Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/65KlQG2BjRlVp3In5CZkjvvTOoU.roa
File: 65KlQG2BjRlVp3In5CZkjvvTOoU.roa (raw, json)
Hash identifier: i9TJwrBLklvtuOFjJOS1nr3Y20c5omiJdDVBrtbSbvc=
Subject key identifier: EB:92:A5:40:6D:81:8D:19:55:A7:72:27:E4:26:64:8E:FB:D3:3A:85
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01950DBC5C1A078974BE27D19B46B0A4927F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/65KlQG2BjRlVp3In5CZkjvvTOoU.roa
Signing time: Sun 16 Feb 2025 07:50:02 +0000
ROA not before: Sun 16 Feb 2025 07:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.58.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.140.0/24 maxlen: 24
31.57.141.0/24 maxlen: 24
31.57.143.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.244.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.56.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.230.0/24 maxlen: 24
31.59.34.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
31.59.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Feb 2025 07:03:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:0d:bc:5c:1a:07:89:74:be:27:d1:9b:46:b0:a4:92:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 16 07:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb92a5406d818d1955a77227e426648efbd33a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:d6:43:50:ed:78:8e:9d:21:ec:bf:f1:b7:5c:
2a:7d:1e:07:b3:7a:b2:4b:7a:68:49:59:80:4a:ed:
08:0c:5f:fb:2a:04:55:73:e1:de:27:a0:b0:15:95:
ea:4c:ae:3e:0f:d4:e1:3a:46:34:d6:51:0a:4d:39:
ac:14:a8:43:f7:b4:7a:00:bc:63:89:43:0e:23:a3:
5f:39:34:e5:d9:1a:25:8d:ff:73:7b:a7:8b:66:dc:
13:3e:2c:33:df:23:87:cd:b5:c2:81:05:9f:76:25:
a4:cc:9c:5f:a1:f3:d0:80:0e:b4:57:fb:6e:c7:90:
a0:6e:fe:8c:e4:c6:7a:66:79:1d:d6:f6:50:01:72:
fe:e4:43:0c:f1:8b:bd:51:3d:49:7c:0b:07:39:f8:
1d:d5:74:97:b4:17:f8:39:cb:77:85:05:dd:99:3c:
b9:b7:e7:95:a9:f5:c1:a4:08:33:26:59:c7:e5:b5:
74:04:c5:0f:68:d6:2e:5e:38:7a:61:ae:56:a6:e2:
f6:59:57:7b:03:3a:fc:4b:3b:5e:f3:1c:ca:d7:9b:
84:4f:7e:f5:7f:d7:1d:05:96:9f:d3:ad:11:63:44:
72:3d:54:f6:b2:f3:ec:de:b9:3a:c9:20:33:a4:3a:
09:fd:91:66:7f:ae:46:09:fa:b8:d4:96:37:74:92:
93:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:92:A5:40:6D:81:8D:19:55:A7:72:27:E4:26:64:8E:FB:D3:3A:85
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/65KlQG2BjRlVp3In5CZkjvvTOoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0-31.56.58.255
31.56.71.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.104.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.176.0/21
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.244.0/24
31.57.252.0/22
31.58.34.0/23
31.58.50.0/23
31.58.56.0/23
31.58.64.0/23
31.58.152.0/22
31.58.230.0/24
31.59.34.0/24
31.59.96.0/22
31.59.112.0/22
31.59.184.0/22
Signature Algorithm: sha256WithRSAEncryption
05:e1:b4:fd:1b:86:7e:5a:c1:95:51:f0:97:bf:43:7e:1c:ff:
d3:fd:0a:d6:8b:44:2b:56:4e:bf:9b:47:cc:af:6c:e9:08:dc:
c0:73:ae:b0:02:a0:0e:bf:06:cb:c2:9b:92:85:9d:b0:5b:18:
45:dc:f9:d0:d4:d3:1b:69:a7:9c:71:4d:dd:f5:3e:8b:f1:66:
44:53:28:af:87:27:cf:5d:af:77:a1:dc:0f:5c:93:7a:8f:54:
59:c6:e0:78:b3:89:36:ea:eb:ec:7d:99:76:16:41:e2:fb:3d:
2c:3b:d7:e6:78:63:39:cf:d8:7b:84:76:db:93:6e:b5:7e:d6:
09:a0:46:f2:be:07:b2:c8:8f:2c:64:b5:ce:bb:51:85:b5:dd:
b4:69:fb:24:a9:29:9a:66:58:44:bb:22:d7:69:4b:ad:f4:3c:
72:de:d8:eb:cf:de:c7:f6:0c:bd:87:ff:c1:dd:8f:eb:6b:04:
49:99:6a:94:f3:08:f2:31:5f:2f:4b:d3:c4:bc:c8:00:d0:23:
1a:3a:59:ce:95:f6:6a:16:62:3d:27:b9:e9:63:df:17:32:24:
d4:6d:a6:94:2c:0d:e6:4c:54:69:0e:34:60:ec:58:b1:e0:48:
4f:e5:4c:d0:e2:ab:a2:72:1c:32:34:67:41:ae:ca:49:c3:94:
8b:58:d1:cb
-----BEGIN CERTIFICATE-----
MIIFzjCCBLagAwIBAgISAZUNvFwaB4l0vifRm0awpJJ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMjE2MDc1MDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjkyYTU0MDZkODE4ZDE5NTVhNzcyMjdlNDI2NjQ4ZWZiZDMzYTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9NZDUO14jp0h7L/xt1wqfR4Hs3qy
S3poSVmASu0IDF/7KgRVc+HeJ6CwFZXqTK4+D9ThOkY01lEKTTmsFKhD97R6ALxj
iUMOI6NfOTTl2Roljf9ze6eLZtwTPiwz3yOHzbXCgQWfdiWkzJxfofPQgA60V/tu
x5Cgbv6M5MZ6Znkd1vZQAXL+5EMM8Yu9UT1JfAsHOfgd1XSXtBf4Oct3hQXdmTy5
t+eVqfXBpAgzJlnH5bV0BMUPaNYuXjh6Ya5WpuL2WVd7Azr8Szte8xzK15uET371
f9cdBZaf060RY0RyPVT2svPs3rk6ySAzpDoJ/ZFmf65GCfq41JY3dJKTgwIDAQAB
o4IC2jCCAtYwHQYDVR0OBBYEFOuSpUBtgY0ZVadyJ+QmZI770zqFMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvNjVLbFFHMkJqUmxWcDNJbjVDWmtqdnZUT29VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHvBggrBgEFBQcBBwEB/wSB3zCB3DCB2QQCAAEwgdIDBAEf
OAQDBAAfOBgDBAEfOCowDAMEAB84OQMEAB84OgMEAB84RwMEAR84WgMEAx84aAME
AR84cjAMAwQBHzh2AwQCHzh4AwQCHzjIAwQDHzloAwQBHzmEAwQDHzmIAwQBHzmS
AwQDHzmwAwQCHznAAwQBHznIMAwDBAQfOdADBAIfOeADBAIfOegDBAAfOfQDBAIf
OfwDBAEfOiIDBAEfOjIDBAEfOjgDBAEfOkADBAIfOpgDBAAfOuYDBAAfOyIDBAIf
O2ADBAIfO3ADBAIfO7gwDQYJKoZIhvcNAQELBQADggEBAAXhtP0bhn5awZVR8Je/
Q34c/9P9CtaLRCtWTr+bR8yvbOkI3MBzrrACoA6/BsvCm5KFnbBbGEXc+dDU0xtp
p5xxTd31PovxZkRTKK+HJ89dr3eh3A9ck3qPVFnG4HiziTbq6+x9mXYWQeL7PSw7
1+Z4YznP2HuEdtuTbrV+1gmgRvK+B7LIjyxktc67UYW13bRp+ySpKZpmWES7Itdp
S630PHLe2OvP3sf2DL2H/8Hdj+trBEmZapTzCPIxXy9L08S8yADQIxo6Wc6V9moW
Yj0nuelj3xcyJNRtppQsDeZMVGkONGDsWLHgSE/lTNDiq6JyHDI0Z0GuyknDlItY
0cs=
-----END CERTIFICATE-----
Generated at Fri Apr 18 09:59:36 2025 by rpki-client