Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nRqIvLdrCx9bGICRkhkIM33P908.roa
File: nRqIvLdrCx9bGICRkhkIM33P908.roa (raw, json)
Hash identifier: ONTmvjoXEdJdzO/rnTKiTOe86Pxmjpv6UsunHJbhq7g=
Subject key identifier: 9D:1A:88:BC:B7:6B:0B:1F:5B:18:80:91:92:19:08:33:7D:CF:F7:4F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019408BD6D7462A138EC659F16022CE5306F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nRqIvLdrCx9bGICRkhkIM33P908.roa
Signing time: Fri 27 Dec 2024 15:30:19 +0000
ROA not before: Fri 27 Dec 2024 15:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 31.56.112.0/21 maxlen: 24
31.57.11.0/24 maxlen: 24
31.57.131.0/24 maxlen: 24
31.57.150.0/24 maxlen: 24
31.57.176.0/24 maxlen: 24
31.57.194.0/24 maxlen: 24
31.57.224.0/22 maxlen: 23
31.57.252.0/22 maxlen: 23
31.58.59.0/24 maxlen: 24
31.58.142.0/24 maxlen: 24
31.58.146.0/24 maxlen: 24
31.58.216.0/22 maxlen: 22
31.58.240.0/22 maxlen: 22
31.58.252.0/22 maxlen: 22
31.59.14.0/24 maxlen: 24
31.59.30.0/24 maxlen: 24
31.59.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Dec 2024 15:32:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:08:bd:6d:74:62:a1:38:ec:65:9f:16:02:2c:e5:30:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 27 15:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d1a88bcb76b0b1f5b188091921908337dcff74f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:01:b8:d7:f6:6a:25:1c:7b:9c:39:0c:75:d5:
14:8f:2f:e3:65:2c:fa:af:08:ee:a8:15:85:48:ef:
56:61:c1:e0:73:12:40:5f:0d:66:c1:4b:01:2b:54:
b5:6e:a3:b3:25:84:20:b0:71:1c:3a:a2:34:7d:9b:
56:7a:ac:f4:fc:2d:f0:37:31:c8:48:ad:08:9c:88:
c2:06:d5:c8:83:fe:28:9f:f4:97:86:68:56:fd:56:
81:7d:df:80:55:61:1e:b7:bd:aa:e5:9c:f9:39:6a:
f7:df:5c:6d:ba:d4:63:81:8c:54:75:c2:db:a5:fe:
f7:cf:1c:3c:45:af:e4:31:15:6f:5f:88:98:df:63:
ec:9b:8f:fa:dd:48:43:b1:bb:e5:68:59:b9:03:29:
4d:83:19:92:62:5b:9e:ed:cf:88:e3:aa:9e:ae:52:
5d:5f:4a:46:78:b5:dd:a2:86:f1:f7:43:11:d6:3b:
a6:fe:21:27:8f:db:ba:48:3e:62:fb:ba:a3:00:33:
75:e9:80:8e:94:a1:5f:25:63:97:b3:1d:60:a1:e1:
ab:1e:4b:fb:51:8e:b0:c0:a3:c9:5c:10:b9:41:26:
8c:d7:7c:b4:ca:a2:a1:99:07:17:06:f1:13:0f:4f:
32:cd:cb:13:3d:46:20:a9:4c:f6:14:36:77:2f:4d:
27:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:1A:88:BC:B7:6B:0B:1F:5B:18:80:91:92:19:08:33:7D:CF:F7:4F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nRqIvLdrCx9bGICRkhkIM33P908.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.112.0/21
31.57.11.0/24
31.57.131.0/24
31.57.150.0/24
31.57.176.0/24
31.57.194.0/24
31.57.224.0/22
31.57.252.0/22
31.58.59.0/24
31.58.142.0/24
31.58.146.0/24
31.58.216.0/22
31.58.240.0/22
31.58.252.0/22
31.59.14.0/24
31.59.30.0/24
31.59.97.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:f9:89:b9:7f:4b:82:1a:88:c6:bd:71:a7:e3:c7:6e:de:98:
7f:02:f9:cb:50:a0:04:7d:4d:19:38:70:b5:f8:4a:d2:ea:60:
0a:b0:5a:c5:2f:45:35:9f:3f:b1:70:aa:80:cc:f0:c9:8b:03:
f2:e6:83:6a:d6:fb:e5:ba:11:1b:03:f3:e4:80:c8:7e:dd:01:
ee:95:b4:a9:36:b7:6b:cf:30:21:bd:93:ce:7c:f5:76:33:4d:
e1:25:31:0c:ba:67:03:45:86:ae:8e:d1:d7:b9:1d:8d:6c:3f:
b7:f4:50:f2:d5:3a:ac:74:48:c0:3c:2e:eb:69:0f:36:89:81:
c1:f2:66:07:58:eb:f6:93:ff:94:04:e1:f4:d7:99:be:c4:09:
b7:ef:77:ed:80:96:e6:eb:be:cb:55:c7:44:d4:7c:4c:7b:38:
2e:b3:2c:4b:32:9b:a6:d9:33:29:ec:aa:93:a6:a8:02:85:7e:
b7:76:2c:3a:5a:77:e5:f1:6d:c6:c7:41:ae:9e:7a:aa:b8:49:
d3:e7:d7:e6:e0:f6:72:09:16:05:e4:1e:07:74:eb:47:26:4f:
da:09:1c:50:5f:c0:e5:ec:66:e1:85:61:24:8e:9a:a5:b7:dc:
7a:29:7d:df:d8:90:8c:8d:af:34:dd:ab:4d:1d:93:19:bf:d7:
3b:cc:9e:6a
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgISAZQIvW10YqE47GWfFgIs5TBvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMjI3MTUzMDE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDFhODhiY2I3NmIwYjFmNWIxODgwOTE5MjE5MDgzMzdkY2ZmNzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQG41/ZqJRx7nDkMddUUjy/jZSz6
rwjuqBWFSO9WYcHgcxJAXw1mwUsBK1S1bqOzJYQgsHEcOqI0fZtWeqz0/C3wNzHI
SK0InIjCBtXIg/4on/SXhmhW/VaBfd+AVWEet72q5Zz5OWr331xtutRjgYxUdcLb
pf73zxw8Ra/kMRVvX4iY32Psm4/63UhDsbvlaFm5AylNgxmSYlue7c+I46qerlJd
X0pGeLXdoobx90MR1jum/iEnj9u6SD5i+7qjADN16YCOlKFfJWOXsx1goeGrHkv7
UY6wwKPJXBC5QSaM13y0yqKhmQcXBvETD08yzcsTPUYgqUz2FDZ3L00nbwIDAQAB
o4ICaTCCAmUwHQYDVR0OBBYEFJ0aiLy3awsfWxiAkZIZCDN9z/dPMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvblJxSXZMZHJDeDliR0lDUmtoa0lNMzNQOTA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBsBAIAATBmAwQDHzhwAwQA
HzkLAwQAHzmDAwQAHzmWAwQAHzmwAwQAHznCAwQCHzngAwQCHzn8AwQAHzo7AwQA
HzqOAwQAHzqSAwQCHzrYAwQCHzrwAwQCHzr8AwQAHzsOAwQAHzseAwQAHzthMA0G
CSqGSIb3DQEBCwUAA4IBAQAP+Ym5f0uCGojGvXGn48du3ph/AvnLUKAEfU0ZOHC1
+ErS6mAKsFrFL0U1nz+xcKqAzPDJiwPy5oNq1vvluhEbA/PkgMh+3QHulbSpNrdr
zzAhvZPOfPV2M03hJTEMumcDRYaujtHXuR2NbD+39FDy1TqsdEjAPC7raQ82iYHB
8mYHWOv2k/+UBOH015m+xAm373ftgJbm677LVcdE1HxMezgusyxLMpum2TMp7KqT
pqgChX63diw6Wnfl8W3Gx0GunnqquEnT59fm4PZyCRYF5B4HdOtHJk/aCRxQX8Dl
7GbhhWEkjpqlt9x6KX3f2JCMja803atNHZMZv9c7zJ5q
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:19:00 2025 by rpki-client