Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/I4rIMdWvZgvTNVzzog17W1I_Ly0.roa
File: I4rIMdWvZgvTNVzzog17W1I_Ly0.roa (raw, json)
Hash identifier: G4iH6+iUA85bmXN9BLXsDtHdRmKnptLtyldQX91ZsC4=
Subject key identifier: 23:8A:C8:31:D5:AF:66:0B:D3:35:5C:F3:A2:0D:7B:5B:52:3F:2F:2D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195CD71EC064490174980DDC141355CF4D5
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/I4rIMdWvZgvTNVzzog17W1I_Ly0.roa
Signing time: Tue 25 Mar 2025 13:15:50 +0000
ROA not before: Tue 25 Mar 2025 13:15:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.87.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.103.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.113.0/24 maxlen: 24
31.57.114.0/24 maxlen: 24
31.57.116.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.143.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.168.0/23 maxlen: 23
31.57.176.0/21 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.214.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.57.254.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.76.0/24 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
31.59.236.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 25 Mar 2025 14:38:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cd:71:ec:06:44:90:17:49:80:dd:c1:41:35:5c:f4:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 25 13:15:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=238ac831d5af660bd3355cf3a20d7b5b523f2f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3c:5d:55:af:88:da:cb:cc:29:4f:90:7f:0a:
b4:8d:ea:1c:0a:4b:df:f9:c0:17:b2:4c:0a:23:07:
4f:44:8a:d8:22:af:de:82:55:25:c0:db:28:cd:ed:
96:ac:18:f9:a5:17:ee:df:bb:9b:d0:59:1d:c7:df:
7e:ba:22:9c:fb:05:df:63:6c:4b:d3:2f:e3:a8:ad:
6c:af:7b:57:24:51:29:bf:8e:4b:eb:86:7c:4e:8f:
9e:3c:0e:c5:10:81:04:ce:5a:f4:5e:2d:bd:20:8a:
42:1b:56:b5:11:ca:8d:18:c3:47:39:e2:47:63:2e:
04:77:c5:f3:6b:f8:32:0d:1d:f2:1d:ed:a5:46:37:
24:e9:07:a0:71:18:8d:a0:7a:54:1d:e9:2b:42:8e:
e3:8f:fa:9d:47:45:df:62:12:49:c0:26:34:36:97:
ad:e0:d7:dd:73:13:13:46:0b:b1:f8:2d:be:28:5b:
b9:c5:2b:dd:77:b8:35:fe:01:12:5b:35:8d:90:1d:
f6:d6:a2:49:cb:a4:7a:9f:be:c3:01:b4:51:7c:e8:
f0:63:0b:8a:9c:ee:d4:31:c9:94:32:2a:1f:50:52:
c0:3d:9f:f1:42:9b:c7:8b:ad:4e:f0:ab:34:07:3f:
ab:ab:6d:8e:a9:97:6c:46:05:22:ca:45:ce:28:2e:
04:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8A:C8:31:D5:AF:66:0B:D3:35:5C:F3:A2:0D:7B:5B:52:3F:2F:2D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/I4rIMdWvZgvTNVzzog17W1I_Ly0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.57.0/24
31.56.71.0/24
31.56.87.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.103.0-31.57.111.255
31.57.113.0-31.57.114.255
31.57.116.0/24
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0/21
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.76.0/24
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.224.0/22
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.175.255
31.59.224.0/22
31.59.232.0/21
Signature Algorithm: sha256WithRSAEncryption
62:eb:fb:ef:21:20:07:0a:4e:45:df:22:88:eb:bd:b3:50:84:
9a:36:22:22:ee:c5:18:35:02:7c:23:31:b3:63:50:6b:b3:57:
2e:90:51:2d:5c:3e:a9:ae:43:a4:f7:e7:b5:4d:01:fd:d2:1c:
30:4a:a8:0a:1e:ea:c6:20:e4:c7:93:69:16:ff:0f:21:db:94:
8d:7a:95:b6:14:ac:14:10:6c:c8:1d:e4:a1:5c:67:5f:f4:ce:
4b:d8:a2:ad:18:a6:fe:81:21:a8:0d:f3:a3:bf:62:cd:11:2d:
61:bd:e7:29:1c:6c:d0:88:38:79:4a:87:e9:c1:0c:f2:24:f2:
b7:75:46:0f:91:55:33:22:1a:b9:ac:4c:95:5c:13:8d:ab:2b:
4f:99:77:06:39:f9:66:1a:83:97:8c:af:e1:d8:62:09:76:9d:
23:d7:19:79:6d:61:2a:e6:a1:a4:d1:9c:9d:51:58:01:2f:d2:
76:52:0e:95:10:d0:91:68:b1:45:db:70:e4:cc:d0:26:ee:e7:
99:28:97:ed:ff:35:d3:3a:1f:21:ce:0f:99:de:4c:fe:27:23:
5d:a2:04:72:38:26:17:0e:45:73:98:45:7b:f1:4f:5b:c6:22:
f4:20:e7:25:b3:22:c9:12:2c:64:99:0e:f0:b9:ba:f1:18:c7:
9a:a4:02:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:03:41 2025 by rpki-client