Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/AGXR3tEYeDWR2o40CE_ulaH_3eI.roa
File: AGXR3tEYeDWR2o40CE_ulaH_3eI.roa (raw, json)
Hash identifier: EJ1kbPeEFFMtTSfqXret0NEgsk9XKTCA9JLGLMwqq+A=
Subject key identifier: 00:65:D1:DE:D1:18:78:35:91:DA:8E:34:08:4F:EE:95:A1:FF:DD:E2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019428232FC189AC2FB5AE20BBD8A31C6829
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/AGXR3tEYeDWR2o40CE_ulaH_3eI.roa
Signing time: Thu 02 Jan 2025 17:49:42 +0000
ROA not before: Thu 02 Jan 2025 17:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 31.56.23.0/24 maxlen: 24
31.56.25.0/24 maxlen: 24
31.56.27.0/24 maxlen: 24
31.56.28.0/22 maxlen: 24
31.56.32.0/24 maxlen: 24
31.56.34.0/24 maxlen: 24
31.56.36.0/24 maxlen: 24
31.56.38.0/24 maxlen: 24
31.56.40.0/24 maxlen: 24
31.56.58.0/24 maxlen: 24
31.56.61.0/24 maxlen: 24
31.56.68.0/24 maxlen: 24
31.56.70.0/24 maxlen: 24
31.56.80.0/22 maxlen: 22
31.56.92.0/22 maxlen: 22
31.56.96.0/22 maxlen: 22
31.56.100.0/22 maxlen: 22
31.57.119.0/24 maxlen: 24
31.57.168.0/22 maxlen: 24
31.58.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 Jan 2025 19:57:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:2f:c1:89:ac:2f:b5:ae:20:bb:d8:a3:1c:68:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0065d1ded118783591da8e34084fee95a1ffdde2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:88:bf:11:a3:8c:89:df:0e:6d:11:60:9b:19:
b7:17:2e:95:7f:cc:4f:be:73:8b:8c:10:79:d9:92:
bb:fa:3c:7e:48:91:99:4b:39:73:63:3d:f4:7d:b8:
58:b5:98:ba:88:67:01:52:41:ee:47:9b:d5:a7:37:
4f:7d:c8:7f:98:86:56:41:0c:69:4b:57:79:0c:4d:
ce:1e:70:6f:ad:49:15:07:ce:dd:b4:92:f8:61:2b:
4b:e0:49:76:3d:d3:65:f7:39:cb:b1:59:1d:be:39:
63:d0:5f:a8:1f:c7:42:d2:fc:04:01:bd:f8:59:72:
dd:71:cf:23:32:11:43:74:17:08:c1:83:45:d2:e3:
98:2a:d9:e0:75:db:ff:ff:15:0f:23:c4:28:85:e6:
4a:88:78:54:14:10:bf:de:8e:97:7e:97:29:5d:d2:
90:bf:11:d0:44:ea:b9:86:51:93:ae:19:5c:4e:5b:
2c:34:0b:65:58:17:ae:64:b3:ab:0a:f2:7c:44:18:
9f:94:31:82:52:e6:1c:28:8d:60:10:45:13:85:d0:
26:72:8d:e8:01:00:3c:d4:7c:99:ee:c6:bd:42:e6:
83:36:e5:2f:df:1b:8a:25:c2:c1:db:07:ce:c6:87:
54:0b:50:1c:b3:f0:13:d9:a9:89:5d:bd:f1:ba:de:
9b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:65:D1:DE:D1:18:78:35:91:DA:8E:34:08:4F:EE:95:A1:FF:DD:E2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/AGXR3tEYeDWR2o40CE_ulaH_3eI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.23.0/24
31.56.25.0/24
31.56.27.0-31.56.32.255
31.56.34.0/24
31.56.36.0/24
31.56.38.0/24
31.56.40.0/24
31.56.58.0/24
31.56.61.0/24
31.56.68.0/24
31.56.70.0/24
31.56.80.0/22
31.56.92.0-31.56.103.255
31.57.119.0/24
31.57.168.0/22
31.58.130.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:91:b9:48:4d:11:71:ca:d8:ef:e9:a6:36:70:2c:fe:80:6e:
f0:4b:cc:8f:5f:d5:5f:0a:e2:bb:7d:70:7f:b7:50:58:6c:4e:
ca:62:c1:e5:45:7f:3b:0d:23:68:60:84:62:80:c2:65:35:21:
9f:b0:79:4e:e0:1a:ee:1f:57:1e:f6:62:25:1e:a0:32:df:63:
31:3d:31:37:d1:79:4e:d6:e9:c6:9d:01:ba:2f:dc:6d:13:13:
07:11:f0:fd:c0:92:c4:12:b0:33:02:4c:68:7b:94:19:95:49:
63:9f:59:b2:52:dc:dd:40:5f:e8:c1:5d:f2:62:80:93:b3:6a:
75:ed:37:44:c4:9b:ab:d6:6b:36:de:1d:c1:8a:ea:e5:e5:be:
11:b8:7a:83:dd:69:ad:e0:d0:53:67:d5:d0:e8:71:88:d0:b2:
06:c1:c1:e7:34:ba:77:79:fc:9d:df:bf:38:e4:56:40:a3:ae:
57:b7:e2:a2:34:ac:6b:c9:22:53:72:2e:42:47:1e:f7:0c:8e:
e2:8a:c6:fe:5a:6f:13:80:6e:be:34:b0:da:28:f4:c9:70:07:
4b:15:3c:f9:f6:b5:75:c7:cf:18:57:26:db:2d:8b:a0:04:17:
92:a7:2f:71:4e:6a:32:04:88:65:25:23:db:fc:0d:e9:cc:ca:
59:24:e2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:45:01 2025 by rpki-client