Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VMx_3PU8e1GwqTYW3O3eYshNs1w.roa
File: VMx_3PU8e1GwqTYW3O3eYshNs1w.roa (raw, json)
Hash identifier: eI1/FlW4USC8QSIHKBwZTZRw+vOnaLAsa+v7pTYZwro=
Subject key identifier: 54:CC:7F:DC:F5:3C:7B:51:B0:A9:36:16:DC:ED:DE:62:C8:4D:B3:5C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195092A5127E2AA01701A524455E3BCCB18
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VMx_3PU8e1GwqTYW3O3eYshNs1w.roa
Signing time: Sat 15 Feb 2025 10:32:02 +0000
ROA not before: Sat 15 Feb 2025 10:32:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 31.56.59.0/24 maxlen: 24
31.56.86.0/24 maxlen: 24
31.56.107.0/24 maxlen: 24
31.56.156.0/24 maxlen: 24
31.57.162.0/23 maxlen: 23
31.57.164.0/23 maxlen: 23
31.57.180.0/24 maxlen: 24
31.57.208.0/24 maxlen: 24
31.57.209.0/24 maxlen: 24
31.57.210.0/24 maxlen: 24
31.57.211.0/24 maxlen: 24
31.57.212.0/24 maxlen: 24
31.57.213.0/24 maxlen: 24
31.57.214.0/24 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.227.0/24 maxlen: 24
31.58.41.0/24 maxlen: 24
31.58.42.0/24 maxlen: 24
31.58.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Feb 2025 16:56:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:09:2a:51:27:e2:aa:01:70:1a:52:44:55:e3:bc:cb:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 15 10:32:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54cc7fdcf53c7b51b0a93616dcedde62c84db35c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a7:7f:1a:20:93:95:87:ee:c1:71:45:44:af:
fe:76:00:7b:4e:5a:2c:ad:74:b5:95:a9:24:b6:d7:
b7:73:a4:7f:b5:38:6b:d6:a6:72:e9:ee:1b:5a:eb:
1f:3e:53:07:c4:35:1d:d4:b0:0b:a2:0f:ed:62:67:
bb:eb:34:8d:cc:b0:8c:1e:45:93:ae:6e:49:d2:75:
44:48:df:27:2e:6b:4c:06:fd:e1:47:e0:8c:f5:98:
16:81:5f:41:ef:fe:53:1d:cb:f6:55:4e:26:03:49:
09:46:78:3e:61:e8:60:41:45:b9:69:07:a0:f7:a2:
b9:0d:03:1d:75:87:b0:fc:b1:ef:d2:96:da:ac:6d:
5c:d5:43:18:d3:a5:85:07:89:b7:c4:b3:4d:2b:78:
3b:6e:f9:6c:22:c6:82:d8:44:d2:f6:8b:0a:c5:38:
c7:1a:20:c3:65:7a:05:17:49:00:60:9d:d6:92:9f:
74:6b:11:b4:d5:43:03:81:ac:59:d6:b3:f5:aa:f3:
73:2a:4c:92:fc:97:91:40:a8:4f:b3:86:42:3e:50:
f9:0c:04:32:d3:c0:f4:54:53:2d:e0:f6:5b:ba:5a:
7f:88:56:74:e8:39:73:f8:4f:75:63:ee:86:4a:1d:
5e:54:09:f4:c9:29:1b:2c:65:26:bf:3d:63:85:84:
bf:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:CC:7F:DC:F5:3C:7B:51:B0:A9:36:16:DC:ED:DE:62:C8:4D:B3:5C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VMx_3PU8e1GwqTYW3O3eYshNs1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.59.0/24
31.56.86.0/24
31.56.107.0/24
31.56.156.0/24
31.57.162.0-31.57.165.255
31.57.180.0/24
31.57.208.0-31.57.214.255
31.57.216.0/24
31.57.227.0/24
31.58.41.0-31.58.42.255
31.58.48.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:e8:24:b6:3e:9c:3e:ab:45:5c:e8:f1:51:97:b6:ed:b1:61:
f0:96:fe:2c:22:bc:8c:a6:59:70:a8:b4:29:9f:57:ff:49:49:
1d:31:a1:82:96:ab:5b:90:89:d6:b2:a0:80:e4:2a:8a:2f:f8:
5c:34:c9:54:50:92:28:bb:e3:d3:29:0e:75:4e:03:60:69:c2:
e8:8f:7c:f1:0e:22:a0:a7:7d:cb:fe:a3:57:d8:52:72:4c:22:
d8:7e:02:d6:95:cb:df:07:c7:45:e4:b6:01:96:bc:f1:5c:c4:
93:b3:6d:0b:1b:8e:63:05:b5:3e:88:28:bf:30:ac:e4:6b:74:
6b:0b:cc:31:3d:2b:ac:56:15:37:65:af:29:55:79:36:b3:66:
e0:1e:e6:2f:e1:1c:51:b9:bb:f3:02:18:f7:a3:98:57:0c:35:
8f:83:9e:63:da:8d:94:46:46:9f:10:02:01:35:28:de:41:18:
49:3b:22:9a:5b:6d:15:af:70:96:d0:f7:a8:97:0b:ab:37:51:
92:ba:5e:e4:20:25:a9:e6:26:5c:2b:f2:8a:64:0f:a1:5c:f8:
4c:b7:5b:ff:37:ec:a9:d2:42:19:71:be:45:09:92:e2:70:5a:
95:0c:3e:ca:40:fb:aa:20:e8:bf:37:50:62:b7:68:8a:f8:69:
5f:c5:9f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:29:38 2025 by rpki-client