Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/c_nT5S8MB7tmXumdLn9Q95oySZ4.roa
File: c_nT5S8MB7tmXumdLn9Q95oySZ4.roa (raw, json)
Hash identifier: 9xw/227aZ1Obw6h54cyk/gNLFWUpfb7JNRI2yOeXIpY=
Subject key identifier: 73:F9:D3:E5:2F:0C:07:BB:66:5E:E9:9D:2E:7F:50:F7:9A:32:49:9E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194282340A113121C249747C8017771BC01
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/c_nT5S8MB7tmXumdLn9Q95oySZ4.roa
Signing time: Thu 02 Jan 2025 17:49:46 +0000
ROA not before: Thu 02 Jan 2025 17:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36530
IP address blocks: 31.56.59.0/24 maxlen: 24
31.56.67.0/24 maxlen: 24
31.56.69.0/24 maxlen: 24
31.56.72.0/24 maxlen: 24
31.56.84.0/24 maxlen: 24
31.56.88.0/24 maxlen: 24
31.56.126.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.132.0/24 maxlen: 24
31.57.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Jan 2025 15:41:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:40:a1:13:12:1c:24:97:47:c8:01:77:71:bc:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73f9d3e52f0c07bb665ee99d2e7f50f79a32499e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:90:d0:3f:c8:9c:ee:91:56:ce:7f:13:a8:2a:
6b:38:bc:3f:e0:ab:49:57:64:03:40:aa:85:f9:aa:
eb:87:29:10:34:1e:23:fb:a4:2b:bf:9e:7b:98:00:
73:88:be:bc:4e:8e:48:e4:ba:5a:b1:74:e6:e8:d0:
2e:54:f1:c7:42:16:76:68:54:80:eb:aa:b4:f6:7b:
a1:fe:81:f6:15:83:f3:77:51:e6:eb:34:fc:8b:11:
8f:5a:53:7b:9d:92:c1:55:ab:fb:58:ed:6d:16:61:
a2:49:a1:85:fb:ab:1d:9f:23:57:af:f7:95:3a:2b:
db:b7:f1:60:7d:41:31:d4:38:19:de:8c:97:fb:1f:
f6:b2:98:83:fd:0a:1d:35:7a:62:58:ae:24:b5:be:
b7:03:59:65:56:39:1f:ce:31:7a:15:98:e4:5a:13:
ec:14:b6:d8:71:60:9d:fa:ec:24:64:a8:7f:5b:28:
1b:ba:8f:48:ee:04:45:85:99:27:c5:a2:ba:44:7e:
15:14:88:62:1d:b7:ea:c8:b6:1f:8b:4d:99:63:f3:
bb:c2:72:77:e3:db:a2:08:ad:6b:71:3f:b8:bf:14:
e7:17:70:2f:97:7f:3e:ee:ec:29:ba:1d:c8:d0:6d:
78:b2:cc:65:3e:2d:5a:57:4a:84:52:7e:67:5f:f9:
e1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F9:D3:E5:2F:0C:07:BB:66:5E:E9:9D:2E:7F:50:F7:9A:32:49:9E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/c_nT5S8MB7tmXumdLn9Q95oySZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.59.0/24
31.56.67.0/24
31.56.69.0/24
31.56.72.0/24
31.56.84.0/24
31.56.88.0/24
31.56.126.0/24
31.57.104.0/21
31.57.132.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:87:dd:74:75:86:b8:d3:16:72:cd:3a:06:f4:a2:fe:09:70:
af:3a:9d:4b:95:6c:5f:a8:ad:59:f8:c4:d7:ee:f9:11:1e:77:
c6:c4:04:4a:f2:89:ba:37:06:ea:71:7e:96:98:b9:31:57:a3:
99:db:82:2c:ca:17:67:92:0e:0b:bf:9d:03:a0:04:de:f8:bf:
67:67:f9:c4:57:c8:28:ee:0b:17:fc:82:d9:dc:7e:db:8d:86:
58:5b:49:a7:eb:c4:aa:59:62:0a:11:44:fc:88:e3:cd:6f:eb:
49:a6:c8:7c:ab:46:6f:bb:90:41:ef:fd:7f:f5:7f:ce:fe:86:
5c:c3:7d:ea:94:ab:29:48:45:4b:7c:ed:a9:8f:2f:58:7c:7e:
aa:5a:2e:c4:28:4e:75:35:2c:18:1d:ee:fc:9d:e5:c7:4e:c5:
bf:3f:c3:9a:74:35:8f:bd:7b:8b:23:86:30:f2:bb:a8:65:3d:
51:fc:5d:a4:0d:15:8f:df:35:26:06:fc:9c:51:b8:80:4b:21:
b9:39:2c:b2:06:e0:f4:cb:80:0b:4f:97:94:6c:f4:49:e2:70:
a4:96:fd:a6:0f:de:2e:49:e3:37:b8:02:90:4c:6d:e5:6d:44:
2e:8f:3e:7e:fc:05:fd:37:27:78:15:36:86:2c:4f:ba:17:ad:
7e:54:4f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:35:55 2025 by rpki-client