Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hzUrVC_IqYPSRKbgXrdQmb0DT1Q.roa
File: hzUrVC_IqYPSRKbgXrdQmb0DT1Q.roa (raw, json)
Hash identifier: 2/mdX43VDX9j9LyD3vgPE6Md1kc3X1b6LStFNa1w+WQ=
Subject key identifier: 87:35:2B:54:2F:C8:A9:83:D2:44:A6:E0:5E:B7:50:99:BD:03:4F:54
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01941D97DDE15CBE177E24A84EE3231D53D1
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hzUrVC_IqYPSRKbgXrdQmb0DT1Q.roa
Signing time: Tue 31 Dec 2024 16:41:19 +0000
ROA not before: Tue 31 Dec 2024 16:41:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48678
IP address blocks: 31.56.16.0/22 maxlen: 24
31.56.60.0/24 maxlen: 24
31.57.16.0/21 maxlen: 24
31.57.135.0/24 maxlen: 24
31.58.176.0/22 maxlen: 24
31.58.200.0/22 maxlen: 24
31.58.216.0/22 maxlen: 24
31.58.235.0/24 maxlen: 24
31.58.240.0/22 maxlen: 24
31.58.252.0/22 maxlen: 24
31.59.64.0/22 maxlen: 24
31.59.80.0/22 maxlen: 24
31.59.124.0/22 maxlen: 24
31.59.176.0/21 maxlen: 24
31.59.188.0/22 maxlen: 24
31.59.192.0/22 maxlen: 24
31.59.216.0/22 maxlen: 24
217.60.64.0/18 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1d:97:dd:e1:5c:be:17:7e:24:a8:4e:e3:23:1d:53:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 31 16:41:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87352b542fc8a983d244a6e05eb75099bd034f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:23:1d:1a:30:45:9d:c8:a6:a7:99:43:0d:d5:
13:4d:c9:7e:00:5b:50:3c:90:5e:82:b6:b3:6a:97:
3f:f8:22:f7:fa:db:e5:cf:36:0f:d6:3e:7e:93:b1:
9a:3e:6d:b1:18:1e:3d:5c:c0:60:23:bb:34:f6:41:
ef:46:f4:cf:64:93:9b:18:b3:ce:53:4a:1c:07:88:
bd:f1:ab:14:4c:b9:0d:23:10:ba:1d:b3:15:f6:24:
8b:c4:41:9a:22:21:f0:db:16:ab:0a:36:d7:b7:bd:
bc:0a:7d:60:a1:02:27:d0:c3:87:5c:dc:f3:8d:d8:
f6:d7:d4:dd:99:93:da:0c:90:87:51:8e:aa:ea:53:
c2:03:e1:1d:82:7b:ec:c0:74:4f:e1:c1:cb:07:c6:
4f:69:fd:f7:7d:fc:4e:1a:4f:80:c1:b8:61:9b:6f:
75:96:2f:6e:aa:59:94:43:f0:6a:8d:ca:29:19:14:
84:8a:2c:f2:d5:8d:8d:bb:13:76:1d:05:32:ec:8c:
92:87:11:4a:c3:05:14:6f:01:f0:27:14:44:98:57:
bf:9f:f4:9c:d9:fa:17:1d:d4:72:cc:1b:59:31:da:
49:97:c4:7c:bd:4e:bb:fa:61:e7:ec:b7:50:d6:08:
bb:61:2c:7b:85:37:cb:a3:81:9a:8f:30:9a:67:df:
91:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:35:2B:54:2F:C8:A9:83:D2:44:A6:E0:5E:B7:50:99:BD:03:4F:54
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hzUrVC_IqYPSRKbgXrdQmb0DT1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.16.0/22
31.56.60.0/24
31.57.16.0/21
31.57.135.0/24
31.58.176.0/22
31.58.200.0/22
31.58.216.0/22
31.58.235.0/24
31.58.240.0/22
31.58.252.0/22
31.59.64.0/22
31.59.80.0/22
31.59.124.0/22
31.59.176.0/21
31.59.188.0-31.59.195.255
31.59.216.0/22
217.60.64.0/18
Signature Algorithm: sha256WithRSAEncryption
9c:24:3d:73:fc:6c:75:2a:1c:99:4d:70:e6:bf:ee:25:da:e6:
90:17:fa:55:7c:d0:60:5d:39:1e:80:6a:b4:c3:9a:a3:a0:2d:
3d:6f:56:d4:ce:da:7d:c8:95:b3:ae:3a:93:53:17:07:18:55:
f8:a6:7d:19:de:08:70:dd:04:fd:f5:b1:c6:25:c0:18:71:50:
1a:9b:12:6c:0d:69:0c:1b:e9:22:ff:0a:1a:66:1f:9f:93:fc:
1c:92:cf:34:3f:ac:78:e4:ed:a8:db:e2:3c:5e:e4:4c:f8:c8:
ca:22:ee:3e:ed:15:25:39:4f:bf:b3:96:0d:65:e3:89:a7:1a:
ce:70:4f:58:db:68:9b:13:4d:40:d3:e9:be:1c:00:99:fa:96:
ec:db:f7:af:35:2f:a5:ff:a3:ae:bc:12:d1:9d:5e:81:e1:56:
bd:7c:3f:e7:85:99:7c:25:9e:c1:3d:3e:4d:95:bb:8a:1b:3e:
b6:5f:0f:f2:83:9f:6d:8b:90:f0:64:49:b0:17:5e:2a:f6:b3:
cb:ef:87:22:c5:d8:0c:1d:10:dd:e4:64:16:61:59:eb:6a:75:
ef:51:8e:ba:eb:41:16:5e:06:37:c6:b3:ed:af:ce:ea:da:a6:
3c:24:83:72:87:45:c6:ae:9c:1b:15:15:1f:2c:44:7b:6c:40:
f3:59:6a:b5
-----BEGIN CERTIFICATE-----
MIIFZjCCBE6gAwIBAgISAZQdl93hXL4XfiSoTuMjHVPRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMjMxMTY0MTE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzM1MmI1NDJmYzhhOTgzZDI0NGE2ZTA1ZWI3NTA5OWJkMDM0ZjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiMdGjBFncimp5lDDdUTTcl+AFtQ
PJBegrazapc/+CL3+tvlzzYP1j5+k7GaPm2xGB49XMBgI7s09kHvRvTPZJObGLPO
U0ocB4i98asUTLkNIxC6HbMV9iSLxEGaIiHw2xarCjbXt728Cn1goQIn0MOHXNzz
jdj219TdmZPaDJCHUY6q6lPCA+EdgnvswHRP4cHLB8ZPaf33ffxOGk+Awbhhm291
li9uqlmUQ/BqjcopGRSEiizy1Y2NuxN2HQUy7IyShxFKwwUUbwHwJxREmFe/n/Sc
2foXHdRyzBtZMdpJl8R8vU67+mHn7LdQ1gi7YSx7hTfLo4GajzCaZ9+RkwIDAQAB
o4ICcjCCAm4wHQYDVR0OBBYEFIc1K1QvyKmD0kSm4F63UJm9A09UMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvaHpVclZDX0lxWVBTUktiZ1hyZFFtYjBEVDFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGHBggrBgEFBQcBBwEB/wR4MHYwdAQCAAEwbgMEAh84EAME
AB84PAMEAx85EAMEAB85hwMEAh86sAMEAh86yAMEAh862AMEAB866wMEAh868AME
Ah86/AMEAh87QAMEAh87UAMEAh87fAMEAx87sDAMAwQCHzu8AwQCHzvAAwQCHzvY
AwQG2TxAMA0GCSqGSIb3DQEBCwUAA4IBAQCcJD1z/Gx1KhyZTXDmv+4l2uaQF/pV
fNBgXTkegGq0w5qjoC09b1bUztp9yJWzrjqTUxcHGFX4pn0Z3ghw3QT99bHGJcAY
cVAamxJsDWkMG+ki/woaZh+fk/wcks80P6x45O2o2+I8XuRM+MjKIu4+7RUlOU+/
s5YNZeOJpxrOcE9Y22ibE01A0+m+HACZ+pbs2/evNS+l/6OuvBLRnV6B4Va9fD/n
hZl8JZ7BPT5NlbuKGz62Xw/yg59ti5DwZEmwF14q9rPL74cixdgMHRDd5GQWYVnr
anXvUY6660EWXgY3xrPtr87q2qY8JINyh0XGrpwbFRUfLER7bEDzWWq1
-----END CERTIFICATE-----
Generated at Mon Apr 28 00:25:06 2025 by rpki-client