Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/u1lPTfFf3LrRD3HreHlruV_x_R4.roa
File: u1lPTfFf3LrRD3HreHlruV_x_R4.roa (raw, json)
Hash identifier: 26Q0TUphLW8FNUso15SRCc6VXQNrMbJXiwvSNZPPplE=
Subject key identifier: BB:59:4F:4D:F1:5F:DC:BA:D1:0F:71:EB:78:79:6B:B9:5F:F1:FD:1E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193F491F0A51D5DF8095C2D578FB0350ED8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/u1lPTfFf3LrRD3HreHlruV_x_R4.roa
Signing time: Mon 23 Dec 2024 17:30:25 +0000
ROA not before: Mon 23 Dec 2024 17:30:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2914
IP address blocks: 31.56.154.0/24 maxlen: 24
31.56.158.0/24 maxlen: 24
31.56.159.0/24 maxlen: 24
31.56.168.0/24 maxlen: 24
31.56.169.0/24 maxlen: 24
31.56.170.0/24 maxlen: 24
31.56.171.0/24 maxlen: 24
31.56.174.0/24 maxlen: 24
31.56.175.0/24 maxlen: 24
31.57.16.0/22 maxlen: 24
31.57.20.0/22 maxlen: 24
31.57.24.0/22 maxlen: 24
31.57.28.0/22 maxlen: 24
31.57.48.0/22 maxlen: 24
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.92.0/22 maxlen: 24
31.57.96.0/22 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.196.0/22 maxlen: 24
31.58.204.0/22 maxlen: 24
31.58.212.0/22 maxlen: 24
31.58.220.0/22 maxlen: 24
31.58.224.0/22 maxlen: 24
31.59.120.0/22 maxlen: 24
217.60.0.0/18 maxlen: 24
217.60.1.0/24 maxlen: 24
217.60.5.0/24 maxlen: 24
217.60.11.0/24 maxlen: 24
217.60.13.0/24 maxlen: 24
217.60.24.0/24 maxlen: 24
217.60.25.0/24 maxlen: 24
217.60.26.0/24 maxlen: 24
217.60.27.0/24 maxlen: 24
217.60.236.0/24 maxlen: 24
217.60.245.0/24 maxlen: 24
217.60.248.0/24 maxlen: 24
217.60.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Dec 2024 14:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f4:91:f0:a5:1d:5d:f8:09:5c:2d:57:8f:b0:35:0e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 23 17:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb594f4df15fdcbad10f71eb78796bb95ff1fd1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:38:45:3e:3d:c7:c2:8f:e4:17:f7:df:50:ae:
e9:5b:85:d6:1d:49:2a:65:1e:e6:4d:b2:1a:44:11:
64:6a:2d:39:84:0b:c8:76:ae:db:ab:80:1f:19:b9:
aa:fa:53:f5:18:4c:54:65:fb:04:e5:7c:e1:a6:37:
86:0c:8a:54:07:30:1e:59:44:14:b6:a2:51:27:58:
f7:1f:7f:58:0b:cd:4a:36:b8:32:33:79:2f:2c:b7:
b6:56:28:a3:1b:b5:55:29:08:21:df:37:f2:63:50:
6a:92:af:d0:25:89:e3:6b:ca:37:ef:1d:73:bb:16:
bd:e8:22:8e:74:ce:36:24:02:b8:67:2d:8a:ab:e6:
45:d3:27:a6:0c:94:89:62:05:c3:8e:f3:df:54:0f:
05:7d:ee:69:9a:9f:0c:b0:fc:0f:4c:e3:af:b0:85:
17:dc:3c:7e:b7:b6:92:ee:e8:30:29:82:d9:3a:35:
3f:65:72:98:62:e3:86:d4:ed:f7:72:ab:0e:0d:43:
ab:75:b4:f8:e1:f6:bf:af:1c:6a:d8:de:79:ed:f9:
8d:a1:f6:18:ee:e4:33:e0:64:b0:6d:83:90:41:b5:
b2:a7:36:90:da:b4:a3:5e:cd:96:f9:21:4f:6e:de:
04:01:3a:c3:59:ea:27:d2:e1:c9:fc:b6:63:7d:bb:
b1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:59:4F:4D:F1:5F:DC:BA:D1:0F:71:EB:78:79:6B:B9:5F:F1:FD:1E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/u1lPTfFf3LrRD3HreHlruV_x_R4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.154.0/24
31.56.158.0/23
31.56.168.0/22
31.56.174.0/23
31.57.16.0/20
31.57.48.0/20
31.57.92.0-31.57.99.255
31.57.120.0/21
31.58.34.0/23
31.58.196.0/22
31.58.204.0/22
31.58.212.0/22
31.58.220.0-31.58.227.255
31.59.120.0/22
217.60.0.0/18
217.60.236.0/24
217.60.245.0/24
217.60.248.0/24
217.60.254.0/24
Signature Algorithm: sha256WithRSAEncryption
52:f8:6d:a9:09:f4:7f:da:dd:73:4e:72:32:6f:2a:26:e7:a4:
7b:50:83:d8:cd:be:50:95:2b:2d:8b:69:8c:78:14:88:4d:6b:
96:d9:85:1f:88:43:26:cc:76:4d:7a:9b:50:a8:85:bc:98:e7:
72:39:01:8e:4f:f9:89:8a:7e:54:75:15:00:f9:06:53:fe:a9:
09:e6:bd:e1:c8:9a:92:6f:2a:c0:d8:94:3a:4e:5e:11:62:60:
55:4d:40:75:f4:70:15:25:74:19:25:4b:06:ae:e7:69:5a:72:
f2:93:27:da:7f:ab:8c:17:09:68:8c:23:93:91:8b:9c:fb:33:
b1:53:2e:6f:9a:a5:65:00:35:ec:64:34:db:16:3f:25:74:4f:
4c:8a:0d:de:fa:d2:ea:4a:c7:50:97:16:f6:89:16:e7:95:b5:
70:12:53:25:5c:11:3c:0f:f2:81:56:0e:4e:ca:34:c9:01:6b:
f9:40:cc:92:99:95:e4:4d:62:7f:f1:f0:85:b4:18:64:83:f1:
fb:f3:c2:ae:d2:9a:34:4f:a4:f9:a9:1b:58:f6:69:41:bb:62:
18:c5:d3:e7:7e:fc:3a:0d:7c:c2:7d:46:1b:16:07:e7:26:81:
ac:5e:f9:57:14:3d:d8:36:ae:16:77:0b:f2:05:95:0f:51:c0:
9f:71:af:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:16:04 2025 by rpki-client