Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QaBFCyezcUU_Q2CQwFmvrSWoG-0.roa
File: QaBFCyezcUU_Q2CQwFmvrSWoG-0.roa (raw, json)
Hash identifier: /lVEkXZen8H7HL/maF6zUIfMUfME6mm2XxQZaTuRcYI=
Subject key identifier: 41:A0:45:0B:27:B3:71:45:3F:43:60:90:C0:59:AF:AD:25:A8:1B:ED
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196A17CC5173B8BF170B33D5C3EDB9C38E4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QaBFCyezcUU_Q2CQwFmvrSWoG-0.roa
Signing time: Mon 05 May 2025 17:27:10 +0000
ROA not before: Mon 05 May 2025 17:27:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212742
IP address blocks: 31.56.176.0/22 maxlen: 24
31.56.184.0/22 maxlen: 24
31.58.180.0/22 maxlen: 24
31.58.184.0/21 maxlen: 24
31.58.192.0/22 maxlen: 24
31.58.196.0/22 maxlen: 24
31.59.36.0/22 maxlen: 24
31.59.44.0/22 maxlen: 24
31.59.84.0/22 maxlen: 24
31.59.90.0/23 maxlen: 24
31.59.92.0/22 maxlen: 24
31.59.101.0/24 maxlen: 24
31.59.102.0/23 maxlen: 24
31.59.104.0/23 maxlen: 24
31.59.106.0/24 maxlen: 24
217.60.8.0/22 maxlen: 24
217.60.32.0/22 maxlen: 24
217.60.44.0/22 maxlen: 24
217.60.48.0/22 maxlen: 24
217.60.128.0/19 maxlen: 24
217.60.160.0/20 maxlen: 24
217.60.176.0/21 maxlen: 24
217.60.184.0/23 maxlen: 24
217.60.186.0/24 maxlen: 24
217.60.200.0/21 maxlen: 24
217.60.208.0/20 maxlen: 24
217.60.224.0/21 maxlen: 24
217.60.232.0/22 maxlen: 24
217.60.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 May 2025 17:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:7c:c5:17:3b:8b:f1:70:b3:3d:5c:3e:db:9c:38:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 5 17:27:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41a0450b27b371453f436090c059afad25a81bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:46:e4:cd:1d:82:1e:1d:3f:75:ba:69:ab:24:
60:57:3a:55:83:59:42:cf:cf:1d:9d:3c:f8:4c:c1:
4f:8e:10:02:ac:bc:87:b7:49:e3:22:bb:c2:45:04:
32:47:68:bf:06:f4:5e:e8:6a:91:bf:3f:b0:79:5b:
ba:6e:80:d4:ab:b5:23:93:1a:58:e6:ef:dc:80:cd:
05:05:ba:6e:5a:ae:f6:93:81:e0:f2:4f:96:b1:16:
0a:48:fc:6d:9b:be:a6:5d:29:96:e9:2a:e6:71:a9:
92:39:93:e6:55:10:27:20:76:16:ec:a1:7c:7a:1c:
43:ec:b4:40:16:47:32:bd:b8:77:1c:4d:aa:4b:26:
d1:62:bd:bf:96:0e:be:ca:4f:0a:23:03:f7:ac:e2:
19:54:81:8e:b4:6c:93:2d:d2:45:86:e4:f8:bb:5f:
85:5f:7f:1c:10:00:84:dc:49:40:cc:0a:96:00:5a:
79:31:a9:d4:3d:55:23:fd:79:8a:ff:00:3d:0c:b9:
65:fd:d3:c1:2d:83:70:51:ed:08:d6:2f:8c:c7:8b:
80:e9:7b:dd:2d:0a:93:fb:a7:52:d0:60:21:f5:37:
46:28:65:37:10:1d:af:5e:38:dc:db:aa:4c:c5:aa:
30:23:4e:5f:2d:13:28:09:12:c1:da:af:53:0f:c8:
ed:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A0:45:0B:27:B3:71:45:3F:43:60:90:C0:59:AF:AD:25:A8:1B:ED
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QaBFCyezcUU_Q2CQwFmvrSWoG-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.176.0/22
31.56.184.0/22
31.58.180.0-31.58.199.255
31.59.36.0/22
31.59.44.0/22
31.59.84.0/22
31.59.90.0-31.59.95.255
31.59.101.0-31.59.106.255
217.60.8.0/22
217.60.32.0/22
217.60.44.0-217.60.51.255
217.60.128.0-217.60.186.255
217.60.200.0-217.60.235.255
217.60.250.0/24
Signature Algorithm: sha256WithRSAEncryption
00:c6:cc:6e:a0:23:5c:ed:90:2f:4d:01:a6:00:ba:38:bd:5b:
df:20:22:d8:e9:d7:10:94:77:eb:fe:c4:79:e3:3f:ff:bd:fa:
aa:76:90:fd:64:ad:72:05:78:5c:74:3e:15:27:01:10:2c:51:
46:fd:c5:d8:92:a5:9d:c8:96:e1:6c:bc:eb:cc:ac:56:c2:51:
76:18:ba:4b:34:3d:32:8f:ac:07:2f:b0:c9:e5:c0:7d:5b:59:
39:1a:a8:ba:ef:c4:bb:90:9c:be:59:80:9e:ac:52:a3:85:6b:
f7:2f:11:7e:c6:17:1c:8d:ce:33:23:56:53:52:1d:12:78:d3:
5a:29:aa:21:da:b5:d2:23:34:49:77:c0:5c:c2:cf:2b:60:d8:
f8:63:e9:a1:30:4c:0e:6f:40:56:cf:5f:85:a1:a2:bd:99:c9:
63:60:aa:bb:23:c1:d4:45:13:ff:42:ed:71:8c:4e:70:3f:25:
ef:27:8a:41:64:99:43:7d:5b:46:2b:3f:ea:4a:45:6e:31:4d:
75:2b:a7:d8:7d:d4:d1:9d:cc:9b:3e:ca:49:d1:0a:86:32:9c:
05:b4:2c:59:14:cb:98:7e:45:8c:9c:6b:55:95:e4:82:35:2e:
f2:ce:72:95:ca:41:54:e6:5c:fc:3d:d4:5d:a3:a8:83:7e:56:
cf:41:13:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:31:04 2025 by rpki-client