Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/45ubRJ0vOp6ZY_3lphLXQ1hKMwA.roa
File: 45ubRJ0vOp6ZY_3lphLXQ1hKMwA.roa (raw, json)
Hash identifier: jdhH/akF0e5x/dAnEKYeoHbzc281xcHhaCOSR45qSHE=
Subject key identifier: E3:9B:9B:44:9D:2F:3A:9E:99:63:FD:E5:A6:12:D7:43:58:4A:33:00
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196F26E8F8B7B18E930B70812FF06E7D24F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/45ubRJ0vOp6ZY_3lphLXQ1hKMwA.roa
Signing time: Wed 21 May 2025 10:40:54 +0000
ROA not before: Wed 21 May 2025 10:40:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.23.0/24 maxlen: 24
31.56.47.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.57.12.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.92.0/22 maxlen: 22
31.57.98.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.56.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.86.0/24 maxlen: 24
31.58.144.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 23 May 2025 05:58:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f2:6e:8f:8b:7b:18:e9:30:b7:08:12:ff:06:e7:d2:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 21 10:40:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e39b9b449d2f3a9e9963fde5a612d743584a3300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fa:b6:45:e5:ab:7d:fe:25:5e:37:01:6b:7f:
23:af:84:35:02:84:3a:63:a6:f8:d8:01:55:ec:a5:
a4:ab:23:71:f9:57:4a:64:d4:47:42:a6:47:4f:01:
36:ab:7a:7c:3b:1c:2a:0b:36:df:8e:a5:d8:49:2f:
a0:31:da:90:3d:e6:ac:fc:55:3e:c6:f7:2d:bb:64:
e7:20:b0:1c:47:70:79:67:d3:1c:1a:75:26:57:9d:
a8:c2:d4:d9:34:1a:c3:70:76:1e:12:b2:5e:de:8b:
53:f9:21:0f:15:1c:d4:b4:f2:52:34:29:c5:84:3d:
ae:06:4c:51:fe:46:d5:69:2c:61:16:23:cf:df:e9:
d3:7a:bb:99:1c:0c:f3:0a:11:30:53:ee:f9:c7:ff:
41:4e:39:4b:ef:f5:0a:14:0f:60:9c:b5:42:1c:2f:
16:5d:9c:06:fa:78:eb:9e:49:b2:30:bf:f9:48:2d:
2c:fc:52:ff:4f:7b:e9:58:8a:8d:42:3c:bf:80:71:
76:51:e3:2a:32:96:86:e1:86:ca:8d:af:a3:c8:78:
97:b0:72:a4:d4:c0:a6:7b:81:b6:95:af:70:49:9b:
30:24:ea:63:c4:29:5a:5e:e7:d2:e6:8b:c8:92:9e:
b2:af:67:6d:6e:31:d4:c9:4e:48:84:26:6a:25:db:
23:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:9B:9B:44:9D:2F:3A:9E:99:63:FD:E5:A6:12:D7:43:58:4A:33:00
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/45ubRJ0vOp6ZY_3lphLXQ1hKMwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.23.0/24
31.56.47.0/24
31.56.57.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0/22
31.56.200.0/22
31.56.208.0/21
31.56.228.0/22
31.56.236.0/22
31.57.12.0/23
31.57.36.0/22
31.57.92.0/22
31.57.98.0/24
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.56.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.144.0/24
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:e8:a0:ab:1b:45:73:e0:29:f5:8f:d8:e6:af:59:93:67:5c:
4b:32:02:9a:a5:bc:81:09:b7:cd:f5:c1:4c:30:cc:71:a8:db:
82:fa:73:6a:95:df:3d:dc:55:f4:36:32:64:a8:a2:7e:57:68:
11:c3:95:07:92:9a:27:9f:9a:4e:77:0b:9d:2d:e9:c9:25:89:
fd:1e:13:7d:14:bb:29:d1:a7:79:f1:dc:c9:0b:2f:0d:fd:38:
f2:3f:f9:40:e8:89:1f:dd:d5:2b:0c:84:d5:4b:a4:29:f6:28:
f9:f1:24:11:31:c0:19:6b:c3:27:9a:7f:5d:ac:b6:71:3d:54:
08:30:e4:93:81:d9:01:38:34:2b:03:e0:98:de:ee:20:f6:a3:
ef:b9:55:1f:a9:ea:42:f1:eb:b6:9f:1e:e1:e4:f4:2a:02:aa:
5c:79:7d:18:c0:9b:c1:f8:97:d8:a3:10:bd:e4:b1:ba:a5:10:
80:45:fa:e2:9f:d1:92:ad:ba:d4:fa:dd:42:80:d5:07:dc:75:
ff:21:e3:51:96:e4:f9:69:53:7c:1a:71:52:1c:39:9c:88:35:
ee:aa:fa:7c:fc:72:26:6c:c7:c3:cf:06:78:1d:40:27:45:64:
ed:af:18:35:03:89:3b:cf:21:00:65:b3:4b:04:c7:96:6f:84:
99:e7:60:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 04:17:10 2025 by rpki-client