Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9P70ikdcPudN88j3LcuyHOS0NE8.roa
File: 9P70ikdcPudN88j3LcuyHOS0NE8.roa (raw, json)
Hash identifier: MTv66CoBk8E2HwlF6cIcnwWwVVK6aP676UYGNcconxE=
Subject key identifier: F4:FE:F4:8A:47:5C:3E:E7:4D:F3:C8:F7:2D:CB:B2:1C:E4:B4:34:4F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194B11982EC8862E66BD71F819C47DA758B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9P70ikdcPudN88j3LcuyHOS0NE8.roa
Signing time: Wed 29 Jan 2025 08:07:06 +0000
ROA not before: Wed 29 Jan 2025 08:07:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.74.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.156.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.139.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.33.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.163.0/24 maxlen: 24
31.58.230.0/23 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.42.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.108.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
31.59.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Jan 2025 15:46:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b1:19:82:ec:88:62:e6:6b:d7:1f:81:9c:47:da:75:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 29 08:07:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4fef48a475c3ee74df3c8f72dcbb21ce4b4344f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ba:bd:76:06:bc:ef:58:b8:64:04:42:84:da:
00:f5:9c:0a:ef:91:f9:ed:91:52:52:22:62:d5:c5:
7d:8b:06:7e:77:43:83:d5:2a:bc:42:a4:09:5c:9b:
8e:55:92:68:30:39:90:f5:c3:1f:e2:a0:c0:10:d0:
2c:91:e7:fb:1d:c9:f8:53:95:30:6b:f7:f0:14:8e:
f4:c1:ff:17:63:62:3c:00:d8:46:25:a5:28:f4:e6:
a1:59:38:1c:a4:31:8c:ad:1e:d6:56:d2:96:6f:ab:
39:90:22:7a:f8:57:ae:6a:a4:41:e8:b1:43:44:ed:
45:ee:06:6e:99:cd:01:b8:9f:41:22:aa:c4:6c:09:
bb:33:e1:52:b3:21:0c:5a:05:1c:de:dd:13:1a:10:
8c:c1:2b:17:56:84:ca:41:da:90:f0:16:d9:41:29:
e6:8f:fe:3b:25:f7:48:87:aa:62:5d:c0:d8:0f:10:
76:8a:85:dd:c8:8b:3f:bc:8f:f8:98:6f:0e:5d:0e:
1c:d1:d8:5c:b8:9f:5f:95:72:27:de:ba:9c:f8:06:
ab:bf:2e:1e:83:96:37:36:b7:74:58:50:24:9d:69:
3e:7a:d6:70:77:78:f6:6d:4f:36:9d:25:69:18:88:
82:22:6a:3e:d8:61:e6:7e:77:bd:ea:12:1f:8e:86:
91:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FE:F4:8A:47:5C:3E:E7:4D:F3:C8:F7:2D:CB:B2:1C:E4:B4:34:4F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9P70ikdcPudN88j3LcuyHOS0NE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.74.0/24
31.56.89.0-31.56.91.255
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.156.0/24
31.56.200.0/22
31.57.104.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.176.0/21
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.33.0-31.58.35.255
31.58.152.0/22
31.58.163.0/24
31.58.230.0/23
31.59.41.0-31.59.42.255
31.59.57.0/24
31.59.96.0/22
31.59.108.0/24
31.59.112.0/22
31.59.184.0/22
31.59.228.0/24
Signature Algorithm: sha256WithRSAEncryption
20:f6:1c:b0:7d:46:fc:81:bf:3f:95:a1:87:da:2e:e7:81:5f:
9c:61:c0:e3:a5:4d:e2:91:3f:f4:9a:e0:59:a3:3a:c7:a1:af:
20:63:8d:65:55:16:71:95:cc:72:ae:28:c1:2d:fd:af:ea:df:
8c:e5:31:d7:9d:7e:1a:da:55:45:b7:23:2d:22:09:3a:98:94:
54:e3:86:89:de:a5:a6:c2:6e:54:14:63:a4:8b:a5:fa:be:f2:
8c:08:b4:bb:47:3e:01:0d:a0:93:7e:96:a9:e0:1f:c7:75:06:
b1:6f:52:39:38:91:ea:2d:c7:0a:73:37:69:c5:0b:1f:d7:1e:
8a:9c:b0:7c:46:a7:05:b9:e7:fb:0a:2c:0b:c5:bb:c0:d3:0a:
6d:98:a2:c7:b9:77:77:15:39:d5:8b:2e:49:98:d7:6a:c2:59:
df:37:fa:be:27:52:34:1f:a7:3c:ac:eb:1a:2a:56:b9:05:0c:
64:82:3f:57:00:85:dd:69:fa:d7:4c:97:e9:8b:ac:2f:d4:ef:
56:d7:f7:b8:73:f0:f4:b1:1c:2f:fd:d0:ab:24:61:0f:c8:70:
51:cc:2b:7b:84:4d:e1:8f:00:ac:7e:a3:0a:40:2e:e2:34:33:
b3:9c:1d:6e:3e:00:ba:71:79:76:ea:bc:fa:e9:37:7a:fa:a7:
99:29:2b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:48:51 2025 by rpki-client