Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/P8FXDzsDoP8ciszldJ0kIWky9t0.roa
File: P8FXDzsDoP8ciszldJ0kIWky9t0.roa (raw, json)
Hash identifier: 24DKCoUK665vkUOsUdZf+9nawPuQ7dJupef/78KDyIM=
Subject key identifier: 3F:C1:57:0F:3B:03:A0:FF:1C:8A:CC:E5:74:9D:24:21:69:32:F6:DD
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01941D744F9D457BC41C2646F9A33C52EBC7
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/P8FXDzsDoP8ciszldJ0kIWky9t0.roa
Signing time: Tue 31 Dec 2024 16:02:29 +0000
ROA not before: Tue 31 Dec 2024 16:02:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215304
IP address blocks: 31.56.59.0/24 maxlen: 24
31.56.67.0/24 maxlen: 24
31.56.69.0/24 maxlen: 24
31.56.72.0/24 maxlen: 24
31.56.84.0/24 maxlen: 24
31.56.88.0/24 maxlen: 24
31.56.120.0/24 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.122.0/24 maxlen: 24
31.56.123.0/24 maxlen: 24
31.56.126.0/24 maxlen: 24
31.56.200.0/24 maxlen: 24
31.56.202.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.132.0/24 maxlen: 24
31.57.133.0/24 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.215.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.221.0/24 maxlen: 24
31.57.255.0/24 maxlen: 24
31.58.88.0/24 maxlen: 24
31.58.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1d:74:4f:9d:45:7b:c4:1c:26:46:f9:a3:3c:52:eb:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 31 16:02:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3fc1570f3b03a0ff1c8acce5749d24216932f6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3b:cc:58:91:91:7b:bc:4c:84:34:ea:76:40:
fe:8c:a8:78:86:1b:1e:38:97:32:4d:c1:18:94:f3:
39:00:cb:2d:5f:97:2a:06:c9:15:f7:30:bd:e0:75:
de:ba:a7:b5:66:ca:a9:45:2f:8c:8e:91:93:2a:3c:
2d:5c:00:b4:3f:9e:fd:0a:24:d2:39:5a:9b:65:ee:
4b:f3:e9:22:bb:f9:37:08:9e:e5:d2:10:e7:24:17:
fc:5b:c2:5e:dc:d4:05:47:22:82:f6:f7:f3:82:ee:
0f:20:fd:bb:0e:cd:2f:80:d7:10:d5:86:b2:62:15:
d3:75:c0:d2:d0:0e:bf:87:63:a3:4e:c8:20:f3:49:
43:a5:84:da:b8:1a:18:3a:49:9d:fc:9f:0b:61:aa:
bf:f2:e0:d6:e4:ed:c2:5b:6b:2c:60:43:2b:90:54:
3e:7b:8f:82:ee:eb:05:d6:63:9b:23:f2:08:75:0d:
34:56:5e:f8:c2:31:35:8d:a0:c9:6b:58:5e:12:b0:
cc:d6:77:6d:9c:59:d6:90:1c:c1:eb:0b:4d:62:01:
5b:79:35:65:01:f7:2e:43:85:84:eb:17:3f:48:a5:
f3:fb:ef:95:05:1a:62:80:c7:50:b0:38:69:a3:c8:
84:75:dc:e0:57:94:ca:8a:0f:34:8c:8a:af:d4:94:
91:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C1:57:0F:3B:03:A0:FF:1C:8A:CC:E5:74:9D:24:21:69:32:F6:DD
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/P8FXDzsDoP8ciszldJ0kIWky9t0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.59.0/24
31.56.67.0/24
31.56.69.0/24
31.56.72.0/24
31.56.84.0/24
31.56.88.0/24
31.56.120.0/22
31.56.126.0/24
31.56.200.0/24
31.56.202.0/24
31.57.104.0/21
31.57.132.0/23
31.57.181.0/24
31.57.215.0/24
31.57.219.0/24
31.57.221.0/24
31.57.255.0/24
31.58.88.0/23
Signature Algorithm: sha256WithRSAEncryption
19:4a:56:c5:a3:8c:0a:36:a5:d5:cd:a7:a6:6d:b6:38:10:f9:
41:da:97:78:c6:34:b6:f7:41:1c:69:85:74:06:93:ff:8b:14:
a8:40:bf:ac:a7:70:da:15:3b:73:62:6f:81:32:20:95:92:5a:
73:a0:7f:cd:1f:f9:19:9a:26:f2:5d:6a:45:96:bb:80:94:22:
db:f9:50:e1:e6:cd:2a:7b:cd:9c:bc:98:8d:e0:51:74:c8:32:
2f:88:6f:ea:6c:78:71:0b:b8:d7:32:b5:9c:3e:e7:ad:61:ad:
c0:0a:65:ab:c5:1e:91:7d:66:bf:f2:c8:7c:41:b2:59:e2:b6:
56:14:f0:83:1e:d3:8c:8e:3f:13:90:4e:43:11:9c:d8:0b:ba:
c9:e2:47:34:7b:8e:c9:2b:d6:c6:4f:bc:7a:19:f7:b4:8e:83:
a9:01:0d:f7:ac:0c:46:c1:31:80:69:9b:27:c5:3c:50:53:71:
08:a7:3d:97:4e:9e:34:dc:bf:83:c2:34:8f:6b:d5:76:b1:13:
89:13:df:6d:09:5a:a4:94:94:db:4e:2f:d7:40:30:66:7c:4f:
10:b2:67:84:db:68:ed:de:17:b8:3f:07:4a:f6:70:09:15:96:
b0:e0:66:3b:c2:f6:52:19:4b:68:a1:6a:28:e6:eb:2e:c1:4e:
a0:7e:d6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 14:28:03 2025 by rpki-client