Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/oqzvWBx5uk3_bxEXRna3Jzlyzfg.roa
File: oqzvWBx5uk3_bxEXRna3Jzlyzfg.roa (raw, json)
Hash identifier: chJU5yForYuAjaNeF0bNKBxo6msESrFUY01BoZH4dm4=
Subject key identifier: A2:AC:EF:58:1C:79:BA:4D:FF:6F:11:17:46:76:B7:27:39:72:CD:F8
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01964F7BBA796757234DEF8DD437574DFB0B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/oqzvWBx5uk3_bxEXRna3Jzlyzfg.roa
Signing time: Sat 19 Apr 2025 19:17:10 +0000
ROA not before: Sat 19 Apr 2025 19:17:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43641
IP address blocks: 31.56.115.0/24 maxlen: 24
31.56.116.0/24 maxlen: 24
31.56.127.0/24 maxlen: 24
31.57.192.0/24 maxlen: 24
31.57.193.0/24 maxlen: 24
31.57.195.0/24 maxlen: 24
31.57.232.0/24 maxlen: 24
31.57.233.0/24 maxlen: 24
31.57.234.0/24 maxlen: 24
31.57.235.0/24 maxlen: 24
31.58.145.0/24 maxlen: 24
31.58.148.0/24 maxlen: 24
31.58.149.0/24 maxlen: 24
31.58.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 20 Apr 2025 11:39:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:7b:ba:79:67:57:23:4d:ef:8d:d4:37:57:4d:fb:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 19 19:17:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2acef581c79ba4dff6f11174676b7273972cdf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:32:ff:fc:8c:42:3d:7d:cc:49:fa:f1:7d:5b:
4e:69:33:55:cc:c7:a3:91:a6:65:21:64:8a:7a:ae:
04:7d:18:c1:4b:82:83:09:b8:78:2e:3a:c7:82:92:
68:7d:6a:57:61:68:1c:ca:93:44:bf:38:95:c1:f1:
4e:ed:fa:7a:39:1b:00:57:b8:a4:f4:d7:a5:f6:b4:
25:53:5b:e0:49:cd:9d:64:5e:2a:3b:5e:05:ac:ce:
d1:90:e2:d6:89:ec:e2:85:c5:f9:d4:44:dc:78:87:
2a:22:86:2b:75:ba:87:7b:d3:b6:89:53:b4:33:8c:
a6:d1:f5:f4:89:a8:61:d3:e5:6f:0d:d6:4b:a5:0a:
7b:41:9b:ea:ac:d2:6f:5f:f2:bc:12:87:8a:af:d1:
ad:b5:af:7e:3c:a9:37:b9:b3:00:e3:a1:7d:f5:4b:
17:78:4a:11:b1:ca:9e:2d:ac:ec:c0:84:e9:be:07:
ab:4f:99:5c:a4:51:23:3c:df:8a:99:ac:e4:00:38:
42:02:14:b2:3a:88:3e:78:eb:1f:fc:50:be:ef:83:
f4:9c:4a:82:28:b0:12:1d:54:ba:16:1e:4b:fb:19:
02:5c:f5:e6:c4:1f:7b:67:60:92:8a:7a:7c:0d:0d:
de:5e:0d:dd:07:98:6b:56:0b:db:ab:c8:b1:db:ce:
5b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AC:EF:58:1C:79:BA:4D:FF:6F:11:17:46:76:B7:27:39:72:CD:F8
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/oqzvWBx5uk3_bxEXRna3Jzlyzfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.115.0-31.56.116.255
31.56.127.0/24
31.57.192.0/23
31.57.195.0/24
31.57.232.0/22
31.58.145.0/24
31.58.148.0/23
31.58.151.0/24
Signature Algorithm: sha256WithRSAEncryption
96:0b:3d:21:1c:c7:e0:b9:0e:2b:a0:43:7f:bb:b7:2a:d1:f6:
e5:35:e7:02:4f:54:35:6f:cb:2e:b5:c2:6f:30:dd:b0:d7:cc:
c5:d9:2d:b6:67:dd:4f:63:41:e7:63:13:6b:4b:44:fa:0c:6f:
62:77:1b:6b:89:43:91:49:ae:ac:db:5a:7f:14:df:7c:cc:aa:
98:bc:0a:cd:80:b0:fc:e1:47:27:56:fa:a0:ef:37:c6:86:f2:
da:fb:2b:38:b5:03:51:98:2a:64:e6:4d:6a:5c:74:04:54:97:
16:25:f9:62:54:1e:41:dd:91:91:27:3c:85:c5:7a:c6:29:64:
7b:b7:0b:bd:29:79:79:83:f3:52:cc:7c:95:20:a8:08:3d:ed:
8e:9e:ea:d4:0e:5a:87:35:0b:ba:af:58:74:d1:a0:7d:66:53:
9b:11:21:62:06:6a:a3:81:d6:cc:87:b7:05:6f:5f:e2:71:84:
bb:57:55:50:e7:3b:a2:e2:76:76:8f:31:84:44:e1:21:1c:53:
9a:e6:e6:c9:0a:31:db:0a:67:c0:be:a1:5e:03:58:9c:be:a0:
ac:bc:73:d8:74:b9:6d:1a:c2:7c:4f:7b:d4:51:56:a2:bf:7b:
f5:f5:c4:87:5b:c2:f7:76:7b:68:8f:b4:82:bc:cb:77:4c:79:
66:5b:0d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 20:54:46 2025 by rpki-client