Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-1SFvVgelYc-Z3SwIzeNGQWUvtc.roa
File: 1-1SFvVgelYc-Z3SwIzeNGQWUvtc.roa (raw, json)
Hash identifier: x4dDNMoeG4beFhBOpMZmOHnMptSML46EQXrwsJ4Z/ng=
Subject key identifier: FB:54:85:BD:58:1E:95:87:3E:67:74:B0:23:37:8D:19:05:94:BE:D7
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01939C3D9A124AFBD5EFD8DF715F5FFB0F15
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-1SFvVgelYc-Z3SwIzeNGQWUvtc.roa
Signing time: Fri 06 Dec 2024 13:51:42 +0000
ROA not before: Fri 06 Dec 2024 13:51:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2914
IP address blocks: 31.56.154.0/24 maxlen: 24
31.56.158.0/24 maxlen: 24
31.56.159.0/24 maxlen: 24
31.56.168.0/24 maxlen: 24
31.56.169.0/24 maxlen: 24
31.56.170.0/24 maxlen: 24
31.56.171.0/24 maxlen: 24
31.56.174.0/24 maxlen: 24
31.56.175.0/24 maxlen: 24
31.57.16.0/22 maxlen: 24
31.57.20.0/22 maxlen: 24
31.57.24.0/22 maxlen: 24
31.57.28.0/22 maxlen: 24
31.57.48.0/22 maxlen: 24
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.92.0/22 maxlen: 24
31.57.96.0/22 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.58.196.0/22 maxlen: 24
31.58.204.0/22 maxlen: 24
31.58.208.0/24 maxlen: 24
31.58.209.0/24 maxlen: 24
31.58.212.0/22 maxlen: 24
31.58.220.0/22 maxlen: 24
31.58.224.0/22 maxlen: 24
31.59.120.0/22 maxlen: 24
217.60.0.0/18 maxlen: 24
217.60.1.0/24 maxlen: 24
217.60.5.0/24 maxlen: 24
217.60.11.0/24 maxlen: 24
217.60.13.0/24 maxlen: 24
217.60.24.0/24 maxlen: 24
217.60.25.0/24 maxlen: 24
217.60.26.0/24 maxlen: 24
217.60.27.0/24 maxlen: 24
217.60.245.0/24 maxlen: 24
217.60.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Dec 2024 15:06:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9c:3d:9a:12:4a:fb:d5:ef:d8:df:71:5f:5f:fb:0f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 6 13:51:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb5485bd581e95873e6774b023378d190594bed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:06:e3:ed:c4:6b:88:1c:05:bd:a9:4f:b1:b1:
ff:25:e1:9e:f7:20:38:6f:13:6c:3b:cd:ad:d1:3f:
a6:9b:7a:ec:44:ec:02:0e:09:d9:9d:f5:a8:ad:0f:
39:38:8c:0f:ff:23:6a:5f:40:19:ee:e4:48:e3:01:
7e:28:35:9a:48:04:a7:02:45:cc:c2:90:c6:7a:68:
da:3f:ae:4d:5c:58:b2:81:b5:7b:12:3d:b3:6e:68:
73:c9:79:33:69:a8:8f:7f:67:62:82:d4:93:6f:39:
0b:22:e9:e3:2b:14:95:bf:c9:68:55:a3:62:5f:a9:
b1:9b:83:85:68:82:07:c8:c8:78:da:cd:a2:c8:95:
27:a8:8a:6a:87:64:4e:73:a7:43:79:95:4a:1e:d6:
34:27:d0:5b:dd:8c:d2:58:52:2e:d2:ae:6d:a0:b2:
97:f5:89:6f:7c:7d:8c:d1:5c:17:95:80:5b:c4:0c:
00:59:7f:c6:30:23:60:4b:04:74:f8:c8:27:60:40:
98:b0:98:b6:31:2b:76:5e:64:da:61:52:d9:d5:d9:
1a:4a:28:b7:88:f5:17:ea:ee:d1:66:c9:74:e5:9b:
24:15:e4:28:ca:3f:7c:a9:57:11:24:d4:3c:42:61:
af:58:c2:77:c8:df:9f:b3:c4:0d:1f:e9:b0:ac:ea:
f2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:54:85:BD:58:1E:95:87:3E:67:74:B0:23:37:8D:19:05:94:BE:D7
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-1SFvVgelYc-Z3SwIzeNGQWUvtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.154.0/24
31.56.158.0/23
31.56.168.0/22
31.56.174.0/23
31.57.16.0/20
31.57.48.0/20
31.57.92.0-31.57.99.255
31.57.120.0/21
31.58.196.0/22
31.58.204.0-31.58.209.255
31.58.212.0/22
31.58.220.0-31.58.227.255
31.59.120.0/22
217.60.0.0/18
217.60.245.0/24
217.60.248.0/24
Signature Algorithm: sha256WithRSAEncryption
43:09:fc:ca:00:cd:f2:3d:7a:6d:2a:b9:9b:ed:a7:03:c2:58:
75:34:ff:cd:9c:32:c2:ae:71:7b:3a:f4:08:a8:f0:74:4d:99:
b1:3c:fc:a3:63:a5:30:84:a4:ce:57:0d:a4:4e:ac:8b:22:43:
7f:9e:f8:7d:7a:cc:5d:c6:f5:df:c4:05:b7:89:1b:34:26:6d:
b7:7f:77:39:7d:c2:e6:b2:27:f4:2f:12:4e:15:61:9f:f5:67:
9a:5f:cf:ca:83:5e:3b:f5:a5:79:19:be:c1:2f:58:68:18:f2:
63:0d:35:85:39:5a:ee:73:a7:59:9c:b6:fb:07:a7:a7:e1:f6:
d2:2e:7f:17:c7:7c:7f:cd:6a:36:af:5f:7f:b7:b7:09:c2:a5:
30:6f:74:58:1b:eb:cf:06:86:7b:5f:02:b7:8b:50:01:45:8e:
d4:c2:26:34:36:19:cc:e8:bd:45:2d:db:aa:e4:99:b2:ff:fd:
81:be:d6:6a:4d:07:11:36:0b:06:da:04:d1:1d:17:60:7f:4a:
d8:2e:60:18:18:a2:2a:7b:f0:2c:51:ab:b8:b6:ed:97:3a:2c:
b7:d4:f5:0d:6c:e5:1f:9d:0d:1e:22:11:bc:79:c9:62:e9:2f:
60:48:6d:e4:81:c6:88:76:04:53:e6:8b:ab:17:26:67:21:a9:
d9:a2:f3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:30:30 2025 by rpki-client