Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/oJ7oLsiOGcjfjdeif2PY9KlViFg.roa
File: oJ7oLsiOGcjfjdeif2PY9KlViFg.roa (raw, json)
Hash identifier: wpVBQqr1Ejm0q08F5vfTNTtI89GmeilP+8zoNqC/uNQ=
Subject key identifier: A0:9E:E8:2E:C8:8E:19:C8:DF:8D:D7:A2:7F:63:D8:F4:A9:55:88:58
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196905C4ED7C42BB8F2C26094E1D379DA69
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/oJ7oLsiOGcjfjdeif2PY9KlViFg.roa
Signing time: Fri 02 May 2025 09:38:10 +0000
ROA not before: Fri 02 May 2025 09:38:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 31.56.154.0/24 maxlen: 24
31.56.158.0/24 maxlen: 24
31.56.159.0/24 maxlen: 24
31.56.168.0/24 maxlen: 24
31.56.169.0/24 maxlen: 24
31.56.170.0/24 maxlen: 24
31.56.171.0/24 maxlen: 24
31.56.174.0/24 maxlen: 24
31.56.175.0/24 maxlen: 24
31.57.24.0/22 maxlen: 24
31.57.28.0/22 maxlen: 24
31.57.48.0/22 maxlen: 24
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.105.0/24 maxlen: 24
31.57.109.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.212.0/22 maxlen: 24
217.60.0.0/21 maxlen: 24
217.60.0.0/24 maxlen: 24
217.60.1.0/24 maxlen: 24
217.60.2.0/24 maxlen: 24
217.60.4.0/24 maxlen: 24
217.60.5.0/24 maxlen: 24
217.60.6.0/24 maxlen: 24
217.60.8.0/21 maxlen: 24
217.60.8.0/24 maxlen: 24
217.60.10.0/24 maxlen: 24
217.60.11.0/24 maxlen: 24
217.60.12.0/24 maxlen: 24
217.60.13.0/24 maxlen: 24
217.60.14.0/24 maxlen: 24
217.60.24.0/22 maxlen: 24
217.60.32.0/21 maxlen: 24
217.60.44.0/22 maxlen: 24
217.60.56.0/21 maxlen: 24
217.60.56.0/24 maxlen: 24
217.60.57.0/24 maxlen: 24
217.60.58.0/24 maxlen: 24
217.60.59.0/24 maxlen: 24
217.60.60.0/24 maxlen: 24
217.60.61.0/24 maxlen: 24
217.60.62.0/24 maxlen: 24
217.60.63.0/24 maxlen: 24
217.60.188.0/22 maxlen: 24
217.60.192.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 May 2025 09:39:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:5c:4e:d7:c4:2b:b8:f2:c2:60:94:e1:d3:79:da:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 2 09:38:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a09ee82ec88e19c8df8dd7a27f63d8f4a9558858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c7:13:8b:55:8f:98:62:63:53:ab:a9:98:38:
26:8c:ac:9c:e5:bb:41:7c:46:64:7b:42:0f:58:8b:
a9:32:83:ed:08:0b:06:b4:1e:50:6b:e7:d6:5c:c3:
02:2a:52:f8:8e:ff:fc:96:46:21:27:30:57:4f:42:
bc:69:b7:f7:da:a3:e8:78:e9:de:b4:62:8d:a0:92:
cf:fa:e7:a4:0d:29:1c:8d:e6:13:95:42:f1:be:21:
a4:e6:07:0f:7f:47:53:79:de:f9:90:9e:bb:1f:07:
31:66:d4:2f:b5:21:a0:dd:12:97:92:cc:48:fa:3e:
e0:55:99:eb:4e:2f:87:c2:17:bd:e1:cd:2e:5f:f3:
af:5a:36:c0:9e:d2:8f:64:fa:66:1e:04:e6:9f:b9:
5c:84:32:4c:f8:1e:c9:29:64:f7:e0:54:52:87:9f:
cc:98:f9:82:7e:c4:ea:27:ac:ac:55:8a:63:27:29:
34:e9:a4:71:9d:00:e1:69:aa:d5:15:ea:73:b9:28:
3c:40:f4:1f:7b:eb:5d:0c:1f:af:2f:09:e4:d6:1f:
2a:a3:3f:f4:f9:48:28:47:49:5c:51:fb:49:9a:1f:
6c:82:aa:8a:35:07:65:a0:46:ed:cd:48:87:5b:b9:
34:02:ed:64:9e:ef:66:fd:91:fc:89:f8:4b:2a:dc:
6c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:9E:E8:2E:C8:8E:19:C8:DF:8D:D7:A2:7F:63:D8:F4:A9:55:88:58
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/oJ7oLsiOGcjfjdeif2PY9KlViFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.154.0/24
31.56.158.0/23
31.56.168.0/22
31.56.174.0/23
31.57.24.0/21
31.57.48.0/20
31.57.105.0/24
31.57.109.0/24
31.58.34.0/23
31.58.212.0/22
217.60.0.0/20
217.60.24.0/22
217.60.32.0/21
217.60.44.0/22
217.60.56.0/21
217.60.188.0-217.60.195.255
Signature Algorithm: sha256WithRSAEncryption
7e:b7:6d:8e:ab:4d:7b:18:1c:e2:9c:e9:43:53:c3:05:1a:ee:
df:37:66:19:f7:1e:db:b7:3d:c8:80:4b:05:75:59:29:85:90:
f1:0c:fc:d0:b5:b6:a1:9b:5e:5e:9e:28:91:67:50:44:2a:2a:
90:a4:11:4d:04:d7:77:85:15:88:34:23:1c:11:94:53:cd:83:
a3:72:e8:f7:cb:ed:aa:a8:22:45:4c:dd:5f:b4:0b:9d:6c:5b:
16:c0:7e:e1:b8:d7:e1:2b:4d:87:c0:67:35:20:34:19:4c:fa:
1f:cf:e0:e1:c0:ce:e3:4b:a7:e0:b0:6e:5f:3b:92:bd:d0:6b:
c7:2c:6a:60:38:d1:6e:6e:b9:44:53:97:6d:d9:4e:ee:ad:bd:
b3:af:ad:7c:71:04:86:09:9a:7c:ce:49:df:17:83:61:f6:18:
2d:a4:f1:c8:b9:f2:92:29:f7:5b:bb:e8:48:c5:c4:0d:60:57:
73:aa:cb:b4:3f:1c:e4:ae:c5:aa:12:56:92:ff:be:67:72:fd:
b9:94:a8:e8:ba:19:70:eb:e0:3a:ef:4c:90:e0:f5:dc:c2:99:
70:2c:e0:be:ad:2c:b1:90:20:81:46:82:77:be:f1:92:0b:14:
4c:6e:93:ab:af:fa:e0:d3:03:1e:f0:07:d3:d9:e0:a4:65:14:
86:3a:6f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:44:13 2025 by rpki-client