Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4dsed-Mkgfy-ajx9WMiWwCK4ZP4.roa
File: 4dsed-Mkgfy-ajx9WMiWwCK4ZP4.roa (raw, json)
Hash identifier: iyZ/whvar0sWeMGEOHL38MMZ9r530MWqM6qkvjJxfUs=
Subject key identifier: E1:DB:1E:77:E3:24:81:FC:BE:6A:3C:7D:58:C8:96:C0:22:B8:64:FE
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192FBCE69973961686E6BC3BEF6F7AC3D43
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4dsed-Mkgfy-ajx9WMiWwCK4ZP4.roa
Signing time: Tue 05 Nov 2024 10:11:01 +0000
ROA not before: Tue 05 Nov 2024 10:11:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.39.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.66.0/24 maxlen: 24
31.56.85.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.112.0/21 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.127.0/24 maxlen: 24
31.56.156.0/24 maxlen: 24
31.57.0.0/24 maxlen: 24
31.57.1.0/24 maxlen: 24
31.57.2.0/24 maxlen: 24
31.57.3.0/24 maxlen: 24
31.57.4.0/24 maxlen: 24
31.57.5.0/24 maxlen: 24
31.57.6.0/24 maxlen: 24
31.57.7.0/24 maxlen: 24
31.57.8.0/24 maxlen: 24
31.57.9.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.134.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.240.0/22 maxlen: 24
31.57.244.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Nov 2024 10:13:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:fb:ce:69:97:39:61:68:6e:6b:c3:be:f6:f7:ac:3d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 5 10:11:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1db1e77e32481fcbe6a3c7d58c896c022b864fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:94:a7:01:ad:ad:90:31:3e:1c:93:61:a2:2e:
33:c3:19:c8:9c:e4:9a:03:d9:f0:7c:f8:03:c7:3a:
fc:bb:4a:20:ac:34:b0:43:fe:64:ab:84:91:04:a0:
c1:3d:f3:df:7c:5f:24:5c:dc:8c:04:22:90:82:bd:
6c:fd:34:ef:b5:fe:00:1a:ef:1c:35:cd:9c:42:b0:
34:24:5f:c6:21:7c:49:9f:cc:af:dd:54:da:6e:36:
6e:72:0c:4c:86:34:fe:4d:f4:48:a6:ea:3d:9d:7d:
b3:ac:54:f3:f0:db:d1:11:a9:d5:93:ff:62:8f:47:
a0:0c:b9:bf:16:1b:b4:b9:eb:65:9d:e6:9d:cc:84:
11:11:1f:e5:9e:d0:cf:5b:64:ea:22:59:68:d0:87:
12:4c:45:2b:4e:93:19:31:28:82:fd:b8:c1:5f:df:
80:0e:d1:ff:ac:07:fe:51:14:08:38:0d:03:90:2f:
32:be:18:17:db:d7:a7:d1:4d:0c:e4:18:8f:5d:df:
4a:4b:58:c6:5e:aa:9b:46:b2:38:3c:b4:bc:10:54:
6d:25:ea:97:55:97:73:ee:b0:b5:e2:9d:38:e3:95:
c2:0e:64:be:75:2c:51:69:e9:d4:f2:3b:e1:50:b3:
6f:17:e4:d8:43:30:75:bc:ee:4a:d4:74:94:2d:d1:
2f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DB:1E:77:E3:24:81:FC:BE:6A:3C:7D:58:C8:96:C0:22:B8:64:FE
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4dsed-Mkgfy-ajx9WMiWwCK4ZP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.39.0/24
31.56.42.0/23
31.56.66.0/24
31.56.85.0/24
31.56.89.0/24
31.56.112.0-31.56.123.255
31.56.127.0/24
31.56.156.0/24
31.57.0.0-31.57.9.255
31.57.132.0-31.57.134.255
31.57.176.0/21
31.57.192.0/22
31.57.232.0/22
31.57.240.0/21
31.57.252.0/22
Signature Algorithm: sha256WithRSAEncryption
83:e2:e6:52:e0:1d:86:bc:cc:c7:92:77:63:f1:b6:3f:4e:f6:
9c:88:f0:f7:14:fd:cf:51:89:9d:fb:79:a2:a6:5e:32:e7:15:
08:37:22:cb:f4:ca:cb:90:f2:0e:15:04:ba:f7:1d:61:2b:88:
50:8c:73:02:87:82:d5:41:b0:08:95:22:8b:ef:dc:83:77:b0:
6d:03:96:a4:f7:0c:6d:06:d9:39:fa:e7:b1:2c:c7:0e:8d:4c:
18:f4:06:08:40:19:d2:4e:f8:80:6e:43:9c:23:0d:2c:22:39:
be:1d:33:d4:8a:3a:67:a3:57:e9:89:ac:fa:dd:63:d8:7c:98:
bf:75:4c:9b:c7:d9:52:31:5f:12:7d:d0:81:f7:53:9c:03:2d:
cf:63:bf:f3:a4:4a:44:9e:b3:75:c6:ee:e2:a6:b7:71:4b:69:
ac:9d:aa:a3:40:4c:34:e2:74:7e:89:df:a2:31:6c:f7:e3:5f:
d2:85:c1:c5:c7:9b:49:5b:53:32:4e:44:3c:b7:17:b2:48:af:
9d:7e:21:89:21:d4:f9:e6:f3:4d:65:ab:a5:44:ab:0a:bf:91:
ae:83:9f:d2:eb:20:0b:9b:42:ab:3c:5d:08:b6:ad:8c:8d:21:
aa:8d:47:5c:f3:f5:2a:3a:66:36:90:e6:cc:4c:9c:5a:29:68:
f0:6a:41:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:23:36 2025 by rpki-client