Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/aSx-CEtEJK9-5Pf7bV-MIKX7sW8.roa
File: aSx-CEtEJK9-5Pf7bV-MIKX7sW8.roa (raw, json)
Hash identifier: SzqifS+qUsH2FZf7UaukTHsG539tvdsJIudmAFQlwPo=
Subject key identifier: 69:2C:7E:08:4B:44:24:AF:7E:E4:F7:FB:6D:5F:8C:20:A5:FB:B1:6F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019398BCCD6FAB1AF9132C5E5DC2AFE1BF88
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/aSx-CEtEJK9-5Pf7bV-MIKX7sW8.roa
Signing time: Thu 05 Dec 2024 21:32:10 +0000
ROA not before: Thu 05 Dec 2024 21:32:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 31.56.112.0/21 maxlen: 24
31.57.11.0/24 maxlen: 24
31.57.131.0/24 maxlen: 24
31.57.150.0/24 maxlen: 24
31.57.176.0/24 maxlen: 24
31.57.178.0/24 maxlen: 24
31.57.179.0/24 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.182.0/24 maxlen: 24
31.57.183.0/24 maxlen: 24
31.57.194.0/24 maxlen: 24
31.57.224.0/22 maxlen: 23
31.57.252.0/22 maxlen: 23
31.58.59.0/24 maxlen: 24
31.58.142.0/24 maxlen: 24
31.58.146.0/24 maxlen: 24
31.58.167.0/24 maxlen: 24
31.58.176.0/22 maxlen: 22
31.58.200.0/22 maxlen: 22
31.58.216.0/22 maxlen: 22
31.58.240.0/22 maxlen: 22
31.58.252.0/22 maxlen: 22
31.59.41.0/24 maxlen: 24
31.59.56.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.58.0/24 maxlen: 24
31.59.64.0/22 maxlen: 22
31.59.80.0/22 maxlen: 22
31.59.124.0/22 maxlen: 22
31.59.176.0/22 maxlen: 22
31.59.180.0/22 maxlen: 22
31.59.188.0/22 maxlen: 22
31.59.192.0/22 maxlen: 22
31.59.216.0/22 maxlen: 24
31.59.228.0/24 maxlen: 24
31.59.229.0/24 maxlen: 24
31.59.231.0/24 maxlen: 24
31.59.244.0/24 maxlen: 24
31.59.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Dec 2024 21:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:98:bc:cd:6f:ab:1a:f9:13:2c:5e:5d:c2:af:e1:bf:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 5 21:32:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=692c7e084b4424af7ee4f7fb6d5f8c20a5fbb16f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cd:0b:63:33:0c:ed:f0:32:f0:b0:e4:d5:c0:
2e:3c:ea:8b:29:f9:37:12:03:67:b9:6d:d9:11:fd:
22:e8:2f:76:45:79:59:c5:a5:dd:06:32:9d:f4:cf:
94:29:7a:09:06:d5:7c:42:3a:da:3f:f7:d3:d4:e8:
f5:d6:50:f8:8a:1a:2c:c8:63:90:8f:6c:34:04:75:
c4:ca:ee:4d:a2:6a:4d:b3:fd:f4:6b:69:88:5e:8d:
bc:68:5e:59:9a:70:27:4d:a2:8c:36:00:77:9d:f5:
07:8a:25:84:52:2a:c2:4a:82:8f:34:e3:79:74:5b:
a5:f2:6e:93:ef:65:f0:78:61:1d:93:20:82:1e:64:
c2:39:df:2d:f3:30:f2:07:90:8f:49:c7:4c:82:2e:
62:ee:32:a6:8a:82:55:d9:88:1a:ac:50:80:ee:51:
ec:2e:cd:91:eb:b5:0e:8f:c1:78:74:97:cc:f8:e1:
41:8b:c7:7f:eb:70:e1:91:88:75:5f:42:28:15:db:
60:ab:39:fa:3b:a3:44:f0:57:5c:31:30:13:97:fb:
5c:41:26:cc:97:86:7a:fb:9b:c3:27:32:cd:23:ff:
71:a6:cb:bd:27:2f:5e:27:25:4e:78:98:24:53:33:
64:fe:db:81:c8:78:a6:7b:d5:1b:7b:2f:d4:8e:57:
43:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:2C:7E:08:4B:44:24:AF:7E:E4:F7:FB:6D:5F:8C:20:A5:FB:B1:6F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/aSx-CEtEJK9-5Pf7bV-MIKX7sW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.112.0/21
31.57.11.0/24
31.57.131.0/24
31.57.150.0/24
31.57.176.0/24
31.57.178.0/23
31.57.181.0-31.57.183.255
31.57.194.0/24
31.57.224.0/22
31.57.252.0/22
31.58.59.0/24
31.58.142.0/24
31.58.146.0/24
31.58.167.0/24
31.58.176.0/22
31.58.200.0/22
31.58.216.0/22
31.58.240.0/22
31.58.252.0/22
31.59.41.0/24
31.59.56.0-31.59.58.255
31.59.64.0/22
31.59.80.0/22
31.59.124.0/22
31.59.176.0/21
31.59.188.0-31.59.195.255
31.59.216.0/22
31.59.228.0/23
31.59.231.0/24
31.59.244.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:ea:f0:f3:1f:55:39:4e:07:4f:16:d7:a0:ce:c3:0d:0e:24:
27:52:48:a2:d5:58:26:3d:b1:28:8e:73:68:61:6d:a1:af:23:
7a:b4:54:db:02:04:e4:f9:d5:86:55:1b:24:97:17:09:6d:03:
70:61:7e:c0:7f:9b:3c:45:74:a5:62:1d:7a:f9:0e:4c:f9:43:
8d:a1:49:33:f2:ea:5f:3a:19:68:2d:3a:6b:99:39:32:6f:f9:
38:17:2b:81:4b:08:6d:a6:98:1b:07:c6:fe:e5:7e:0b:b4:71:
d7:9d:46:71:ab:47:ac:2e:9a:3e:38:6f:8a:4d:95:b7:7a:00:
e9:f0:a2:29:99:34:96:47:d3:9d:a5:55:1b:a4:1a:cc:6f:15:
b6:7f:05:8c:29:55:11:2c:42:86:4b:a1:d5:c7:74:de:0b:6f:
d3:a1:08:d1:99:7f:6f:6a:01:f2:38:31:b4:1f:bb:be:f7:e2:
c3:9c:4c:46:a2:8e:9e:44:9f:1f:8e:11:2f:b9:bb:09:23:6f:
c2:7b:a8:37:19:74:5c:aa:15:d6:c4:ab:8a:c3:b8:6c:eb:59:
d1:1e:91:f4:ca:f3:d8:b7:1f:d4:6e:80:05:b3:bc:4b:0c:9f:
df:d0:48:04:c9:f3:29:2d:d6:d5:6c:70:6b:97:e0:a2:f6:e0:
35:bd:5a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:02:37 2025 by rpki-client