Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rvezlI-5TE9EVln5BGlYmtxrREU.roa
File: rvezlI-5TE9EVln5BGlYmtxrREU.roa (raw, json)
Hash identifier: TVL/yD17SjZTu8UN4NkNcMRLthQUeqHKapci1kPs8uU=
Subject key identifier: AE:F7:B3:94:8F:B9:4C:4F:44:56:59:F9:04:69:58:9A:DC:6B:44:45
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196763E3747EF9006F62A7F9123EAE833AA
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rvezlI-5TE9EVln5BGlYmtxrREU.roa
Signing time: Sun 27 Apr 2025 07:55:10 +0000
ROA not before: Sun 27 Apr 2025 07:55:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 31.56.73.0/24 maxlen: 24
31.56.85.0/24 maxlen: 24
31.57.113.0/24 maxlen: 24
31.57.153.0/24 maxlen: 24
31.57.236.0/24 maxlen: 24
31.58.43.0/24 maxlen: 24
31.58.128.0/24 maxlen: 24
31.58.162.0/24 maxlen: 24
31.58.164.0/24 maxlen: 24
31.58.166.0/24 maxlen: 24
31.59.88.0/24 maxlen: 24
31.59.122.0/24 maxlen: 24
31.59.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Apr 2025 14:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:3e:37:47:ef:90:06:f6:2a:7f:91:23:ea:e8:33:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 27 07:55:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aef7b3948fb94c4f445659f90469589adc6b4445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:72:54:78:c7:4e:7a:5c:af:d4:cc:fd:3a:c0:
d6:ca:9d:42:39:0c:d7:3b:15:41:a1:7b:90:d7:69:
e6:d1:90:54:9a:49:17:e7:6e:cf:1f:69:db:58:7d:
34:4d:78:b6:53:5f:7a:8c:fd:c1:9e:c0:a7:ff:13:
b2:c6:b1:ec:31:6e:9f:8a:d5:b2:36:e3:c7:fd:32:
82:87:ea:d9:fd:5b:27:cd:ee:e2:2f:5c:81:c2:7f:
f2:dc:e8:ac:dd:bb:05:61:99:b3:7f:b5:94:32:ea:
82:3d:b5:2e:aa:63:e5:3c:9a:20:63:f1:2e:dc:c8:
08:ca:39:21:ca:f3:eb:43:b2:d7:fa:80:f7:3b:be:
8d:23:7f:c4:0c:7f:d7:d8:78:75:ce:1a:41:ee:a4:
e7:2d:5f:c8:a4:d9:bb:99:7c:65:06:45:6a:c7:40:
d0:f1:7b:1f:92:1c:bb:01:c2:43:7b:86:a9:6e:78:
b8:5d:26:a2:a5:01:ba:0a:51:f9:ae:d4:e9:5f:60:
aa:17:0c:2e:00:56:86:70:66:7b:8e:b2:3d:cd:43:
4a:60:31:94:af:ec:77:39:29:ce:bb:c1:8e:5f:51:
01:26:06:ad:b1:17:ea:42:f5:a9:3f:19:24:8b:9c:
23:70:1e:44:00:d9:25:1d:1e:e0:70:d9:33:b0:03:
64:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F7:B3:94:8F:B9:4C:4F:44:56:59:F9:04:69:58:9A:DC:6B:44:45
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rvezlI-5TE9EVln5BGlYmtxrREU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.73.0/24
31.56.85.0/24
31.57.113.0/24
31.57.153.0/24
31.57.236.0/24
31.58.43.0/24
31.58.128.0/24
31.58.162.0/24
31.58.164.0/24
31.58.166.0/24
31.59.88.0/24
31.59.122.0/23
Signature Algorithm: sha256WithRSAEncryption
44:b4:94:a8:5f:4b:da:3b:dd:5c:86:aa:fb:0d:4f:b5:30:08:
ae:b4:03:4d:8d:98:7f:8a:63:51:db:59:2b:85:2e:1d:1b:5c:
21:00:cc:8b:fa:65:08:57:c8:31:49:10:9a:22:f9:3f:96:2b:
84:ea:44:6b:26:d0:09:5b:af:86:12:97:8b:39:14:49:28:3b:
98:37:18:00:fa:a6:53:28:3c:d4:1f:a6:0b:ee:12:1f:58:6f:
ae:37:a5:63:57:e0:0e:9c:ed:62:ca:55:a6:ea:71:89:44:a6:
33:06:24:70:62:f8:68:ab:0a:04:bd:6d:12:13:ea:40:0e:2b:
ba:f7:2c:4e:b9:de:cf:2f:7c:b9:ce:37:6b:c8:ea:21:ee:d4:
e5:7e:b6:c5:cf:d2:cb:37:d2:fb:76:d4:51:6e:e1:6e:0f:61:
c3:9b:e5:d8:54:6d:73:fc:13:8f:44:4c:e9:60:c8:fd:68:c1:
24:80:9a:4b:93:6f:70:0f:aa:0e:c4:71:94:34:d9:5c:ed:1a:
74:ec:d2:dd:77:75:0b:fd:82:7d:de:1b:65:79:b0:07:7c:8f:
8c:cd:18:b6:1f:69:0a:b9:25:72:89:15:0b:0b:ad:6f:d0:77:
fa:45:56:61:fa:b8:cb:f7:9a:b9:a5:04:9f:54:95:bc:d5:1b:
93:93:a4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:59:34 2025 by rpki-client