Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-NlZMCW5MpwkpaFPrYc8zBiwDZ8.roa
File: 1-NlZMCW5MpwkpaFPrYc8zBiwDZ8.roa (raw, json)
Hash identifier: jJ2mKW2GnRb0lYZt/t3AKbDgTohS2+ajlWHmEdgakJA=
Subject key identifier: F8:D9:59:30:25:B9:32:9C:24:A5:A1:4F:AD:87:3C:CC:18:B0:0D:9F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196581EB97583C007993F5E485B2DC500E0
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-NlZMCW5MpwkpaFPrYc8zBiwDZ8.roa
Signing time: Mon 21 Apr 2025 11:32:10 +0000
ROA not before: Mon 21 Apr 2025 11:32:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48678
IP address blocks: 31.56.16.0/22 maxlen: 24
31.57.16.0/21 maxlen: 24
31.57.135.0/24 maxlen: 24
31.58.176.0/22 maxlen: 24
31.58.200.0/22 maxlen: 24
31.58.216.0/22 maxlen: 24
31.58.235.0/24 maxlen: 24
31.58.236.0/24 maxlen: 24
31.58.240.0/22 maxlen: 24
31.58.244.0/24 maxlen: 24
31.58.247.0/24 maxlen: 24
31.58.251.0/24 maxlen: 24
31.58.252.0/22 maxlen: 24
31.59.64.0/22 maxlen: 24
31.59.80.0/22 maxlen: 24
31.59.124.0/22 maxlen: 24
31.59.176.0/21 maxlen: 24
31.59.188.0/22 maxlen: 24
31.59.192.0/22 maxlen: 24
31.59.216.0/22 maxlen: 24
217.60.16.0/21 maxlen: 24
217.60.28.0/22 maxlen: 24
217.60.64.0/18 maxlen: 24
217.60.187.0/24 maxlen: 24
217.60.196.0/23 maxlen: 24
217.60.244.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Apr 2025 11:40:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:1e:b9:75:83:c0:07:99:3f:5e:48:5b:2d:c5:00:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 21 11:32:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8d9593025b9329c24a5a14fad873ccc18b00d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:90:11:86:77:df:e9:05:df:22:4d:68:6d:cb:
b9:eb:0d:27:5e:b2:6a:c2:1f:3d:ac:33:43:5c:4c:
5b:04:e2:60:54:ee:7a:3f:2f:ce:b3:a5:fd:ac:53:
83:ae:77:b8:fc:b8:2e:d5:b4:41:35:d6:9c:f3:9c:
23:90:1a:12:a2:34:7e:b1:95:b7:fc:3f:d1:ec:99:
dd:dd:15:67:d4:f5:73:15:bc:fd:3c:e8:0e:e3:62:
bb:02:67:9d:6d:77:78:df:2b:1f:c2:15:13:f2:67:
7b:7c:81:9b:c6:c0:23:f9:bc:e8:e1:8f:60:67:a1:
c8:64:01:12:66:8c:eb:6b:4a:f7:8c:1c:67:82:35:
8b:6e:90:95:9c:73:1a:ce:bd:08:91:8b:7f:ae:a4:
16:63:7c:a7:22:1c:4d:7c:cc:a1:21:14:2b:7b:1b:
26:66:ac:3e:fa:aa:ff:62:f3:94:66:ed:30:c7:44:
db:ff:03:f4:51:1b:e9:76:1c:83:86:de:f9:0a:a8:
d4:8b:7d:c8:fa:fa:77:a4:ba:34:70:0c:64:2f:7b:
9a:3b:3d:96:f3:0c:34:64:50:e1:fe:2d:88:14:88:
01:f8:4f:3c:24:8d:c0:d6:f7:f1:8b:7d:ed:81:85:
41:e7:2b:55:3a:de:fb:8f:5d:76:9a:06:e9:0a:32:
80:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D9:59:30:25:B9:32:9C:24:A5:A1:4F:AD:87:3C:CC:18:B0:0D:9F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-NlZMCW5MpwkpaFPrYc8zBiwDZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.16.0/22
31.57.16.0/21
31.57.135.0/24
31.58.176.0/22
31.58.200.0/22
31.58.216.0/22
31.58.235.0-31.58.236.255
31.58.240.0-31.58.244.255
31.58.247.0/24
31.58.251.0-31.58.255.255
31.59.64.0/22
31.59.80.0/22
31.59.124.0/22
31.59.176.0/21
31.59.188.0-31.59.195.255
31.59.216.0/22
217.60.16.0/21
217.60.28.0/22
217.60.64.0/18
217.60.187.0/24
217.60.196.0/23
217.60.244.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:f6:cc:5c:11:a9:e6:52:cd:65:ae:79:eb:e3:02:47:0f:d7:
19:20:9f:90:a1:14:aa:0e:10:c4:c1:8e:ec:b7:59:c4:9d:33:
c5:a2:92:37:7a:dd:c8:a9:d3:e4:e3:0b:4d:39:81:41:8c:cf:
cc:f8:70:7a:1f:33:7a:dd:20:5e:05:cc:58:65:7a:63:2c:49:
d3:22:12:1e:90:53:4e:47:d4:f8:5c:bb:d0:b9:02:94:b3:cd:
2f:2d:75:1c:9f:5f:d5:72:eb:c9:c9:d4:1c:31:62:8a:24:d6:
ff:b7:ac:53:38:dd:68:88:65:59:42:8b:53:36:1e:4e:fe:df:
e3:1f:c2:ed:a8:38:da:6c:17:b6:c6:30:d9:3c:81:a8:23:31:
51:a1:75:f0:ac:7c:e4:58:03:d2:ff:d4:70:96:d8:a3:47:36:
aa:59:13:a5:a3:39:d3:5e:e3:ed:77:fc:08:87:90:b6:11:de:
5b:8f:40:29:dd:0a:17:4e:d5:85:a1:eb:11:25:f6:c6:06:f8:
36:93:1d:de:bb:e6:81:24:d2:86:44:6a:9c:8e:b5:1b:2b:b5:
5c:c3:e2:c3:69:51:21:a0:95:91:b1:c9:83:71:78:d4:20:2f:
6d:41:50:70:18:86:3d:af:fa:b5:7a:62:b0:e7:8d:d7:f1:08:
61:fa:c3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:58:05 2025 by rpki-client