Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rT-YCa0EW2m40hZud4wAoQ_RVpo.roa
File: rT-YCa0EW2m40hZud4wAoQ_RVpo.roa (raw, json)
Hash identifier: tqrm71KiDJ2tSrtDf2KtYdnsfQ8ro33Bisc1FY8n2Uw=
Subject key identifier: AD:3F:98:09:AD:04:5B:69:B8:D2:16:6E:77:8C:00:A1:0F:D1:56:9A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019555F035752430EEAD4DA8CAC7EBF59BE3
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rT-YCa0EW2m40hZud4wAoQ_RVpo.roa
Signing time: Sun 02 Mar 2025 08:19:20 +0000
ROA not before: Sun 02 Mar 2025 08:19:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 31.56.59.0/24 maxlen: 24
31.56.86.0/24 maxlen: 24
31.56.107.0/24 maxlen: 24
31.57.140.0/24 maxlen: 24
31.57.162.0/23 maxlen: 23
31.57.164.0/23 maxlen: 23
31.57.180.0/24 maxlen: 24
31.57.208.0/24 maxlen: 24
31.57.209.0/24 maxlen: 24
31.57.210.0/24 maxlen: 24
31.57.211.0/24 maxlen: 24
31.57.212.0/24 maxlen: 24
31.57.213.0/24 maxlen: 24
31.57.214.0/24 maxlen: 24
31.57.216.0/24 maxlen: 24
31.58.41.0/24 maxlen: 24
31.58.42.0/24 maxlen: 24
31.58.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Mar 2025 16:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:55:f0:35:75:24:30:ee:ad:4d:a8:ca:c7:eb:f5:9b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 2 08:19:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad3f9809ad045b69b8d2166e778c00a10fd1569a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c4:52:5d:a4:8d:1f:e0:1d:40:2d:50:fd:83:
ce:07:69:6c:60:2e:ad:a3:06:2f:25:cd:88:9f:1b:
f6:aa:2b:01:27:dc:b1:8f:70:0d:37:a0:cb:ae:0c:
17:96:4d:e2:29:36:23:7e:89:76:a1:9a:a7:fd:66:
9e:3a:ad:d6:ff:79:33:5d:8b:70:c8:b4:f1:28:e1:
70:20:14:a5:a1:24:6e:b2:d4:cc:f4:ef:22:06:eb:
aa:63:15:bb:49:70:bb:7b:63:a7:66:85:c8:23:ba:
04:ce:b3:32:5a:d8:de:cb:15:a0:a7:1f:af:35:2e:
39:02:8b:f1:52:21:a2:1f:d2:a5:5c:ce:75:fa:06:
70:2c:89:91:91:ce:cb:5c:1b:53:eb:7c:a9:0e:dc:
18:6b:37:a4:4e:72:57:a0:1f:6d:35:8b:52:74:88:
14:da:99:15:54:07:6e:54:f5:19:f6:2f:53:d6:15:
26:7c:92:8b:d7:cb:f8:2b:a6:ea:b8:e3:e9:f3:a8:
7f:c0:0b:e7:bc:6f:87:eb:06:48:0c:5a:0a:2e:80:
6c:11:99:6d:83:91:c6:ce:de:6c:ac:ad:b7:a2:fc:
ad:e3:5b:44:06:06:c6:76:d3:7a:38:6d:21:cb:93:
e4:04:d7:de:b9:d4:51:37:ee:94:15:38:f0:53:d0:
65:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3F:98:09:AD:04:5B:69:B8:D2:16:6E:77:8C:00:A1:0F:D1:56:9A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rT-YCa0EW2m40hZud4wAoQ_RVpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.59.0/24
31.56.86.0/24
31.56.107.0/24
31.57.140.0/24
31.57.162.0-31.57.165.255
31.57.180.0/24
31.57.208.0-31.57.214.255
31.57.216.0/24
31.58.41.0-31.58.42.255
31.58.48.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:ca:10:a1:a3:7e:44:48:74:49:29:3b:6f:04:f0:46:f0:a8:
c8:ef:97:3a:f2:c2:f1:a5:ec:45:e7:b8:71:5e:69:a4:e5:7e:
e1:20:67:8e:08:26:eb:49:31:44:c4:a6:69:c3:42:a5:3a:76:
7d:c6:21:40:e3:88:39:f7:3f:b0:32:2a:41:32:0e:25:3e:05:
02:ec:9d:81:8e:9c:90:04:74:d6:42:9c:d5:52:d9:51:4a:73:
40:5c:9a:33:57:d7:d0:2a:b7:73:81:80:7e:0d:c4:14:79:d3:
5b:3c:d9:a9:a0:d7:1b:de:51:24:e9:bc:1c:ab:a4:07:ea:3c:
cd:d4:ca:ef:42:18:3e:92:30:da:3c:8b:5c:fe:6a:c9:68:77:
36:05:44:d8:f5:57:45:01:69:cf:b1:08:ec:25:b8:cd:f7:e6:
ef:6a:9a:78:07:cc:6b:c6:23:7b:17:9e:7f:11:2e:30:aa:f6:
fc:18:05:bb:e0:92:ef:89:f0:c8:41:68:47:10:be:ad:67:14:
d5:fc:af:bb:92:27:de:35:13:e3:34:e7:51:d4:24:31:91:04:
50:2e:7a:f4:44:e6:24:00:27:ca:e3:c9:a1:cb:0c:f7:8a:c9:
f8:ad:7f:bf:0b:51:80:7a:56:40:08:9a:57:e6:b3:9e:12:46:
bb:ca:58:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:04:23 2025 by rpki-client