Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3xW4X9n8AbN0XAU3hCKPhprUJVI.roa
File: 3xW4X9n8AbN0XAU3hCKPhprUJVI.roa (raw, json)
Hash identifier: nr3GeFbVduCj5W7G6A2C10x+l0Rxa07OdYxV9an+OtA=
Subject key identifier: DF:15:B8:5F:D9:FC:01:B3:74:5C:05:37:84:22:8F:86:9A:D4:25:52
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196C80B10CE9BAA426D6605644CE14EE08D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3xW4X9n8AbN0XAU3hCKPhprUJVI.roa
Signing time: Tue 13 May 2025 05:08:10 +0000
ROA not before: Tue 13 May 2025 05:08:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 31.56.23.0/24 maxlen: 24
31.56.42.0/23 maxlen: 23
31.56.180.0/23 maxlen: 23
31.56.190.0/23 maxlen: 23
31.56.220.0/23 maxlen: 23
31.56.224.0/23 maxlen: 23
31.56.230.0/23 maxlen: 23
31.56.236.0/23 maxlen: 23
31.57.120.0/23 maxlen: 23
31.57.126.0/23 maxlen: 23
31.57.238.0/24 maxlen: 24
31.58.87.0/24 maxlen: 24
31.58.220.0/23 maxlen: 23
31.59.138.0/23 maxlen: 23
31.59.168.0/23 maxlen: 23
31.59.173.0/24 maxlen: 24
31.59.174.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 15 May 2025 07:39:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:0b:10:ce:9b:aa:42:6d:66:05:64:4c:e1:4e:e0:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 13 05:08:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df15b85fd9fc01b3745c053784228f869ad42552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:77:69:d4:19:22:3e:fc:e0:b4:ba:2a:f9:3d:
16:60:cb:bf:d5:79:96:06:46:00:6a:a3:4b:f8:77:
d8:8f:68:50:0f:c0:d5:99:1c:44:0f:5d:fe:9c:13:
43:44:83:f4:df:d2:12:a9:28:6c:14:4d:57:4c:de:
b6:a1:28:ae:fd:08:b8:80:6a:08:c4:41:55:07:40:
4f:fd:28:86:f9:81:dd:76:6d:17:1d:7d:88:ab:6f:
ab:67:23:ce:33:f5:6c:47:93:d1:80:cb:f4:e7:b7:
bc:52:17:c9:31:6c:83:e8:16:ef:da:84:55:cc:af:
67:1e:66:2a:2f:4d:01:ad:85:cf:9f:45:96:14:4a:
a6:50:34:d3:5a:a5:70:22:8f:37:09:6e:8c:e5:49:
45:66:32:de:f5:e4:f1:50:7f:df:cf:38:b6:bf:7a:
2f:16:d8:4a:44:4e:38:b0:99:3c:5e:68:58:0f:6f:
84:91:e1:b7:39:60:ca:f1:e2:27:71:60:b5:13:07:
7f:5c:a2:4d:78:40:bd:cc:f5:0a:03:3c:0e:9b:bd:
9a:ec:18:44:01:26:54:0d:5f:48:86:c6:05:dd:bd:
ae:62:b5:5c:9a:6f:0a:d2:d8:0d:92:0d:d3:52:8f:
31:de:bc:ed:7a:c6:e8:cf:3b:ff:e6:74:8f:cd:60:
b6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:15:B8:5F:D9:FC:01:B3:74:5C:05:37:84:22:8F:86:9A:D4:25:52
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3xW4X9n8AbN0XAU3hCKPhprUJVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.23.0/24
31.56.42.0/23
31.56.180.0/23
31.56.190.0/23
31.56.220.0/23
31.56.224.0/23
31.56.230.0/23
31.56.236.0/23
31.57.120.0/23
31.57.126.0/23
31.57.238.0/24
31.58.87.0/24
31.58.220.0/23
31.59.138.0/23
31.59.168.0/23
31.59.173.0-31.59.175.255
Signature Algorithm: sha256WithRSAEncryption
93:47:cc:75:da:66:c8:b7:8e:1e:1d:49:1b:b5:6f:5f:ce:93:
d5:24:91:73:5e:44:b5:b3:8c:53:85:5a:81:5c:12:89:f2:86:
5d:7b:51:8a:5d:69:7b:d8:fa:ce:51:50:69:71:a7:cc:45:51:
73:05:4b:b9:b6:6b:7b:4d:32:5e:a1:6d:6b:fa:19:42:50:d5:
42:f9:08:08:01:67:c0:75:bf:a3:f2:65:54:5a:8b:52:41:74:
a6:06:94:0c:55:12:ec:3b:73:6a:61:9e:55:1b:e2:8c:7f:49:
8d:83:6d:47:1b:cf:c4:94:4c:69:3b:20:da:0a:60:a5:f5:17:
13:8e:bd:03:ba:e7:94:b4:9a:db:32:45:8e:37:5f:f8:49:b7:
4c:b2:37:91:5c:12:60:6c:df:c7:79:5f:29:93:4f:9d:44:44:
e1:dc:ee:e7:98:ef:90:fb:05:33:00:da:36:85:e0:9c:fe:ad:
9a:3d:b9:e5:ff:b9:48:df:39:32:ee:be:ae:5a:cb:82:9e:a1:
a0:58:f3:fb:78:55:fc:ed:fb:fb:ed:01:b4:d1:dc:53:c5:01:
89:c5:af:d5:c0:4b:51:f0:f3:98:54:95:a2:aa:bc:e8:93:4b:
8b:a7:8c:7a:7f:10:0b:40:1a:73:5e:ad:d7:36:41:b4:0c:fa:
64:aa:6c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 04:17:13 2025 by rpki-client