Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4PmIsXUyjcMArCriv5iL1ZSWaqw.roa
File: 4PmIsXUyjcMArCriv5iL1ZSWaqw.roa (raw, json)
Hash identifier: Y+TrrYYS8ql4rDsBsB7cIAxw9xtU+gpD/wGEVnOeoWc=
Subject key identifier: E0:F9:88:B1:75:32:8D:C3:00:AC:2A:E2:BF:98:8B:D5:94:96:6A:AC
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195B2BBD9A99D752D52A1919090D23DBECA
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4PmIsXUyjcMArCriv5iL1ZSWaqw.roa
Signing time: Thu 20 Mar 2025 08:46:50 +0000
ROA not before: Thu 20 Mar 2025 08:46:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.42.0/24 maxlen: 24
31.56.43.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.103.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.113.0/24 maxlen: 24
31.57.114.0/24 maxlen: 24
31.57.116.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.143.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.168.0/23 maxlen: 23
31.57.176.0/21 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.200.0/24 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.212.0/24 maxlen: 24
31.57.213.0/24 maxlen: 24
31.57.214.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.57.254.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.76.0/24 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
31.59.236.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 24 Mar 2025 06:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b2:bb:d9:a9:9d:75:2d:52:a1:91:90:90:d2:3d:be:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 20 08:46:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0f988b175328dc300ac2ae2bf988bd594966aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:98:eb:fb:52:a6:44:c9:b9:d9:bb:e2:a9:96:
09:2b:d7:28:d9:9d:1b:11:fb:a1:1e:7e:1f:4d:db:
90:e5:53:30:bd:63:86:ff:3d:82:28:58:57:30:90:
d0:6d:40:1b:ff:13:3b:fa:8e:39:9d:0a:ac:11:08:
2a:88:f5:ad:e6:95:93:9a:64:91:35:c7:4b:b6:3e:
a7:71:40:47:6e:97:2a:bc:14:11:fd:15:49:6d:66:
69:f4:1c:09:a9:ed:39:80:45:0a:b2:f1:97:b3:3e:
26:a1:d0:62:d7:3d:28:22:3d:e6:01:34:dd:ee:2c:
96:54:3e:d0:12:3a:64:93:04:55:1c:16:b2:8e:cd:
02:ab:8e:dd:45:53:84:ef:8d:0b:13:fe:fc:fb:40:
90:d4:c5:b7:eb:e0:e9:e3:bc:ad:56:a8:9d:ff:64:
2c:0a:2d:fc:c5:bd:2d:9b:c9:96:11:57:5a:68:c0:
42:b2:b6:da:66:5c:72:bc:9b:6b:b9:50:17:cd:e8:
7c:50:40:85:17:21:f5:68:9d:5c:aa:9a:f1:c2:e6:
c2:ba:e9:11:9a:6c:91:c5:f2:c5:19:d7:5d:2a:0f:
cc:c7:b3:bc:8b:e7:2d:a5:4a:35:f5:86:53:c9:37:
38:ea:79:ec:e6:19:a2:5b:71:af:a1:89:30:62:d2:
35:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F9:88:B1:75:32:8D:C3:00:AC:2A:E2:BF:98:8B:D5:94:96:6A:AC
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4PmIsXUyjcMArCriv5iL1ZSWaqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.71.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.103.0-31.57.111.255
31.57.113.0-31.57.114.255
31.57.116.0/24
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0/21
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.76.0/24
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.224.0/22
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.224.0/22
31.59.232.0/21
Signature Algorithm: sha256WithRSAEncryption
17:88:9f:bb:86:d3:d2:75:04:5e:8a:a6:ae:83:b9:6e:d3:ef:
a1:18:db:02:db:2b:f1:64:42:7a:1c:4e:0e:e8:61:e7:fe:f5:
de:84:a4:a0:33:19:ad:25:c8:05:0b:1d:18:22:96:5d:dc:76:
53:3d:a5:9e:48:39:31:d8:b7:a9:66:bd:13:4a:c6:18:ac:39:
cc:b7:41:f3:55:0d:64:aa:f8:d6:2e:4e:72:7f:04:b4:7e:1c:
78:f8:62:1f:d3:bf:52:70:57:ea:8b:c2:c7:74:a1:d6:ac:a8:
50:83:67:76:dc:42:2f:06:f9:77:20:e9:0b:2f:67:a5:52:eb:
6a:99:8f:a2:90:60:2b:e9:7e:c0:4f:1b:54:f6:96:fa:7d:8e:
73:57:b4:6e:f8:ef:0b:f1:3d:c8:f9:09:06:9b:60:7e:86:78:
d1:43:9c:e1:ef:3b:77:59:78:34:bb:c9:e1:b9:c2:21:c4:e2:
93:f7:5a:bd:6e:84:c9:18:34:d6:06:16:5b:88:62:29:53:99:
15:66:d0:d9:79:03:2e:e0:01:77:04:a0:3f:ed:38:d9:92:68:
6f:38:39:d7:91:1a:43:fa:5d:64:f8:d5:02:f1:43:6a:2b:d7:
28:59:9a:34:0e:c3:d6:10:c2:bb:7f:48:6b:45:a5:c3:ad:44:
43:8e:8a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:49:36 2025 by rpki-client