Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EzqlwT3e1ltMW3EiaDOJ4omaX2I.roa
File: EzqlwT3e1ltMW3EiaDOJ4omaX2I.roa (raw, json)
Hash identifier: FuAFbXw46uOAC6vcitS7BJYe8bML9d79piiqu+kHhaw=
Subject key identifier: 13:3A:A5:C1:3D:DE:D6:5B:4C:5B:71:22:68:33:89:E2:89:9A:5F:62
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019500E4B2A4AD16959BCE6A253BF055D479
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EzqlwT3e1ltMW3EiaDOJ4omaX2I.roa
Signing time: Thu 13 Feb 2025 19:59:02 +0000
ROA not before: Thu 13 Feb 2025 19:59:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.140.0/24 maxlen: 24
31.57.141.0/24 maxlen: 24
31.57.143.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.244.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.152.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
31.59.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Feb 2025 07:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:00:e4:b2:a4:ad:16:95:9b:ce:6a:25:3b:f0:55:d4:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 13 19:59:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=133aa5c13dded65b4c5b7122683389e2899a5f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:81:5e:98:83:56:e7:73:79:51:6d:da:30:2c:
18:88:d3:d0:cb:ea:90:cd:1a:32:27:0a:74:33:03:
e1:58:dd:c9:e0:7e:a1:9d:ba:0d:35:f7:38:30:4d:
75:3b:ca:53:8a:66:af:4a:d4:73:b9:28:85:bb:d0:
f7:d1:53:7c:92:60:fb:9c:4d:05:02:5f:7b:85:0e:
b1:61:50:91:e5:f8:56:0d:3f:0b:73:8a:bb:65:6c:
fb:1d:45:d8:c1:9b:8c:3d:c7:e5:4b:59:4f:fb:a5:
73:18:be:30:5b:5d:f9:8f:57:99:20:cf:e4:f7:5d:
d0:36:5d:89:7d:85:2a:26:4d:6c:40:29:cf:bf:cf:
12:32:f7:fd:6e:28:64:6f:0e:2f:16:fb:ce:56:f1:
5b:96:c9:31:24:bc:e2:7d:a4:ef:fe:ec:82:75:a5:
63:e4:53:fe:e2:4c:4c:16:27:6c:f5:37:aa:bb:8d:
2e:e4:a0:ab:13:4e:74:df:53:0d:6e:fc:e7:e7:de:
99:41:82:39:a7:7c:34:dc:f2:35:13:73:a3:0a:c0:
5d:62:b1:d0:e4:a0:64:5d:6d:71:17:2a:a7:ee:b2:
6b:36:91:6e:d2:32:1a:dc:1d:f5:d9:75:fc:6e:a2:
2c:1e:94:ed:61:36:b1:fc:28:fc:a2:b6:cb:ea:cb:
75:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3A:A5:C1:3D:DE:D6:5B:4C:5B:71:22:68:33:89:E2:89:9A:5F:62
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EzqlwT3e1ltMW3EiaDOJ4omaX2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.71.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.104.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.176.0/21
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.244.0/24
31.57.252.0/22
31.58.34.0/23
31.58.152.0/22
31.59.96.0/22
31.59.112.0/22
31.59.184.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:5c:4a:a4:7f:0c:29:db:e6:ca:f8:3b:2e:d4:85:3d:df:4a:
5f:cc:38:bd:1c:c9:63:46:3b:ac:5a:cb:32:a6:be:2f:9e:29:
c1:e6:de:83:b2:25:2c:12:1e:1a:35:0c:8f:55:e7:81:04:50:
22:e1:87:ea:4f:c8:42:d7:66:c6:f8:eb:1a:50:4c:ec:82:e5:
df:d6:c1:6c:46:ef:bd:95:6a:43:6c:0b:3f:ad:af:8f:ec:0d:
72:48:d8:c8:45:ab:f2:15:38:75:49:a3:12:7b:07:7a:8d:bb:
8d:ee:e9:46:24:9d:3d:5c:f1:3b:f3:b9:7f:d1:27:c1:f0:c7:
8e:2f:dd:73:55:f4:72:ea:7c:05:03:7f:07:4a:3a:49:9a:73:
e7:03:c7:6a:35:c9:ee:3e:35:8c:74:a0:d1:fa:cf:1f:97:7c:
de:2f:b9:e8:65:49:da:ce:81:54:1c:9f:21:bb:c0:95:1e:34:
00:a4:94:9b:1d:23:e4:a3:b5:e0:ed:f6:ce:a8:f8:38:a9:04:
ec:a4:a8:fc:9b:0d:ae:fb:f4:84:b8:be:da:ba:ec:8b:ea:b1:
b6:58:a4:b8:09:55:7e:b3:d7:67:6c:37:57:00:01:c4:3d:07:
63:c0:87:3a:b5:d1:9c:01:ba:d9:6f:32:7c:cd:72:74:83:36:
5e:b9:c4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:50:56 2025 by rpki-client