57.140.0/24
31.57.162.0-31.57.165.255
31.57.180.0/24
31.58.41.0-31.58.42.255
31.58.48.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:77:b0:d3:7e:45:c0:44:36:17:8f:78:62:41:1a:c2:07:f6:
77:cd:2c:ce:12:2c:10:04:f2:e0:4f:be:b5:96:87:56:fe:16:
37:3d:2a:81:da:f6:0d:19:0e:8d:34:a1:d2:9b:65:ec:97:57:
a1:e9:95:7a:1c:23:94:6a:e8:d2:e3:48:d1:98:a7:4d:5a:4b:
10:ac:a0:7b:be:77:1e:d0:7f:9e:a0:5b:f4:06:5c:c7:8e:e4:
8a:bd:76:48:9f:ff:16:f5:52:70:d9:2b:a6:30:72:83:35:2b:
6f:e9:0f:23:ca:18:a2:b8:cf:a3:4c:1e:38:72:03:a9:4c:21:
0d:da:db:1f:e4:5e:6f:37:2c:c0:28:69:57:ed:74:81:c2:85:
c7:bc:ff:c0:6a:bd:04:16:98:55:f5:8e:8a:91:c8:c9:53:6c:
a2:86:2b:4a:73:b1:05:3f:94:6b:7a:cb:94:5c:25:ea:26:83:
7a:ad:6d:62:5e:68:ce:eb:27:1c:f7:d9:92:bb:36:f9:c5:4c:
9f:19:ce:65:38:35:fb:fa:a2:8a:9c:89:c0:b2:90:f2:8f:98:
d7:54:43:f6:0f:40:a6:c5:06:a1:08:ec:fc:51:9e:fc:e4:68:
d5:92:ef:6d:26:f2:9f:db:f4:2c:05:d7:6c:fb:31:64:7f:6c:
43:28:52:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:30:53 2025 by rpki-client