Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Hhx28NVw6AYsDgqXCMSdB1OQ-98.roa
File: Hhx28NVw6AYsDgqXCMSdB1OQ-98.roa (raw, json)
Hash identifier: 4vYCTqLphkDk8JcJ16fcy8twugj8ZEIU815GIJH4TPQ=
Subject key identifier: 1E:1C:76:F0:D5:70:E8:06:2C:0E:0A:97:08:C4:9D:07:53:90:FB:DF
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019519FCF46357DBED209886231D3138E63A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Hhx28NVw6AYsDgqXCMSdB1OQ-98.roa
Signing time: Tue 18 Feb 2025 16:56:02 +0000
ROA not before: Tue 18 Feb 2025 16:56:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.85.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.141.0/24 maxlen: 24
31.57.143.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.244.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.56.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.152.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
31.59.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Feb 2025 13:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:19:fc:f4:63:57:db:ed:20:98:86:23:1d:31:38:e6:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 18 16:56:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e1c76f0d570e8062c0e0a9708c49d075390fbdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1c:70:9d:9e:c4:02:ef:0d:54:04:e9:76:e4:
b8:8f:e0:9d:50:0f:b6:7c:dd:a3:6d:51:af:5a:1d:
8b:4f:09:a9:29:ea:55:63:97:3f:1f:09:9f:79:d0:
9c:43:73:ce:b6:af:46:e1:76:12:1e:35:d0:a5:25:
94:78:b7:48:13:aa:67:08:d5:80:4f:f9:d0:99:cf:
8a:68:e5:80:96:91:f4:1b:28:b7:df:1c:66:af:34:
71:21:5d:f4:2c:25:89:94:5d:41:ec:35:f0:93:39:
8e:ea:60:a0:90:d1:7f:3e:4e:d8:30:42:d6:d1:37:
3c:ed:77:e5:0d:d7:11:6c:ad:e4:a8:48:52:ce:47:
62:04:9d:d8:cc:44:97:94:a2:9e:5d:e7:d5:cd:91:
9e:c0:6d:33:da:9e:35:28:f8:54:c1:08:88:d9:d2:
66:30:b1:96:88:ed:ac:46:d4:f7:5c:26:ad:ce:fd:
c9:35:e6:0e:ee:0d:22:0c:91:0b:3a:d7:c2:3f:88:
52:8c:a9:18:ab:3d:69:87:3e:b3:53:ba:94:dd:63:
36:24:ad:18:4a:0e:d6:ba:47:14:82:3d:dd:9c:8e:
76:80:b1:23:15:5c:22:83:d2:b2:40:b9:82:2f:20:
c9:11:e2:84:42:78:cd:d3:ab:a4:fc:4a:e1:b8:3c:
49:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:1C:76:F0:D5:70:E8:06:2C:0E:0A:97:08:C4:9D:07:53:90:FB:DF
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Hhx28NVw6AYsDgqXCMSdB1OQ-98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.71.0/24
31.56.85.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.104.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.176.0/21
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.244.0/24
31.57.252.0/22
31.58.34.0/23
31.58.50.0/23
31.58.56.0/23
31.58.64.0/23
31.58.152.0/22
31.59.96.0/22
31.59.112.0/22
31.59.184.0/22
Signature Algorithm: sha256WithRSAEncryption
87:e6:c2:cf:6a:3a:bb:53:80:8d:76:8e:50:c5:d9:d1:7b:36:
5c:83:2f:1f:24:e6:e4:82:55:26:1b:ea:bc:48:99:7f:1a:13:
e0:f2:e1:07:d2:93:ec:93:8b:c4:21:09:54:1e:a5:ce:ec:d6:
49:04:51:3b:23:b6:00:f2:6e:8f:a4:19:d4:8f:e1:6e:b6:66:
d8:b5:7d:bd:2b:9d:01:25:fe:02:89:c3:cc:d4:8a:94:da:92:
d9:fb:6c:52:cf:b2:b4:75:a2:a3:90:42:f2:c3:9a:7a:4b:14:
64:d1:97:1b:46:f3:c4:13:90:ce:09:a5:1a:dd:7b:4b:ea:3e:
fd:0a:60:21:6d:7e:14:03:9b:3c:2e:f8:f3:a7:60:21:39:95:
dd:56:93:d3:7c:77:15:72:d8:77:ec:17:1c:2a:86:79:85:bd:
82:36:c2:1f:06:d8:74:2d:cb:4d:ad:5d:04:6b:66:6c:6d:f3:
39:7b:fa:c9:b8:81:d0:d7:45:9e:4d:12:87:5a:34:35:dc:7c:
59:e9:9f:98:46:0a:a4:60:2e:b8:14:b2:69:8d:cc:02:51:6e:
00:ab:aa:14:27:29:d4:8b:6b:dc:26:49:e2:72:cb:cf:c3:a7:
d3:f2:40:e5:a1:f8:92:43:da:f5:48:48:98:b7:88:66:ab:56:
10:79:cc:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:03:38 2025 by rpki-client