Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GDwTzOYOqvlkFMV8hlHJMSDbjoY.roa
File: GDwTzOYOqvlkFMV8hlHJMSDbjoY.roa (raw, json)
Hash identifier: BwcG+jjeb/rnMtF3UzSq61kkDgXRLtG1fbth5I9Rfc8=
Subject key identifier: 18:3C:13:CC:E6:0E:AA:F9:64:14:C5:7C:86:51:C9:31:20:DB:8E:86
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193D527E873451BA22357D77375C193BCE9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GDwTzOYOqvlkFMV8hlHJMSDbjoY.roa
Signing time: Tue 17 Dec 2024 15:06:22 +0000
ROA not before: Tue 17 Dec 2024 15:06:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2914
IP address blocks: 31.56.154.0/24 maxlen: 24
31.56.158.0/24 maxlen: 24
31.56.159.0/24 maxlen: 24
31.56.168.0/24 maxlen: 24
31.56.169.0/24 maxlen: 24
31.56.170.0/24 maxlen: 24
31.56.171.0/24 maxlen: 24
31.56.174.0/24 maxlen: 24
31.56.175.0/24 maxlen: 24
31.57.16.0/22 maxlen: 24
31.57.20.0/22 maxlen: 24
31.57.24.0/22 maxlen: 24
31.57.28.0/22 maxlen: 24
31.57.48.0/22 maxlen: 24
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.92.0/22 maxlen: 24
31.57.96.0/22 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.196.0/22 maxlen: 24
31.58.204.0/22 maxlen: 24
31.58.208.0/24 maxlen: 24
31.58.209.0/24 maxlen: 24
31.58.212.0/22 maxlen: 24
31.58.220.0/22 maxlen: 24
31.58.224.0/22 maxlen: 24
31.59.120.0/22 maxlen: 24
217.60.0.0/18 maxlen: 24
217.60.1.0/24 maxlen: 24
217.60.5.0/24 maxlen: 24
217.60.11.0/24 maxlen: 24
217.60.13.0/24 maxlen: 24
217.60.24.0/24 maxlen: 24
217.60.25.0/24 maxlen: 24
217.60.26.0/24 maxlen: 24
217.60.27.0/24 maxlen: 24
217.60.245.0/24 maxlen: 24
217.60.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Dec 2024 16:39:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d5:27:e8:73:45:1b:a2:23:57:d7:73:75:c1:93:bc:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 17 15:06:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=183c13cce60eaaf96414c57c8651c93120db8e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2a:3f:62:13:4f:db:ad:e1:1c:53:46:30:7b:
dd:c9:30:d9:a7:9f:86:ef:ad:5d:e0:71:43:c8:16:
fc:32:f0:bb:10:67:83:84:84:99:3d:81:8c:fb:a1:
6e:02:f2:80:db:a8:c4:21:86:a4:83:bb:8a:96:5a:
62:1f:cb:63:90:b0:01:2b:fd:0f:04:5d:a2:8b:9e:
01:2a:ae:f0:d9:cf:1a:7c:a1:2f:32:df:4a:01:6c:
24:a2:d2:d1:bd:37:34:d4:12:d2:dd:e3:bb:bd:18:
d7:ce:f7:41:97:a5:d4:40:ec:25:f9:04:22:2b:ac:
a5:91:4c:d4:fb:7f:2a:05:2f:5d:b4:34:99:4e:c9:
c5:1b:f2:3a:91:0d:80:5d:8a:cd:24:9b:9a:ae:75:
e1:a9:53:34:80:e8:f8:3c:97:6d:61:c7:52:99:7d:
d4:ea:52:cc:3d:f5:fb:ea:17:9e:13:49:40:be:e3:
69:6b:67:56:c6:22:a0:8f:b3:8a:96:1c:ab:f1:e4:
b2:14:61:c9:82:c9:0a:cb:f6:b7:d7:c4:d1:bf:84:
63:00:07:1c:36:b4:3d:e9:93:a0:d5:cf:c4:7d:05:
b6:db:b6:d0:b9:08:d6:3d:ad:c1:a9:dd:9e:f3:71:
cb:55:0b:9a:36:4d:5a:a3:45:4f:41:49:d6:35:a4:
4b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3C:13:CC:E6:0E:AA:F9:64:14:C5:7C:86:51:C9:31:20:DB:8E:86
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GDwTzOYOqvlkFMV8hlHJMSDbjoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.154.0/24
31.56.158.0/23
31.56.168.0/22
31.56.174.0/23
31.57.16.0/20
31.57.48.0/20
31.57.92.0-31.57.99.255
31.57.120.0/21
31.58.34.0/23
31.58.196.0/22
31.58.204.0-31.58.209.255
31.58.212.0/22
31.58.220.0-31.58.227.255
31.59.120.0/22
217.60.0.0/18
217.60.245.0/24
217.60.248.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:a9:98:76:3d:dd:67:13:93:c3:b8:6e:c2:4c:77:ea:67:32:
2a:6e:c4:9e:2e:2b:89:9b:ac:25:72:47:7f:a7:fd:a0:c1:e6:
67:69:2d:aa:b6:25:cf:ff:c2:d4:ad:96:f6:2d:19:3e:7b:52:
05:2b:3f:65:7e:8f:d9:4a:99:19:8d:72:ed:6a:44:6f:27:e1:
51:1b:c3:02:f8:ac:9a:93:c3:95:0e:31:65:6e:f2:72:c3:51:
b8:b8:7e:33:83:6d:a0:11:ee:84:ac:ba:3b:01:a9:7c:9a:b8:
9c:e5:13:8c:44:ed:29:e0:9d:07:f2:82:e2:12:ef:bc:1f:ab:
09:93:d1:26:4f:c2:82:86:b4:62:64:17:ff:8d:fa:2e:2d:f1:
55:b1:14:50:b2:3d:8d:63:9d:3a:d7:09:23:fe:c6:85:5c:fa:
45:71:d3:b1:19:33:52:ac:b2:17:29:69:ca:7f:28:0b:af:2b:
c2:db:d0:1e:1f:0e:4f:98:b2:98:5f:ca:77:9f:5c:e5:63:c8:
9c:eb:9e:21:d3:5b:c8:50:c4:13:89:b2:82:7b:21:53:cc:a2:
12:0f:fc:17:6f:54:c6:17:31:06:34:2a:aa:59:5e:59:6a:78:
74:6e:72:80:6d:cc:c5:07:1f:9b:33:51:2f:3e:e1:32:1e:3a:
ed:e7:5b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 24 01:01:29 2024 by rpki-client on console.sobornost.net