Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IViVNaZ-E8D3KziRTlKblaY0bgo.roa
File: IViVNaZ-E8D3KziRTlKblaY0bgo.roa (raw, json)
Hash identifier: 9pQwDR5YIJ1dvjc7n0Q+2maraSf6LdylynjeA2p39ts=
Subject key identifier: 21:58:95:35:A6:7E:13:C0:F7:2B:38:91:4E:52:9B:95:A6:34:6E:0A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196821217A5D8842E406F3C3BC3218A7940
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IViVNaZ-E8D3KziRTlKblaY0bgo.roa
Signing time: Tue 29 Apr 2025 15:02:25 +0000
ROA not before: Tue 29 Apr 2025 15:02:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 31.56.23.0/24 maxlen: 24
31.56.42.0/23 maxlen: 23
31.56.220.0/23 maxlen: 23
31.56.224.0/23 maxlen: 23
31.56.230.0/23 maxlen: 23
31.56.236.0/23 maxlen: 23
31.57.120.0/23 maxlen: 23
31.57.126.0/23 maxlen: 23
31.58.87.0/24 maxlen: 24
31.58.220.0/23 maxlen: 23
31.59.138.0/23 maxlen: 23
31.59.168.0/23 maxlen: 23
31.59.173.0/24 maxlen: 24
31.59.174.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 17:07:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:12:17:a5:d8:84:2e:40:6f:3c:3b:c3:21:8a:79:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 29 15:02:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21589535a67e13c0f72b38914e529b95a6346e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4e:31:2c:40:45:be:c2:ce:d5:be:34:86:3b:
99:85:c2:4c:fc:32:39:1c:be:c9:fc:79:aa:c5:6f:
c8:d4:c3:a0:e9:d2:6c:52:cb:5d:1d:6c:21:d6:8e:
e7:d6:ba:07:33:50:a5:3d:d3:09:bf:96:74:1d:f6:
06:07:3c:c8:11:74:8d:20:5a:cc:54:60:24:9e:d7:
a7:b1:ac:a4:1e:84:87:25:b7:04:60:c8:0a:9b:73:
c3:90:b4:ee:4e:79:fe:14:a9:e6:e2:63:2f:f7:50:
ea:a8:09:a8:17:e5:70:53:60:55:99:eb:21:a3:21:
03:5b:71:63:88:d0:3c:fa:5a:d2:89:f5:42:f8:26:
05:04:77:ee:3c:52:bb:53:fe:c0:ba:54:fb:30:96:
b6:31:dd:98:30:e8:3f:95:e9:19:0b:04:b8:b4:e4:
c2:63:76:20:e7:cf:1d:b8:80:ae:fb:6e:be:95:a5:
36:fd:88:f2:a5:e8:52:37:76:38:56:d5:09:a8:6d:
2a:b8:38:d7:4f:0b:27:92:15:f6:a1:c8:4e:79:ae:
bf:8b:d2:f4:e9:dc:74:db:72:ca:55:72:8f:d9:af:
fb:80:de:44:15:13:3f:e3:25:d2:fc:a2:e6:d4:43:
99:25:1c:e4:01:81:08:bf:6f:e0:6d:89:6c:de:68:
59:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:58:95:35:A6:7E:13:C0:F7:2B:38:91:4E:52:9B:95:A6:34:6E:0A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IViVNaZ-E8D3KziRTlKblaY0bgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.23.0/24
31.56.42.0/23
31.56.220.0/23
31.56.224.0/23
31.56.230.0/23
31.56.236.0/23
31.57.120.0/23
31.57.126.0/23
31.58.87.0/24
31.58.220.0/23
31.59.138.0/23
31.59.168.0/23
31.59.173.0-31.59.175.255
Signature Algorithm: sha256WithRSAEncryption
05:da:32:47:33:41:3c:f1:08:9e:56:10:1c:9e:73:b5:c9:29:
1e:25:77:26:c1:97:28:8a:a4:f1:58:b6:8f:38:97:59:da:6d:
d1:1c:c4:77:48:d7:44:93:66:c1:50:30:a2:61:40:9c:bc:f8:
09:54:b0:3f:8b:d7:79:ab:08:8c:3f:ab:16:41:58:69:a2:86:
d5:7b:1f:16:2b:0a:db:5a:71:6d:0a:a2:28:28:ac:d1:cf:28:
2a:98:48:8b:fc:3e:1c:0b:43:60:52:ce:6d:df:f5:b3:0f:44:
c0:24:a5:f1:28:9d:59:e0:1b:63:45:16:67:7f:08:81:6e:cf:
71:57:7a:ff:a7:21:27:fc:65:5a:e9:18:80:6a:3d:7b:aa:bf:
d8:67:67:85:28:86:ae:ac:ed:3e:d4:9f:e8:8b:57:67:3b:38:
2c:2c:f0:1a:6d:bb:05:25:d8:24:f6:e9:5d:95:24:f5:a2:d7:
f4:41:5c:6f:3b:95:09:3b:ea:f9:3a:a9:a8:26:bf:11:05:b2:
b0:21:a1:e8:42:e7:67:75:95:66:af:3c:1a:a2:3d:4a:13:a7:
cd:86:24:a0:45:bb:a1:00:b4:28:27:0e:36:2a:1a:99:2b:4d:
4c:ea:37:f8:b6:41:c6:64:d0:24:cf:8e:73:67:29:58:72:6d:
22:e1:69:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:40:12 2025 by rpki-client