Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/AxUwedt_WYkUZDLtRSHetl8z9Vs.roa
File: AxUwedt_WYkUZDLtRSHetl8z9Vs.roa (raw, json)
Hash identifier: DxiPjaXm5kpGUCkNZJ1S+um/7euATbDefOz6HzS8emk=
Subject key identifier: 03:15:30:79:DB:7F:59:89:14:64:32:ED:45:21:DE:B6:5F:33:F5:5B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194B7E419B78D95E9F0AE709F1B349A6EC2
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/AxUwedt_WYkUZDLtRSHetl8z9Vs.roa
Signing time: Thu 30 Jan 2025 15:46:06 +0000
ROA not before: Thu 30 Jan 2025 15:46:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.74.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.156.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.33.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.163.0/24 maxlen: 24
31.58.230.0/23 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.42.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.108.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
31.59.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Feb 2025 09:55:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b7:e4:19:b7:8d:95:e9:f0:ae:70:9f:1b:34:9a:6e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 30 15:46:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03153079db7f5989146432ed4521deb65f33f55b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f9:d4:f0:62:2c:ab:6b:44:88:c1:f5:b6:a1:
61:52:d8:f8:7b:eb:b5:76:50:02:81:25:6b:20:25:
bc:ef:69:55:d2:4c:7c:7e:38:93:23:d2:19:9a:d7:
c2:21:38:22:41:78:4c:8d:34:a1:46:81:cc:ac:f6:
75:4a:c7:4d:83:92:23:d9:5a:40:d1:70:5e:77:f4:
24:b7:74:c5:c7:8f:3e:f2:3e:a0:cc:3a:cc:4e:32:
7f:4c:ee:c0:91:11:d8:bc:f5:c6:95:19:f7:58:5e:
54:72:1f:a1:0c:84:7f:cc:a7:ac:7f:b9:58:a3:98:
1a:0a:bc:33:83:4a:07:da:8f:44:6d:a9:c0:f3:f3:
5c:61:82:f0:5a:97:5a:b0:b9:ad:3f:b9:48:1e:29:
19:9d:47:96:c6:2d:b2:f1:5f:23:71:d9:ac:9d:3c:
c7:a0:46:ff:66:bf:bf:20:cf:1f:77:13:13:1a:2c:
2a:2d:b2:8f:b9:22:71:c6:05:65:82:43:dd:49:8a:
73:43:a1:a7:9d:46:1e:f4:a4:a7:52:cb:fd:4d:0c:
c0:40:77:5f:37:01:d1:a5:74:f9:bd:04:85:98:81:
37:7e:a2:47:2c:ec:ec:9d:3f:45:4b:17:fa:2c:4b:
c3:e2:d6:e5:e5:5d:1c:94:99:15:20:54:b1:47:9e:
74:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:15:30:79:DB:7F:59:89:14:64:32:ED:45:21:DE:B6:5F:33:F5:5B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/AxUwedt_WYkUZDLtRSHetl8z9Vs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.74.0/24
31.56.89.0-31.56.91.255
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.156.0/24
31.56.200.0/22
31.57.104.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.176.0/21
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.33.0-31.58.35.255
31.58.152.0/22
31.58.163.0/24
31.58.230.0/23
31.59.41.0-31.59.42.255
31.59.57.0/24
31.59.96.0/22
31.59.108.0/24
31.59.112.0/22
31.59.184.0/22
31.59.228.0/24
Signature Algorithm: sha256WithRSAEncryption
95:9e:aa:07:7c:6c:81:de:28:17:fe:be:23:8e:98:1c:fd:32:
ec:15:62:c2:f3:7b:70:83:47:0b:dd:f7:94:ec:bf:ce:c2:78:
46:9d:44:d2:c1:95:16:16:b9:c5:43:fb:60:96:d0:eb:3f:d6:
31:a8:58:14:98:d3:e1:46:62:66:55:7c:73:70:c8:de:b4:02:
11:73:41:7a:30:73:d2:9e:03:2b:c6:68:d3:ef:44:be:0f:e4:
54:5f:09:b1:36:5f:0f:dc:f8:45:af:6b:68:19:f5:08:bb:04:
51:78:04:ee:b7:17:07:6e:44:33:f9:22:6f:27:e4:4c:fa:ba:
7c:11:92:94:d0:ee:03:fd:0d:9b:a5:40:c6:fd:3e:c2:57:47:
3c:03:4f:42:3b:a0:0e:8d:0b:50:87:6c:74:ee:53:f8:9f:c6:
1b:6f:17:ad:60:7e:60:de:54:a7:be:39:30:bb:e6:3f:34:58:
86:57:3f:af:49:81:83:e0:22:72:99:9b:c5:39:e8:aa:41:17:
7c:e1:95:de:3c:88:a9:a5:4b:60:28:c3:d2:0e:bf:96:74:87:
9e:ba:bc:de:e8:31:b6:0e:0e:88:49:4d:a0:a3:5b:53:de:15:
bf:8f:5d:23:48:b3:8c:d1:f7:03:47:a5:0a:1b:fd:ee:b2:12:
54:39:46:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:45:43 2025 by rpki-client