Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pa6Zyv4EvevdiQeI3dGt8OI-_8Q.roa
File: pa6Zyv4EvevdiQeI3dGt8OI-_8Q.roa (raw, json)
Hash identifier: Gt3QT0QFWt0ay0ikReUVj9puS12N8n5cAfKAPUnnXNg=
Subject key identifier: A5:AE:99:CA:FE:04:BD:EB:DD:89:07:88:DD:D1:AD:F0:E2:3E:FF:C4
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019343CA46E1C1E4D65D0762171427BE2909
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pa6Zyv4EvevdiQeI3dGt8OI-_8Q.roa
Signing time: Tue 19 Nov 2024 09:39:10 +0000
ROA not before: Tue 19 Nov 2024 09:39:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.48.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.127.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.146.0/23 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Nov 2024 17:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:43:ca:46:e1:c1:e4:d6:5d:07:62:17:14:27:be:29:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 19 09:39:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5ae99cafe04bdebdd890788ddd1adf0e23effc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:63:01:0a:f1:df:76:2f:af:d1:45:30:80:5f:
48:c5:e5:cc:35:9c:6a:a5:3f:64:ca:e4:fb:4d:53:
44:21:8e:7c:9c:a2:5b:6f:42:11:88:a3:10:03:0a:
79:cd:6f:ac:ef:a4:7d:1c:cb:ff:f8:08:5a:f7:9b:
bb:05:3d:e1:1d:c3:9c:5f:e7:3e:03:c2:55:e1:76:
33:df:f2:e8:ac:1b:75:8b:de:e0:28:2f:3a:c9:0a:
3b:3f:b3:31:57:4f:02:8e:c7:f9:38:af:e6:cf:d4:
8d:2f:73:41:80:39:51:88:d9:5a:6b:85:03:a0:e5:
b1:af:b2:d8:48:09:ad:2b:b6:27:2a:74:f7:4c:a4:
9d:ad:a5:54:2b:e5:29:2d:97:26:8f:dc:fe:da:b7:
9b:fd:48:0d:25:ee:9d:26:fc:8a:48:21:f9:d9:1d:
1b:21:42:a7:8e:7d:94:08:c7:07:75:74:b1:46:12:
08:0c:b6:3c:75:ca:a2:ba:bb:ab:d5:13:cb:29:28:
ec:fe:8f:c0:b7:0d:69:15:47:82:ec:63:34:d6:7f:
be:d8:e7:a9:ef:b7:06:61:64:4a:9d:a4:a6:65:10:
71:52:4c:0d:ff:c6:c9:1a:ef:4a:8d:3e:f6:42:74:
3a:f7:e3:27:94:3e:bc:e3:45:31:2e:c6:8f:c3:b7:
43:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AE:99:CA:FE:04:BD:EB:DD:89:07:88:DD:D1:AD:F0:E2:3E:FF:C4
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pa6Zyv4EvevdiQeI3dGt8OI-_8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.48.0/24
31.56.57.0/24
31.56.89.0/24
31.56.120.0/22
31.56.127.0/24
31.57.132.0/23
31.57.146.0/23
31.57.176.0/21
31.57.192.0/22
31.57.232.0/22
Signature Algorithm: sha256WithRSAEncryption
12:a5:11:15:54:58:26:5f:2f:4a:63:a5:83:20:c1:68:8a:44:
3e:31:57:58:9b:ad:66:18:85:57:2b:bd:7d:36:9d:7c:7a:97:
36:2c:8d:14:c4:92:40:5f:62:05:fb:3f:d7:7b:2d:ef:69:35:
86:2e:8f:41:30:6b:4f:aa:5e:0d:b6:0f:48:f5:2f:3c:e0:81:
23:21:4d:05:ba:f9:24:3b:b3:3d:d1:4d:95:62:f9:71:ed:62:
09:c3:1a:25:7b:92:64:40:7f:43:b0:be:9d:64:53:af:4f:48:
22:c4:5d:05:5e:5b:22:c2:97:e5:07:cd:d9:1e:25:8c:b7:1e:
b1:fb:62:54:19:1a:c9:8b:19:fb:75:e3:6d:00:97:10:3c:2b:
d8:c4:db:05:b4:54:41:26:55:36:f9:04:33:c4:8e:9a:8a:81:
60:a9:dd:c1:af:7e:4a:23:e8:c0:37:d4:1a:d3:37:78:17:a2:
e0:0b:f8:ca:0f:5e:d6:66:17:66:f0:9d:3a:9a:1d:75:28:4a:
02:17:34:cb:45:77:cf:dd:a4:3b:cf:a7:20:f3:57:39:a8:8b:
3d:31:4a:c0:7f:b3:ab:bd:20:67:2b:7b:2c:9c:a5:88:36:17:
5e:28:97:65:9d:12:e7:8e:0a:f1:88:79:a0:cc:e7:14:bd:6e:
c6:7c:a4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:34:48 2025 by rpki-client