Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9dxUVO5k5sVrqknVS7uq-gBozWU.roa
File: 9dxUVO5k5sVrqknVS7uq-gBozWU.roa (raw, json)
Hash identifier: 2bHHOzeKxZxMoFolpV4g3sdzqDtuHtex9Q5Zn9T1MoE=
Subject key identifier: F5:DC:54:54:EE:64:E6:C5:6B:AA:49:D5:4B:BB:AA:FA:00:68:CD:65
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193E0852B72825342324E4E768CEA983F9F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9dxUVO5k5sVrqknVS7uq-gBozWU.roa
Signing time: Thu 19 Dec 2024 20:04:04 +0000
ROA not before: Thu 19 Dec 2024 20:04:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.74.0/24 maxlen: 24
31.56.75.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.156.0/24 maxlen: 24
31.57.65.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.145.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.178.0/24 maxlen: 24
31.57.179.0/24 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.182.0/24 maxlen: 24
31.57.183.0/24 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.204.0/24 maxlen: 24
31.57.207.0/24 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.232.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.131.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.167.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.130.0/24 maxlen: 24
31.59.184.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Dec 2024 07:41:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e0:85:2b:72:82:53:42:32:4e:4e:76:8c:ea:98:3f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 19 20:04:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5dc5454ee64e6c56baa49d54bbbaafa0068cd65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:81:47:59:26:81:0d:34:2f:e0:68:97:e6:9a:
ac:31:e4:bf:d8:23:3f:cd:78:a2:f8:6d:e1:14:55:
f6:07:9e:23:7b:a3:54:48:2d:fc:a6:1c:80:5d:3f:
4b:c1:13:3f:70:6b:f2:e1:f1:75:63:2c:6f:6e:77:
bf:89:8b:5e:ae:b0:f0:99:fd:39:7d:a2:a6:79:9d:
65:87:f5:a0:95:7c:84:3a:a6:8c:94:52:b5:d3:35:
e2:66:5f:1c:d8:09:1f:75:26:96:dc:3f:1d:07:e9:
d6:6e:01:eb:54:ef:5b:db:46:78:55:d5:0a:43:41:
fe:13:a9:86:df:fa:ba:cc:2f:7b:d6:3c:4b:3c:1b:
99:15:d6:98:91:65:20:23:38:49:2b:3f:7e:18:02:
a6:3d:83:d6:9f:b3:2a:7e:62:79:ba:bf:d0:55:66:
89:f9:97:6e:05:1c:52:5a:27:0f:fc:eb:89:51:93:
86:a4:db:3d:c7:30:d9:92:d1:25:0a:4a:ab:e7:58:
e3:bf:c7:38:59:1b:13:b4:67:b1:62:1a:83:79:f6:
05:a1:2c:ae:16:0b:a7:68:9a:78:7f:1a:34:8c:54:
9c:e1:75:22:e3:2b:53:6c:4f:c7:14:89:f3:c1:a8:
80:08:32:54:21:62:d7:4c:d0:34:3c:fe:39:a7:0c:
e2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:DC:54:54:EE:64:E6:C5:6B:AA:49:D5:4B:BB:AA:FA:00:68:CD:65
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9dxUVO5k5sVrqknVS7uq-gBozWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.71.0/24
31.56.74.0/23
31.56.89.0/24
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.156.0/24
31.57.65.0/24
31.57.132.0/23
31.57.145.0-31.57.147.255
31.57.176.0/21
31.57.188.0/24
31.57.192.0/22
31.57.200.0/23
31.57.204.0/24
31.57.207.0-31.57.223.255
31.57.232.0/22
31.58.34.0/23
31.58.131.0/24
31.58.152.0/22
31.58.167.0/24
31.59.96.0/22
31.59.112.0/22
31.59.130.0/24
31.59.184.0/22
Signature Algorithm: sha256WithRSAEncryption
74:04:7f:a9:de:c7:e6:91:77:05:58:4b:a7:eb:0d:bc:13:0a:
13:6a:3d:7d:ae:68:71:f4:38:56:5d:02:17:d2:10:df:cf:d9:
5b:fc:ca:35:b8:bb:b4:d8:c1:dc:9c:f0:30:fc:04:25:ec:e7:
99:c4:0b:28:96:d4:c1:37:e3:8b:99:16:2f:00:a5:a8:14:e9:
b6:93:ec:4b:27:aa:14:7a:8a:ec:b0:f4:8a:38:95:4e:87:8e:
f4:ed:d2:5b:3f:cd:c0:61:f0:72:c1:62:4c:c7:18:55:56:bd:
52:dd:fd:d1:39:e9:ef:fd:81:48:6c:77:da:8b:f0:2f:40:e7:
a5:63:45:c5:72:35:9a:67:28:84:f1:80:e8:37:46:1d:80:a3:
c6:9c:fb:62:92:08:9e:d9:e2:71:d7:a6:c2:94:51:c4:22:09:
d4:42:23:f3:ed:2e:b3:98:e3:06:17:a5:47:1d:b2:9e:25:cf:
bf:24:af:f4:eb:63:01:5f:ad:ea:6d:8e:75:43:ec:7d:91:2b:
ce:f2:3b:e5:5a:4f:fa:27:7c:68:20:a3:56:a6:52:69:12:e2:
79:d7:94:97:f9:bc:db:86:30:8d:9a:05:d0:ec:e7:11:d6:39:
37:83:c4:4b:3a:f1:f1:66:2f:a8:cf:a9:18:44:1c:39:8f:05:
69:5e:13:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:45:40 2025 by rpki-client