Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HuAGlm5Tu_QGVfnZocG0UIQnEc8.roa
File: HuAGlm5Tu_QGVfnZocG0UIQnEc8.roa (raw, json)
Hash identifier: MEKHCwUHqH6mcvWeQy7RKZc8htD9N7Mp3G86D7MFT8E=
Subject key identifier: 1E:E0:06:96:6E:53:BB:F4:06:55:F9:D9:A1:C1:B4:50:84:27:11:CF
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01967D043912DA5230521D9C44ACEB0B7335
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HuAGlm5Tu_QGVfnZocG0UIQnEc8.roa
Signing time: Mon 28 Apr 2025 15:29:10 +0000
ROA not before: Mon 28 Apr 2025 15:29:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 31.56.154.0/24 maxlen: 24
31.56.158.0/24 maxlen: 24
31.56.159.0/24 maxlen: 24
31.56.168.0/24 maxlen: 24
31.56.169.0/24 maxlen: 24
31.56.170.0/24 maxlen: 24
31.56.171.0/24 maxlen: 24
31.56.174.0/24 maxlen: 24
31.56.175.0/24 maxlen: 24
31.57.24.0/22 maxlen: 24
31.57.28.0/22 maxlen: 24
31.57.48.0/22 maxlen: 24
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.212.0/22 maxlen: 24
217.60.0.0/21 maxlen: 24
217.60.0.0/24 maxlen: 24
217.60.1.0/24 maxlen: 24
217.60.2.0/24 maxlen: 24
217.60.4.0/24 maxlen: 24
217.60.5.0/24 maxlen: 24
217.60.6.0/24 maxlen: 24
217.60.8.0/21 maxlen: 24
217.60.8.0/24 maxlen: 24
217.60.10.0/24 maxlen: 24
217.60.11.0/24 maxlen: 24
217.60.12.0/24 maxlen: 24
217.60.13.0/24 maxlen: 24
217.60.14.0/24 maxlen: 24
217.60.24.0/22 maxlen: 24
217.60.32.0/21 maxlen: 24
217.60.44.0/22 maxlen: 24
217.60.56.0/21 maxlen: 24
217.60.56.0/24 maxlen: 24
217.60.57.0/24 maxlen: 24
217.60.58.0/24 maxlen: 24
217.60.59.0/24 maxlen: 24
217.60.60.0/24 maxlen: 24
217.60.61.0/24 maxlen: 24
217.60.62.0/24 maxlen: 24
217.60.63.0/24 maxlen: 24
217.60.188.0/22 maxlen: 24
217.60.192.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 May 2025 09:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:04:39:12:da:52:30:52:1d:9c:44:ac:eb:0b:73:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 28 15:29:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ee006966e53bbf40655f9d9a1c1b450842711cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ab:45:68:2e:ab:ce:fd:91:ec:e7:ca:03:c3:
d0:78:58:fd:a3:5e:5f:07:46:d1:3e:ad:d4:b9:e0:
a7:5e:e5:02:18:23:c5:9b:2a:f9:02:51:bf:b5:e3:
d9:8d:90:00:fd:f4:59:5e:25:8c:dc:40:04:0f:06:
36:3e:7b:17:5b:26:b7:06:02:ea:6f:4e:57:5a:c5:
0d:4f:c8:df:2d:78:ce:d9:da:c3:e2:3e:93:03:5d:
77:14:86:61:21:8a:43:b6:27:1a:19:12:b7:d8:42:
eb:ab:bc:9d:5c:66:f4:5f:91:78:63:f2:71:19:f6:
28:c1:8a:0d:50:03:68:1a:5d:7b:2f:ef:61:6e:cd:
4e:10:c3:7e:ce:2e:45:f9:eb:9f:c4:27:1f:ce:cb:
7c:fe:a6:3b:9e:af:01:ea:9f:89:d4:4b:e3:18:c8:
32:c8:38:7c:d0:97:0e:9f:42:fc:f3:26:77:ca:5f:
c6:48:d6:1d:a4:fa:12:b3:ab:02:95:43:d9:c7:31:
16:62:eb:e3:51:8a:e9:94:ab:dc:bb:a0:1b:20:ed:
8e:02:b1:b7:3a:b1:6c:ae:6d:d0:07:e6:d9:be:1d:
47:e7:bc:6c:c9:37:e6:3b:d8:d3:9b:ed:7d:bc:ac:
e3:da:80:98:52:99:8d:d1:41:3e:01:a9:ba:79:2d:
c4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E0:06:96:6E:53:BB:F4:06:55:F9:D9:A1:C1:B4:50:84:27:11:CF
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HuAGlm5Tu_QGVfnZocG0UIQnEc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.154.0/24
31.56.158.0/23
31.56.168.0/22
31.56.174.0/23
31.57.24.0/21
31.57.48.0/20
31.58.34.0/23
31.58.212.0/22
217.60.0.0/20
217.60.24.0/22
217.60.32.0/21
217.60.44.0/22
217.60.56.0/21
217.60.188.0-217.60.195.255
Signature Algorithm: sha256WithRSAEncryption
9a:cf:9e:42:27:5f:d6:cf:00:c9:b3:01:bd:ae:c2:95:10:54:
cf:3f:65:ee:bf:6d:64:8e:70:29:c5:f6:cf:2d:d4:cb:b0:7c:
51:7e:fc:b2:f7:c3:55:52:28:c7:f3:42:91:6b:5a:9e:30:48:
99:07:1d:71:ba:8e:91:ce:1f:16:70:22:34:31:a2:02:c7:bc:
20:8f:ea:c5:f3:41:c3:74:8f:f3:ee:fb:e2:4c:19:67:53:f5:
35:37:0a:e7:12:d9:94:03:96:dd:fa:e1:36:b6:5d:d4:14:ca:
5e:5e:9e:30:f0:49:fc:7a:2e:9c:6d:57:ce:18:3c:9a:db:b1:
4c:53:b7:1f:8a:31:8b:88:f2:2f:26:62:d2:e1:78:2d:a6:f2:
db:56:0b:bb:28:29:96:77:be:76:ec:41:d8:a0:21:bf:0f:da:
c1:72:04:d4:3e:31:f1:f3:82:a3:3a:a0:ed:5d:b9:7c:af:44:
a0:4e:04:2c:42:73:67:26:5a:8f:77:d1:85:aa:fc:af:86:f2:
73:bb:0c:a1:4e:0d:c7:2a:b1:6d:d0:46:00:fa:8a:f6:11:a7:
73:a3:ba:59:29:9d:38:f9:e8:50:be:50:ee:66:a8:f1:5a:ec:
79:a7:45:df:29:a1:e1:cb:5b:ec:90:af:4d:02:f0:cb:05:14:
e3:cb:0e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:41:30 2025 by rpki-client