Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IroKp87FCXGoUoMEOhVRK1Fa_E4.roa
File: IroKp87FCXGoUoMEOhVRK1Fa_E4.roa (raw, json)
Hash identifier: XP5aSP87wPZMqigHEUVwosorSTezWERDzS1On/0ESNw=
Subject key identifier: 22:BA:0A:A7:CE:C5:09:71:A8:52:83:04:3A:15:51:2B:51:5A:FC:4E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194ABACA80C7FF17765AAF6044443F7DD14
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IroKp87FCXGoUoMEOhVRK1Fa_E4.roa
Signing time: Tue 28 Jan 2025 06:50:06 +0000
ROA not before: Tue 28 Jan 2025 06:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.74.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.156.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.33.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.142.0/24 maxlen: 24
31.58.143.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.163.0/24 maxlen: 24
31.58.230.0/23 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.42.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.108.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
31.59.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Jan 2025 20:19:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ab:ac:a8:0c:7f:f1:77:65:aa:f6:04:44:43:f7:dd:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 28 06:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22ba0aa7cec50971a85283043a15512b515afc4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:39:65:45:f7:e3:c9:4a:c1:1f:48:71:d8:75:
63:f9:1b:d9:28:e4:ce:87:dc:a7:48:c2:2c:e8:95:
86:10:28:90:0f:c5:b9:19:78:65:eb:54:dd:33:7b:
17:e6:70:ac:d9:22:34:ad:a6:c3:d9:af:1f:30:86:
1f:94:cd:1e:82:23:e5:03:c8:82:ba:95:12:3c:fb:
fc:2d:40:61:c3:9e:72:77:50:c9:10:25:cb:7c:0c:
73:e1:3e:8a:9d:03:6b:74:c3:ea:d7:f9:2f:4c:7f:
49:7c:d3:74:70:23:75:b4:d8:7a:95:e3:2f:b7:56:
d3:6c:33:1c:6b:61:df:1d:94:23:0e:75:51:41:83:
b1:9e:76:ad:e7:2f:1f:6a:61:c9:7c:f3:46:c1:60:
f8:53:3c:7f:82:4e:e0:60:70:7b:74:be:bc:5d:52:
f6:7e:74:13:52:11:f4:65:fd:56:c4:c3:40:9a:97:
47:28:22:7e:ab:5f:ac:64:bc:70:0f:53:cd:bf:ea:
74:ea:3a:dd:0d:f8:be:34:07:8c:02:3f:bd:5f:c1:
ac:e9:2c:db:14:a2:72:f5:b8:16:57:eb:5d:07:b5:
17:9d:33:f1:ea:f0:a0:55:8f:13:b3:f0:fd:18:0b:
4a:6d:9e:d6:65:d9:be:ec:b6:72:a7:1a:69:2d:d0:
3f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:BA:0A:A7:CE:C5:09:71:A8:52:83:04:3A:15:51:2B:51:5A:FC:4E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IroKp87FCXGoUoMEOhVRK1Fa_E4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.74.0/24
31.56.89.0-31.56.91.255
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.156.0/24
31.56.200.0/22
31.57.104.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.176.0/21
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.33.0-31.58.35.255
31.58.142.0/23
31.58.152.0/22
31.58.163.0/24
31.58.230.0/23
31.59.41.0-31.59.42.255
31.59.57.0/24
31.59.96.0/22
31.59.108.0/24
31.59.112.0/22
31.59.184.0/22
31.59.228.0/24
Signature Algorithm: sha256WithRSAEncryption
66:95:7b:08:22:df:d7:22:ff:b5:52:d3:3a:b8:f3:c8:3f:8d:
a3:62:36:a4:63:df:b7:2e:ec:3e:d5:c6:be:7f:d5:1b:84:85:
05:f2:bd:02:b5:60:a6:ea:69:1a:7f:a6:8c:a8:20:c7:cf:2c:
66:f8:49:46:06:b9:07:c0:b3:3c:4d:d0:83:72:9e:fb:71:25:
57:1d:7f:ad:00:4e:33:ac:19:2c:05:3a:b1:c0:93:92:e1:f7:
c3:7c:56:c2:2a:d6:60:c9:2d:06:55:fd:83:99:64:3a:e6:48:
b7:5f:2b:38:89:0e:c0:5c:5d:f1:11:f2:6d:74:25:48:76:45:
6a:31:d0:70:fc:de:df:41:cc:40:60:9a:18:4b:97:9b:06:07:
3f:84:8d:03:ed:c4:21:cc:c7:bd:f2:f1:64:8e:ab:4f:ca:15:
8e:cb:cf:e9:c0:3e:f3:e9:6e:90:fe:ae:fc:39:3c:ef:c9:bd:
8e:e5:ce:6c:ac:15:93:5b:40:52:8c:f0:09:59:86:35:46:ff:
a0:a0:18:80:17:e2:53:f2:41:21:ef:10:e7:0f:57:66:30:a1:
39:d2:1c:c8:28:e9:ca:fc:c6:6c:39:27:7d:49:4f:bc:1b:f0:
c9:38:2a:c8:d5:0e:78:24:46:a6:53:4b:c2:62:64:6e:fc:57:
e8:9b:eb:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:06 2025 by rpki-client