Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-1URLgiT_YynYZz3S_4vEoH2nUk.roa
File: 1-1URLgiT_YynYZz3S_4vEoH2nUk.roa (raw, json)
Hash identifier: hQUnLwBbVjLNn63P20vOI4YDvYuV55sRQ/I6JuIIkmY=
Subject key identifier: FB:55:11:2E:08:93:FD:8C:A7:61:9C:F7:4B:FE:2F:12:81:F6:9D:49
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195D834BE3AA94A03E21528F8D80962DE9F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-1URLgiT_YynYZz3S_4vEoH2nUk.roa
Signing time: Thu 27 Mar 2025 15:24:50 +0000
ROA not before: Thu 27 Mar 2025 15:24:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.87.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.103.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.113.0/24 maxlen: 24
31.57.114.0/24 maxlen: 24
31.57.116.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.143.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.168.0/23 maxlen: 23
31.57.176.0/21 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.214.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.76.0/24 maxlen: 24
31.58.77.0/24 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 27 Mar 2025 19:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d8:34:be:3a:a9:4a:03:e2:15:28:f8:d8:09:62:de:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 27 15:24:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb55112e0893fd8ca7619cf74bfe2f1281f69d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7a:41:b0:22:5a:a8:53:4e:79:a8:6d:b0:b9:
81:99:b0:a2:83:fb:7c:0d:76:54:97:48:40:04:16:
03:e6:6c:9e:d1:71:c7:90:a1:fe:c1:1b:b9:ad:d8:
87:d4:cf:88:48:6d:a4:64:82:96:6e:69:24:30:4b:
bb:1e:89:2e:1e:b0:18:04:8c:60:ef:8b:51:08:0c:
9e:5a:8d:a4:bc:c7:cc:ba:97:10:c2:75:dd:eb:46:
a6:39:bc:05:ac:91:98:b3:fe:58:72:1b:72:af:a6:
82:1b:3d:da:9f:7a:84:32:c8:b0:45:0f:28:0d:ef:
e1:86:7c:08:3b:4f:b3:16:29:12:5d:ef:f3:e7:f2:
ab:f0:4d:38:fd:e7:d6:51:90:a6:79:b1:82:a0:19:
cb:45:a8:4f:98:3c:cd:f2:28:02:f5:72:f0:01:bf:
39:20:dd:8d:dc:37:1a:6f:4d:95:6f:ff:49:57:11:
1d:fa:04:ba:4e:a6:1d:dc:c7:fc:00:56:9c:a9:2e:
b9:9a:9f:88:2b:fc:3c:3d:dc:3a:e7:12:08:7a:3b:
df:96:5a:d6:b7:33:67:80:f4:ca:bf:74:f2:3d:14:
30:44:40:c5:10:3b:6e:71:eb:1f:00:e9:04:92:e1:
a4:7a:aa:81:a5:95:ba:66:91:b4:43:a8:42:84:9b:
76:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:55:11:2E:08:93:FD:8C:A7:61:9C:F7:4B:FE:2F:12:81:F6:9D:49
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-1URLgiT_YynYZz3S_4vEoH2nUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.57.0/24
31.56.71.0/24
31.56.87.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.103.0-31.57.111.255
31.57.113.0-31.57.114.255
31.57.116.0/24
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0/21
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.76.0/23
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.224.0/22
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.175.255
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:03:1b:2b:1a:38:80:4b:c8:80:f0:a8:23:fa:1e:cd:be:b4:
f2:09:d5:68:d5:d3:cc:42:eb:fa:54:1b:4c:68:5b:07:56:8e:
75:22:00:ee:6f:1b:9b:9b:a1:16:5c:fc:76:01:69:0e:e2:86:
1d:f2:c5:bc:ba:33:77:fe:02:8e:60:51:fb:a9:22:f3:e0:a8:
b3:8b:cf:71:58:9b:59:65:ac:7e:d5:0f:71:d8:41:b6:33:45:
fd:19:5a:1b:7e:f3:73:a4:aa:e0:a3:0f:af:50:8a:6d:b6:7c:
6c:c3:5c:8a:30:ea:f9:4d:f4:5b:33:a0:78:84:0b:03:a2:61:
bf:75:28:82:bc:5e:ac:5a:98:22:54:84:77:4c:6b:c2:93:28:
7e:93:d7:b4:83:1d:38:b3:85:c1:08:f8:fb:79:92:bf:0d:13:
31:78:58:c0:f3:34:ef:d1:1c:45:70:dd:79:e7:88:a4:fb:86:
1d:9e:77:6b:57:d4:bc:01:05:6b:cc:b1:d2:ce:1d:4f:0b:5d:
5b:a6:a7:be:5b:ec:b6:77:37:f0:b2:a7:d3:7e:61:77:f2:fb:
bc:fd:d8:7e:7c:16:fb:12:24:37:0a:3f:9a:e6:64:ab:b2:28:
56:f7:52:b0:17:00:75:b6:86:30:e6:b6:1d:74:79:0f:de:a2:
36:6b:1a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:50:48 2025 by rpki-client