Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JcbnplUn802uH_hmJkvO9xV9iRs.roa
File: JcbnplUn802uH_hmJkvO9xV9iRs.roa (raw, json)
Hash identifier: xm75f8fwSGywhGQ1Yxstf87YEl0upkzX2CH9RZ3ugi4=
Subject key identifier: 25:C6:E7:A6:55:27:F3:4D:AE:1F:F8:66:26:4B:CE:F7:15:7D:89:1B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196905F0E8FAD478028CFD6A03B6C2F37F5
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JcbnplUn802uH_hmJkvO9xV9iRs.roa
Signing time: Fri 02 May 2025 09:41:10 +0000
ROA not before: Fri 02 May 2025 09:41:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 31.56.113.0/24 maxlen: 24
31.56.154.0/24 maxlen: 24
31.56.158.0/24 maxlen: 24
31.56.159.0/24 maxlen: 24
31.56.168.0/24 maxlen: 24
31.56.169.0/24 maxlen: 24
31.56.170.0/24 maxlen: 24
31.56.171.0/24 maxlen: 24
31.56.174.0/24 maxlen: 24
31.56.175.0/24 maxlen: 24
31.57.24.0/22 maxlen: 24
31.57.28.0/22 maxlen: 24
31.57.48.0/22 maxlen: 24
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.105.0/24 maxlen: 24
31.57.106.0/24 maxlen: 24
31.57.107.0/24 maxlen: 24
31.57.108.0/24 maxlen: 24
31.57.109.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.212.0/22 maxlen: 24
217.60.0.0/21 maxlen: 24
217.60.0.0/24 maxlen: 24
217.60.1.0/24 maxlen: 24
217.60.2.0/24 maxlen: 24
217.60.4.0/24 maxlen: 24
217.60.5.0/24 maxlen: 24
217.60.6.0/24 maxlen: 24
217.60.8.0/21 maxlen: 24
217.60.8.0/24 maxlen: 24
217.60.10.0/24 maxlen: 24
217.60.11.0/24 maxlen: 24
217.60.12.0/24 maxlen: 24
217.60.13.0/24 maxlen: 24
217.60.14.0/24 maxlen: 24
217.60.24.0/22 maxlen: 24
217.60.32.0/21 maxlen: 24
217.60.44.0/22 maxlen: 24
217.60.56.0/21 maxlen: 24
217.60.56.0/24 maxlen: 24
217.60.57.0/24 maxlen: 24
217.60.58.0/24 maxlen: 24
217.60.59.0/24 maxlen: 24
217.60.60.0/24 maxlen: 24
217.60.61.0/24 maxlen: 24
217.60.62.0/24 maxlen: 24
217.60.63.0/24 maxlen: 24
217.60.188.0/22 maxlen: 24
217.60.192.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 May 2025 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:5f:0e:8f:ad:47:80:28:cf:d6:a0:3b:6c:2f:37:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 2 09:41:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25c6e7a65527f34dae1ff866264bcef7157d891b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1b:10:47:dc:a8:e4:bf:5d:f9:da:ec:35:b9:
81:3e:30:39:7d:52:fd:ab:ea:36:47:59:57:cb:8a:
67:b4:ef:e5:8b:eb:8e:21:ac:e1:a6:83:06:5e:42:
81:bd:09:f5:91:1d:ad:bd:c7:2b:14:75:78:c6:2b:
ec:c6:9b:0a:3c:27:bb:a4:93:e3:1b:ae:2b:51:ba:
83:37:7b:46:80:f8:51:52:ca:39:33:d2:da:5f:c0:
d7:5a:aa:e9:7b:0a:05:25:1c:52:77:c5:ae:d4:0e:
eb:13:2d:1f:45:03:d2:f1:45:bd:f2:c9:1c:89:a8:
b1:0b:a2:4f:8d:b0:05:f1:88:bf:38:ec:02:ac:e6:
52:1c:8b:33:6f:9a:40:ba:63:4a:0c:d6:c0:71:84:
00:de:7e:68:b6:ae:15:64:18:16:de:12:32:55:08:
44:ef:45:37:71:08:07:04:ed:f4:ad:5b:71:a4:0b:
82:b3:30:42:80:5f:4b:f8:d9:7c:46:3c:a6:a3:08:
e4:ab:d5:22:d5:dc:ff:31:fc:13:60:3e:e3:3d:cc:
f3:86:aa:4b:e3:12:8b:52:b2:f4:1b:37:b9:9d:00:
60:e9:21:89:57:e6:e8:50:9d:da:9d:10:ad:8e:59:
9d:79:9b:0c:c3:5d:c7:c0:4c:aa:7a:d6:47:78:19:
83:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C6:E7:A6:55:27:F3:4D:AE:1F:F8:66:26:4B:CE:F7:15:7D:89:1B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JcbnplUn802uH_hmJkvO9xV9iRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.113.0/24
31.56.154.0/24
31.56.158.0/23
31.56.168.0/22
31.56.174.0/23
31.57.24.0/21
31.57.48.0/20
31.57.105.0-31.57.109.255
31.58.34.0/23
31.58.212.0/22
217.60.0.0/20
217.60.24.0/22
217.60.32.0/21
217.60.44.0/22
217.60.56.0/21
217.60.188.0-217.60.195.255
Signature Algorithm: sha256WithRSAEncryption
9c:3a:51:a5:91:7a:de:c7:e0:0b:8f:04:13:1b:d8:37:a5:11:
e1:b0:cc:8e:d8:8c:da:37:f7:38:4a:75:49:85:63:e6:b0:fc:
ec:45:32:85:9e:9f:c3:c5:6d:5e:07:e5:79:b0:5b:8e:c5:85:
ba:21:51:e0:2c:02:8e:57:5d:87:5b:c0:d7:1b:9f:8a:a6:1f:
1d:90:b7:c7:34:60:e9:c2:48:cd:ce:70:df:6d:1a:56:10:34:
93:44:8f:10:58:85:8d:78:9f:47:50:39:66:b0:eb:8e:22:c0:
71:95:1d:e2:2a:f9:ff:e2:9f:8d:4a:8f:24:03:fe:ae:8b:2a:
1a:19:cd:c8:33:e4:1f:fb:0c:16:00:e5:ed:bc:66:92:20:c5:
15:bb:49:48:1a:36:2b:0f:7b:9c:1f:22:51:b1:37:42:c3:1c:
06:15:d2:d6:19:2a:df:ea:9b:fe:6f:04:18:59:93:91:13:23:
11:ca:3a:d4:9e:85:d9:fe:03:7b:89:14:0d:54:83:bc:d3:9f:
fc:2e:d4:3f:9c:dd:0e:bb:45:e8:37:05:f4:a8:55:d1:c3:e2:
82:f3:39:69:b7:89:4d:e6:32:a0:0b:37:a8:6c:76:8f:29:50:
3c:d4:e7:3a:5d:1c:5f:9b:9d:cd:70:0b:df:61:1e:43:f5:10:
31:f2:3b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 03:56:42 2025 by rpki-client