Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/j8cONuNRMZTgKXLTWdX0p3kxZac.roa
File: j8cONuNRMZTgKXLTWdX0p3kxZac.roa (raw, json)
Hash identifier: jLu4aDiDqfznSuePRHJgX6pUuJJhBdQnAI/xuk+0ozs=
Subject key identifier: 8F:C7:0E:36:E3:51:31:94:E0:29:72:D3:59:D5:F4:A7:79:31:65:A7
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01928B0D90206760568B1490B3AF63DC0A44
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/j8cONuNRMZTgKXLTWdX0p3kxZac.roa
Signing time: Mon 14 Oct 2024 12:42:54 +0000
ROA not before: Mon 14 Oct 2024 12:42:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.39.0/24 maxlen: 24
31.56.66.0/24 maxlen: 24
31.56.86.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.112.0/21 maxlen: 24
31.56.137.0/24 maxlen: 24
31.56.138.0/24 maxlen: 24
31.56.139.0/24 maxlen: 24
31.56.140.0/24 maxlen: 24
31.56.145.0/24 maxlen: 24
31.56.147.0/24 maxlen: 24
31.57.0.0/24 maxlen: 24
31.57.1.0/24 maxlen: 24
31.57.2.0/24 maxlen: 24
31.57.3.0/24 maxlen: 24
31.57.4.0/24 maxlen: 24
31.57.5.0/24 maxlen: 24
31.57.6.0/24 maxlen: 24
31.57.7.0/24 maxlen: 24
31.57.8.0/24 maxlen: 24
31.57.9.0/24 maxlen: 24
31.57.77.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.176.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Oct 2024 13:40:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8b:0d:90:20:67:60:56:8b:14:90:b3:af:63:dc:0a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 14 12:42:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8fc70e36e3513194e02972d359d5f4a7793165a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9a:5a:4d:ac:0c:19:68:ee:dd:1b:85:ca:9b:
60:08:f8:d4:d7:4c:50:0a:7c:96:f7:a4:84:32:e8:
e3:21:f7:70:a8:8f:5b:b2:e0:7a:85:84:61:dd:78:
c4:47:ba:b7:dd:ac:9a:3c:7d:c7:ac:b2:ed:b4:ce:
cc:6f:44:21:6d:0c:25:ef:0c:02:2a:99:ca:d4:d2:
0e:8a:2c:78:1d:25:96:9b:c7:cb:5c:1b:85:bc:08:
8e:1f:8b:e7:07:3a:e8:c9:86:77:46:58:48:95:8a:
2f:e4:38:6c:44:98:d5:34:13:d6:f8:f9:9f:0a:14:
c4:42:3c:6b:3a:96:11:0b:65:f8:cc:4a:8d:7f:4c:
46:c8:50:12:d9:bd:bb:68:5a:9c:b8:81:c1:4e:5f:
23:2f:d7:c0:06:80:cd:d3:67:5f:a4:e6:9b:3b:58:
ea:3b:8a:85:0a:b3:fa:45:5e:67:c3:bd:2f:35:78:
d8:cd:4c:fc:27:68:ae:0f:5d:f5:f0:78:1a:40:15:
0b:31:26:1a:c1:1a:e1:c3:ab:24:c1:5a:e1:20:e5:
a1:2b:ff:5e:d1:67:ba:48:ad:4d:e2:b1:eb:ed:d9:
38:58:80:b3:3b:75:5d:90:b6:21:e6:2b:94:83:3c:
32:b7:41:f0:91:0c:d2:4f:ef:6e:b8:68:3e:8d:e8:
53:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C7:0E:36:E3:51:31:94:E0:29:72:D3:59:D5:F4:A7:79:31:65:A7
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/j8cONuNRMZTgKXLTWdX0p3kxZac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.39.0/24
31.56.66.0/24
31.56.86.0/24
31.56.89.0/24
31.56.112.0/21
31.56.137.0-31.56.140.255
31.56.145.0/24
31.56.147.0/24
31.57.0.0-31.57.9.255
31.57.77.0/24
31.57.132.0/23
31.57.176.0/21
Signature Algorithm: sha256WithRSAEncryption
78:2f:23:73:9f:fc:56:15:4f:c7:f8:0d:e8:c4:d8:9b:1c:2c:
ae:50:6c:81:b7:ff:c5:a6:ad:dc:34:81:60:fc:7a:bf:e5:00:
fd:36:34:d6:da:25:fb:30:a1:fd:4e:9c:9d:e5:9b:89:ed:2f:
36:5b:5c:21:e3:b8:5e:fd:1a:65:6b:53:9d:4e:0e:6f:bb:f0:
c9:a8:94:d8:b2:27:6b:e6:95:78:c9:f6:ca:8d:95:d2:d5:52:
e2:df:85:fc:0b:20:a3:47:cc:31:2c:91:7f:f9:85:1d:50:3a:
8c:f9:26:0b:68:f2:ab:e3:52:8e:27:15:1e:c0:1a:52:cf:1d:
c1:e7:5a:5a:db:46:4e:5d:e9:b0:98:bd:4d:70:23:04:19:2b:
53:d8:29:13:cb:bc:4d:13:ba:09:06:64:e2:46:6d:31:ad:c2:
c4:d8:d2:79:d1:77:fa:e3:ae:69:02:9c:cb:1b:b6:48:2d:f8:
2e:be:83:e6:1e:9a:e0:06:5a:52:56:c4:3d:8d:b7:a2:06:e0:
5b:55:be:95:b9:6b:aa:6a:ef:bf:8e:3a:3b:93:cb:72:e4:4b:
de:00:5a:d8:19:40:3c:bc:47:12:64:a4:5c:08:6e:3e:5d:e6:
93:f6:c1:85:30:68:35:88:6c:1e:6b:d8:71:b6:44:64:9e:ca:
2d:f3:0b:45
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgISAZKLDZAgZ2BWixSQs69j3ApEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMDE0MTI0MjU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmM3MGUzNmUzNTEzMTk0ZTAyOTcyZDM1OWQ1ZjRhNzc5MzE2NWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ZpaTawMGWju3RuFyptgCPjU10xQ
CnyW96SEMujjIfdwqI9bsuB6hYRh3XjER7q33ayaPH3HrLLttM7Mb0QhbQwl7wwC
KpnK1NIOiix4HSWWm8fLXBuFvAiOH4vnBzroyYZ3RlhIlYov5DhsRJjVNBPW+Pmf
ChTEQjxrOpYRC2X4zEqNf0xGyFAS2b27aFqcuIHBTl8jL9fABoDN02dfpOabO1jq
O4qFCrP6RV5nw70vNXjYzUz8J2iuD1318HgaQBULMSYawRrhw6skwVrhIOWhK/9e
0We6SK1N4rHr7dk4WICzO3VdkLYh5iuUgzwyt0HwkQzST+9uuGg+jehTKwIDAQAB
o4ICYDCCAlwwHQYDVR0OBBYEFI/HDjbjUTGU4Cly01nV9Kd5MWWnMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvajhjT051TlJNWlRnS1hMVFdkWDBwM2t4WmFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHYGCCsGAQUFBwEHAQH/BGcwZTBjBAIAATBdAwQBHzgEAwQA
HzgnAwQAHzhCAwQAHzhWAwQAHzhZAwQDHzhwMAwDBAAfOIkDBAAfOIwDBAAfOJED
BAAfOJMwCwMDAB85AwQBHzkIAwQAHzlNAwQBHzmEAwQDHzmwMA0GCSqGSIb3DQEB
CwUAA4IBAQB4LyNzn/xWFU/H+A3oxNibHCyuUGyBt//Fpq3cNIFg/Hq/5QD9NjTW
2iX7MKH9Tpyd5ZuJ7S82W1wh47he/Rpla1OdTg5vu/DJqJTYsidr5pV4yfbKjZXS
1VLi34X8CyCjR8wxLJF/+YUdUDqM+SYLaPKr41KOJxUewBpSzx3B51pa20ZOXemw
mL1NcCMEGStT2CkTy7xNE7oJBmTiRm0xrcLE2NJ50Xf6465pApzLG7ZILfguvoPm
HprgBlpSVsQ9jbeiBuBbVb6VuWuqau+/jjo7k8ty5EveAFrYGUA8vEcSZKRcCG4+
XeaT9sGFMGg1iGwea9hxtkRknsot8wtF
-----END CERTIFICATE-----
Generated at Thu May 1 17:41:27 2025 by rpki-client