Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yCjDIoHJiCRtlOApIaydGrjHbaU.roa
File: yCjDIoHJiCRtlOApIaydGrjHbaU.roa (raw, json)
Hash identifier: G6FyCiBgIPm4435v2LftoI9UyWcLxFNYNc2ifLYKHjM=
Subject key identifier: C8:28:C3:22:81:C9:88:24:6D:94:E0:29:21:AC:9D:1A:B8:C7:6D:A5
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01967CB9261ACEA9A018925F32D5FDD4C645
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yCjDIoHJiCRtlOApIaydGrjHbaU.roa
Signing time: Mon 28 Apr 2025 14:07:10 +0000
ROA not before: Mon 28 Apr 2025 14:07:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25369
IP address blocks: 31.56.176.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.184.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.196.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.216.0/22 maxlen: 24
31.56.224.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.58.36.0/22 maxlen: 24
31.58.44.0/22 maxlen: 24
31.58.52.0/22 maxlen: 24
31.58.60.0/22 maxlen: 24
31.59.36.0/22 maxlen: 24
31.59.44.0/22 maxlen: 24
31.59.121.0/24 maxlen: 24
31.59.196.0/22 maxlen: 24
31.59.200.0/22 maxlen: 24
31.59.204.0/22 maxlen: 24
31.59.208.0/22 maxlen: 24
31.59.212.0/22 maxlen: 24
31.59.220.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Apr 2025 15:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:b9:26:1a:ce:a9:a0:18:92:5f:32:d5:fd:d4:c6:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 28 14:07:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c828c32281c988246d94e02921ac9d1ab8c76da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b6:85:24:69:8c:8d:39:c4:cf:9f:fc:47:85:
9d:0b:f7:76:04:ac:35:ab:a3:97:8f:4d:b5:51:51:
d2:4f:4a:5d:c5:3f:bc:6b:78:37:8b:b1:93:b7:c4:
8e:97:44:b3:52:6d:9c:62:ad:ae:7f:90:77:45:a0:
7b:a8:07:b5:ad:12:c5:a1:4e:75:40:41:41:77:21:
48:d7:a6:34:5b:cb:1e:45:6f:fe:d1:cd:1c:1c:00:
7b:a2:4f:04:0d:8e:cc:1d:a5:b3:d8:72:99:51:88:
ea:3d:1a:fb:08:f8:8d:75:48:26:ce:00:a6:78:f0:
60:a9:8a:e4:45:74:06:0f:23:f3:bc:a5:52:6c:5b:
6b:56:2a:da:ed:64:2e:30:d6:b8:a2:40:40:e5:7f:
22:ec:0b:47:bb:8a:c6:01:d0:34:4b:d6:1c:cc:3d:
aa:b2:db:b0:27:9d:69:44:4d:45:ec:06:e1:96:bd:
d2:f2:21:7f:79:e3:72:35:99:28:e5:ef:44:25:bd:
2a:06:63:9a:15:d4:fc:ee:19:75:d1:4c:b8:8b:08:
ae:e5:61:c3:c9:42:99:d0:a3:35:e7:0e:58:4f:80:
5e:13:dd:2c:33:85:9c:3a:65:fb:63:c5:9c:fe:d9:
0d:66:ec:10:ef:e5:a4:d0:62:94:b5:0a:f0:79:28:
33:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:28:C3:22:81:C9:88:24:6D:94:E0:29:21:AC:9D:1A:B8:C7:6D:A5
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yCjDIoHJiCRtlOApIaydGrjHbaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.176.0/20
31.56.196.0/22
31.56.208.0-31.56.219.255
31.56.224.0/21
31.56.236.0/22
31.58.36.0/22
31.58.44.0/22
31.58.52.0/22
31.58.60.0/22
31.59.36.0/22
31.59.44.0/22
31.59.121.0/24
31.59.196.0-31.59.215.255
31.59.220.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:c0:38:ab:a5:89:27:01:12:0e:d1:ed:37:61:4d:d4:86:a2:
6e:03:f1:17:bc:ee:57:88:f7:f9:10:a0:58:6a:8e:35:ed:72:
10:a1:4e:a1:e5:d2:61:cd:97:4c:3c:53:a7:17:f4:6e:b4:84:
55:86:2a:fa:f5:fb:2d:49:28:44:07:b4:95:37:22:56:e7:ed:
37:42:18:d7:8b:1d:ec:5a:7c:48:6f:09:9d:6c:d0:54:3b:3b:
48:06:24:95:51:2f:a4:30:3a:0b:85:02:b5:73:f8:61:4e:66:
18:cd:85:f8:e7:17:ee:99:c1:ed:75:5d:b6:90:83:21:54:1d:
2d:e1:f6:c4:3e:f2:09:d9:82:c5:62:5e:05:48:39:9f:36:19:
b1:74:4c:ae:25:92:00:9d:2c:69:8e:f2:9e:44:57:9b:b1:54:
a5:50:2c:b2:8c:f1:7d:51:d5:6e:e4:c4:27:c8:e8:4c:5f:99:
5e:fc:1b:d1:e4:40:19:52:22:60:66:98:85:a5:85:aa:0f:8c:
03:a2:27:f2:64:19:7b:1c:d4:b0:17:0c:e7:76:07:be:ca:81:
9d:89:68:95:04:98:3a:7e:04:10:aa:75:0e:9d:cd:50:bf:2f:
85:c7:05:ab:62:ac:6a:d8:e1:4e:48:87:c6:76:9b:58:99:2d:
38:32:96:68
-----BEGIN CERTIFICATE-----
MIIFWzCCBEOgAwIBAgISAZZ8uSYazqmgGJJfMtX91MZFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNDI4MTQwNzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODI4YzMyMjgxYzk4ODI0NmQ5NGUwMjkyMWFjOWQxYWI4Yzc2ZGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7aFJGmMjTnEz5/8R4WdC/d2BKw1
q6OXj021UVHST0pdxT+8a3g3i7GTt8SOl0SzUm2cYq2uf5B3RaB7qAe1rRLFoU51
QEFBdyFI16Y0W8seRW/+0c0cHAB7ok8EDY7MHaWz2HKZUYjqPRr7CPiNdUgmzgCm
ePBgqYrkRXQGDyPzvKVSbFtrVira7WQuMNa4okBA5X8i7AtHu4rGAdA0S9YczD2q
stuwJ51pRE1F7Abhlr3S8iF/eeNyNZko5e9EJb0qBmOaFdT87hl10Uy4iwiu5WHD
yUKZ0KM15w5YT4BeE90sM4WcOmX7Y8Wc/tkNZuwQ7+Wk0GKUtQrweSgzbQIDAQAB
o4ICZzCCAmMwHQYDVR0OBBYEFMgowyKByYgkbZTgKSGsnRq4x22lMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEveUNqRElvSEppQ1J0bE9BcElheWRHcmpIYmFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH0GCCsGAQUFBwEHAQH/BG4wbDBqBAIAATBkAwQEHziwAwQC
HzjEMAwDBAQfONADBAIfONgDBAMfOOADBAIfOOwDBAIfOiQDBAIfOiwDBAIfOjQD
BAIfOjwDBAIfOyQDBAIfOywDBAAfO3kwDAMEAh87xAMEAx870AMEAh873DANBgkq
hkiG9w0BAQsFAAOCAQEALcA4q6WJJwESDtHtN2FN1IaibgPxF7zuV4j3+RCgWGqO
Ne1yEKFOoeXSYc2XTDxTpxf0brSEVYYq+vX7LUkoRAe0lTciVuftN0IY14sd7Fp8
SG8JnWzQVDs7SAYklVEvpDA6C4UCtXP4YU5mGM2F+OcX7pnB7XVdtpCDIVQdLeH2
xD7yCdmCxWJeBUg5nzYZsXRMriWSAJ0saY7ynkRXm7FUpVAssozxfVHVbuTEJ8jo
TF+ZXvwb0eRAGVIiYGaYhaWFqg+MA6In8mQZexzUsBcM53YHvsqBnYlolQSYOn4E
EKp1Dp3NUL8vhccFq2KsatjhTkiHxnabWJktODKWaA==
-----END CERTIFICATE-----
Generated at Fri May 9 16:11:22 2025 by rpki-client