Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DUcZzZ3_esTtszRZKHrFK-8c6DI.roa
File: DUcZzZ3_esTtszRZKHrFK-8c6DI.roa (raw, json)
Hash identifier: dHQgoFSY2XR3iBk5nVnPcbrEQ/17el9j+fWOCk/5XM4=
Subject key identifier: 0D:47:19:CD:9D:FF:7A:C4:ED:B3:34:59:28:7A:C5:2B:EF:1C:E8:32
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01940DDAA03CA05CACBED3692409EC577470
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DUcZzZ3_esTtszRZKHrFK-8c6DI.roa
Signing time: Sat 28 Dec 2024 15:20:19 +0000
ROA not before: Sat 28 Dec 2024 15:20:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.16.0/22 maxlen: 22
31.56.22.0/24 maxlen: 24
31.56.24.0/24 maxlen: 24
31.56.26.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.74.0/24 maxlen: 24
31.56.75.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.16.0/22 maxlen: 24
31.57.20.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.146.0/23 maxlen: 24
31.57.147.0/24 maxlen: 24
31.57.151.0/24 maxlen: 24
31.57.152.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.178.0/24 maxlen: 24
31.57.179.0/24 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.182.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.176.0/22 maxlen: 24
31.58.200.0/22 maxlen: 24
31.58.216.0/22 maxlen: 24
31.58.240.0/22 maxlen: 24
31.58.252.0/22 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.42.0/24 maxlen: 24
31.59.43.0/24 maxlen: 24
31.59.56.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.58.0/24 maxlen: 24
31.59.64.0/22 maxlen: 24
31.59.80.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.124.0/22 maxlen: 24
31.59.130.0/24 maxlen: 24
31.59.176.0/22 maxlen: 22
31.59.180.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
31.59.188.0/22 maxlen: 22
31.59.192.0/22 maxlen: 22
31.59.216.0/22 maxlen: 24
31.59.228.0/24 maxlen: 24
31.59.229.0/24 maxlen: 24
31.59.231.0/24 maxlen: 24
31.59.244.0/24 maxlen: 24
31.59.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 29 Dec 2024 05:45:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:0d:da:a0:3c:a0:5c:ac:be:d3:69:24:09:ec:57:74:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 28 15:20:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d4719cd9dff7ac4edb33459287ac52bef1ce832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:99:5b:57:d2:af:f3:f3:e6:2b:b7:72:d5:4e:
97:46:b0:64:76:f7:31:19:5f:b7:9d:13:64:d4:6e:
65:15:9f:ad:d5:d7:b4:35:22:8c:a4:bf:77:bd:b4:
e0:ca:8f:0a:d0:e5:e5:07:a5:72:e2:63:69:44:23:
6f:5e:8e:76:ed:fa:60:53:91:b8:bd:fe:54:26:29:
e2:85:47:a8:dc:05:de:d9:f4:54:d8:ac:4d:59:aa:
96:65:7f:d6:82:7b:34:33:e6:b2:ea:3a:54:68:50:
5e:19:2c:98:68:80:a8:42:1b:66:f1:69:be:b4:0d:
e5:f4:c3:51:43:04:ab:60:9d:d2:ad:49:7d:16:65:
b8:56:e6:10:71:2c:4a:63:f5:2f:a2:38:a8:06:58:
11:a4:4f:48:c2:0d:52:d7:66:4a:40:53:e1:b8:9b:
d0:a9:f6:f5:33:78:cc:75:80:51:df:f1:47:fe:f6:
90:ca:88:7f:40:d1:82:74:a9:0c:2c:3d:9c:b6:c8:
36:3c:aa:ab:04:23:40:7b:ae:2c:8e:39:bc:ec:35:
04:33:2c:36:d9:c9:e0:b8:c4:f7:d9:6c:ef:8d:ee:
c6:a0:56:21:6f:e8:4f:6b:b4:43:ed:11:e3:b7:53:
43:c1:4d:44:c1:b7:31:6c:4b:de:ee:52:d9:6d:ea:
ed:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:47:19:CD:9D:FF:7A:C4:ED:B3:34:59:28:7A:C5:2B:EF:1C:E8:32
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DUcZzZ3_esTtszRZKHrFK-8c6DI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.16.0/22
31.56.22.0/24
31.56.24.0/24
31.56.26.0/24
31.56.42.0/23
31.56.57.0/24
31.56.71.0/24
31.56.74.0/23
31.56.89.0/24
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.16.0/21
31.57.132.0/23
31.57.146.0/23
31.57.151.0-31.57.152.255
31.57.176.0/21
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.34.0/23
31.58.152.0/22
31.58.176.0/22
31.58.200.0/22
31.58.216.0/22
31.58.240.0/22
31.58.252.0/22
31.59.41.0-31.59.43.255
31.59.56.0-31.59.58.255
31.59.64.0/22
31.59.80.0/22
31.59.96.0/22
31.59.112.0/22
31.59.124.0/22
31.59.130.0/24
31.59.176.0-31.59.195.255
31.59.216.0/22
31.59.228.0/23
31.59.231.0/24
31.59.244.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:70:9b:42:d4:37:ae:ba:f8:12:d4:9d:b7:0c:c6:59:92:32:
71:1a:cf:7e:8e:de:53:84:d1:b2:1d:49:0a:29:f8:c7:ba:5b:
0b:e6:d2:58:c0:fa:1a:24:72:f4:26:b9:f1:52:8c:fd:df:17:
55:85:c4:15:e9:8f:18:f5:10:7e:ed:2f:f6:89:48:2a:e5:43:
e5:e1:b2:17:63:7f:ce:31:6e:80:91:9e:ac:ae:1c:5f:d6:ed:
20:a5:ff:85:60:ce:d7:f4:a4:e7:34:15:9f:84:df:67:88:14:
86:c4:29:1e:b0:34:bc:61:22:cc:18:08:5d:e0:86:6d:c6:48:
af:a1:38:55:90:52:20:b8:18:d3:ee:9f:33:86:c3:89:75:5d:
bc:0c:e6:5d:8f:45:26:85:87:f8:01:53:88:f1:1f:27:ae:d8:
4f:86:d4:b2:0a:0b:91:ea:9f:1d:28:ae:14:be:4a:f3:05:52:
eb:bf:9c:81:4b:38:0d:4b:8b:2b:6f:30:e1:b1:84:18:f4:a4:
3e:6d:e9:fd:df:cc:1f:6f:f8:dc:79:5a:92:b4:12:7d:cd:37:
29:8c:8e:46:69:09:53:e7:85:71:03:ff:93:1f:7b:69:38:5e:
34:4b:b8:fd:67:b3:85:1c:d3:7b:f3:0a:d2:f3:00:70:b9:24:
1d:1c:43:a2
-----BEGIN CERTIFICATE-----
MIIGOTCCBSGgAwIBAgISAZQN2qA8oFysvtNpJAnsV3RwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMjI4MTUyMDE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDQ3MTljZDlkZmY3YWM0ZWRiMzM0NTkyODdhYzUyYmVmMWNlODMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05lbV9Kv8/PmK7dy1U6XRrBkdvcx
GV+3nRNk1G5lFZ+t1de0NSKMpL93vbTgyo8K0OXlB6Vy4mNpRCNvXo527fpgU5G4
vf5UJinihUeo3AXe2fRU2KxNWaqWZX/Wgns0M+ay6jpUaFBeGSyYaICoQhtm8Wm+
tA3l9MNRQwSrYJ3SrUl9FmW4VuYQcSxKY/UvojioBlgRpE9Iwg1S12ZKQFPhuJvQ
qfb1M3jMdYBR3/FH/vaQyoh/QNGCdKkMLD2ctsg2PKqrBCNAe64sjjm87DUEMyw2
2cnguMT32Wzvje7GoFYhb+hPa7RD7RHjt1NDwU1EwbcxbEve7lLZbertIQIDAQAB
o4IDRTCCA0EwHQYDVR0OBBYEFA1HGc2d/3rE7bM0WSh6xSvvHOgyMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvRFVjWnpaM19lc1R0c3pSWktIckZLLThjNkRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBWQYIKwYBBQUHAQcBAf8EggFIMIIBRDCCAUAEAgABMIIB
OAMEAR84BAMEAh84EAMEAB84FgMEAB84GAMEAB84GgMEAR84KgMEAB84OQMEAB84
RwMEAR84SgMEAB84WQMEAx84aAMEAR84cjAMAwQBHzh2AwQCHzh4AwQCHzjIAwQD
HzkQAwQBHzmEAwQBHzmSMAwDBAAfOZcDBAAfOZgDBAMfObADBAIfOcADBAEfOcgw
DAMEBB850AMEAh854AMEAh856AMEAh85/AMEAR86IgMEAh86mAMEAh86sAMEAh86
yAMEAh862AMEAh868AMEAh86/DAMAwQAHzspAwQCHzsoMAwDBAMfOzgDBAAfOzoD
BAIfO0ADBAIfO1ADBAIfO2ADBAIfO3ADBAIfO3wDBAAfO4IwDAMEBB87sAMEAh87
wAMEAh872AMEAR875AMEAB875wMEAR879DANBgkqhkiG9w0BAQsFAAOCAQEADXCb
QtQ3rrr4EtSdtwzGWZIycRrPfo7eU4TRsh1JCin4x7pbC+bSWMD6GiRy9Ca58VKM
/d8XVYXEFemPGPUQfu0v9olIKuVD5eGyF2N/zjFugJGerK4cX9btIKX/hWDO1/Sk
5zQVn4TfZ4gUhsQpHrA0vGEizBgIXeCGbcZIr6E4VZBSILgY0+6fM4bDiXVdvAzm
XY9FJoWH+AFTiPEfJ67YT4bUsgoLkeqfHSiuFL5K8wVS67+cgUs4DUuLK28w4bGE
GPSkPm3p/d/MH2/43HlakrQSfc03KYyORmkJU+eFcQP/kx97aTheNEu4/WezhRzT
e/MK0vMAcLkkHRxDog==
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:45:41 2025 by rpki-client