Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XD13RqH-IZkhBTIKNVLsG8d9Suk.roa
File: XD13RqH-IZkhBTIKNVLsG8d9Suk.roa (raw, json)
Hash identifier: eA9IxqW9v3U52ThklS+FM/oKA0r5T/nscaYN0DQcelc=
Subject key identifier: 5C:3D:77:46:A1:FE:21:99:21:05:32:0A:35:52:EC:1B:C7:7D:4A:E9
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195ECA820B358310436708CF486EAE3AAA2
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XD13RqH-IZkhBTIKNVLsG8d9Suk.roa
Signing time: Mon 31 Mar 2025 14:43:16 +0000
ROA not before: Mon 31 Mar 2025 14:43:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215304
IP address blocks: 31.56.69.0/24 maxlen: 24
31.56.72.0/24 maxlen: 24
31.56.84.0/24 maxlen: 24
31.57.104.0/24 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.252.0/24 maxlen: 24
31.57.253.0/24 maxlen: 24
31.58.56.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.88.0/24 maxlen: 24
31.58.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Apr 2025 05:56:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ec:a8:20:b3:58:31:04:36:70:8c:f4:86:ea:e3:aa:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 31 14:43:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c3d7746a1fe21992105320a3552ec1bc77d4ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2f:30:97:d5:40:3f:6c:64:47:83:ed:8f:ce:
cd:6c:df:e7:92:6f:ba:24:36:b3:30:61:c7:62:41:
9c:77:cd:f7:68:be:18:96:fb:4d:03:be:2c:b4:62:
b4:f6:74:77:50:5e:fd:a8:f8:5f:86:4e:bf:78:2c:
82:ed:52:2e:e0:8a:71:71:9b:94:f0:a3:fe:7c:5c:
08:8f:e5:b5:57:9a:91:fd:c1:73:10:b8:8c:86:72:
96:0e:26:d1:91:44:a8:8f:0f:29:64:7a:1c:b5:3f:
9b:09:81:d0:3d:3f:e1:e6:f4:2e:57:a8:ec:2a:ad:
cb:9f:22:2f:74:e5:05:b8:e1:1a:1e:72:eb:24:3c:
6a:21:0c:7d:28:2b:19:64:4a:94:56:00:7c:34:3f:
a8:95:4d:ac:e3:d2:0d:74:fa:1e:94:b3:78:8c:fc:
0e:13:5d:2c:2f:66:5d:70:2d:34:69:f6:d0:a4:f8:
a4:c7:c6:04:ac:21:8d:7b:6d:28:a3:b2:27:8a:61:
dc:a7:6e:96:b8:53:fb:23:3e:e5:4c:69:8b:b9:ea:
f7:2e:86:68:51:59:94:d8:bc:a2:3e:53:d3:b7:05:
3a:4e:fc:86:14:ef:44:94:99:55:0e:5f:a3:c5:03:
0e:66:55:45:89:96:70:fc:c7:17:c6:b8:30:f0:1d:
f8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:3D:77:46:A1:FE:21:99:21:05:32:0A:35:52:EC:1B:C7:7D:4A:E9
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XD13RqH-IZkhBTIKNVLsG8d9Suk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.69.0/24
31.56.72.0/24
31.56.84.0/24
31.57.104.0/24
31.57.188.0/24
31.57.252.0/23
31.58.56.0/23
31.58.64.0/23
31.58.88.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:85:70:d7:5d:c3:b1:06:95:42:01:b2:60:db:45:33:d2:43:
90:00:b8:8e:15:f0:df:bb:f6:94:8d:89:0d:5f:a4:30:f7:68:
2c:c5:1d:fb:e4:8d:82:03:59:a6:6f:fb:a6:c1:32:cd:5f:e2:
4b:86:a5:0f:27:24:a4:e2:0c:ed:e3:16:2e:51:67:48:58:57:
bf:61:ef:1d:f4:2e:f3:86:c6:6c:88:0d:b7:91:94:94:6f:78:
0c:a5:00:68:78:b9:e6:e5:ef:cf:ad:9a:42:22:57:9e:1b:f1:
c0:80:d1:ba:70:77:11:3d:0e:22:8e:55:c0:89:a7:99:7f:f3:
2e:ee:52:8e:3f:5e:31:0a:35:97:3f:dc:1d:fb:63:86:fb:52:
7c:5a:04:af:a2:4a:ac:26:5f:c7:b1:60:b4:e8:91:1f:11:7f:
17:9c:53:f6:bc:31:03:c9:7a:ea:b2:90:62:35:93:35:66:d7:
9f:fc:21:1c:91:dd:b8:0a:d8:1c:87:96:35:0b:0f:35:c2:d1:
d4:25:e0:93:0d:6a:e0:78:83:cf:1d:37:4d:26:95:80:9c:b6:
c5:52:07:e4:b5:69:a1:d4:86:bf:0c:05:4e:23:7c:c3:19:6e:
f5:80:53:43:9e:f7:bd:87:0a:56:03:c3:a5:54:13:5b:5f:b6:
af:fb:24:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:01:08 2025 by rpki-client