Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Kph_bn7yp8SmkY2e9Y1LymaQ_DU.roa
File: Kph_bn7yp8SmkY2e9Y1LymaQ_DU.roa (raw, json)
Hash identifier: sIX0oKwdRrPX3Gs4dYUQPcrd49jeO3XK+w8W/m8Xdtk=
Subject key identifier: 2A:98:7F:6E:7E:F2:A7:C4:A6:91:8D:9E:F5:8D:4B:CA:66:90:FC:35
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194A25BB4F03B2CE672010D8409C0B05105
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Kph_bn7yp8SmkY2e9Y1LymaQ_DU.roa
Signing time: Sun 26 Jan 2025 11:25:06 +0000
ROA not before: Sun 26 Jan 2025 11:25:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.74.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.156.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.65.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.33.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.142.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.163.0/24 maxlen: 24
31.58.230.0/23 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.42.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.108.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
31.59.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 26 Jan 2025 15:49:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a2:5b:b4:f0:3b:2c:e6:72:01:0d:84:09:c0:b0:51:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 26 11:25:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a987f6e7ef2a7c4a6918d9ef58d4bca6690fc35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0a:d1:c7:d7:0a:47:4c:fa:a9:0a:1a:6d:a5:
0c:ce:0b:70:a6:d4:73:28:bb:ff:85:63:50:f9:1d:
bf:df:79:20:79:33:91:56:39:42:83:d6:23:01:ea:
51:d3:bc:63:0c:95:e1:b9:ed:58:e0:62:4b:a9:fe:
fc:7d:8f:c3:b5:f5:5f:39:f4:36:5c:93:18:c2:89:
2c:b8:29:83:9a:ef:b9:c9:17:19:48:e1:5b:45:4b:
1d:54:31:b4:25:0d:17:16:d1:a1:cd:08:2b:5d:5b:
9a:51:6a:7f:c0:60:44:69:71:f6:e6:ec:77:0a:54:
0f:20:18:11:c4:a5:0d:94:68:85:87:6e:4f:0f:92:
17:8a:8a:2d:24:b4:19:64:77:cf:53:76:49:c0:c1:
67:b1:23:ac:10:ac:5a:b6:89:46:67:c8:ee:4a:4c:
01:b7:16:2d:5e:d2:56:d3:22:17:1a:18:ce:83:8b:
db:7a:08:39:c7:7d:4d:85:cf:67:bc:70:58:d9:8a:
12:bb:73:08:0b:e7:8c:64:53:69:4e:7b:6f:55:b5:
71:75:39:2f:5d:bd:dd:84:7c:2d:a4:df:0f:0e:a1:
6b:4f:cb:3d:0a:46:18:11:ec:13:b5:22:c1:8f:cf:
90:ba:3a:01:49:8a:8d:28:c8:6e:db:ec:b6:58:a9:
12:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:98:7F:6E:7E:F2:A7:C4:A6:91:8D:9E:F5:8D:4B:CA:66:90:FC:35
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Kph_bn7yp8SmkY2e9Y1LymaQ_DU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.74.0/24
31.56.89.0-31.56.91.255
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.156.0/24
31.56.200.0/22
31.57.65.0/24
31.57.104.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.176.0/21
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.33.0-31.58.35.255
31.58.142.0/24
31.58.152.0/22
31.58.163.0/24
31.58.230.0/23
31.59.41.0-31.59.42.255
31.59.57.0/24
31.59.96.0/22
31.59.108.0/24
31.59.112.0/22
31.59.184.0/22
31.59.228.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:69:7b:54:c2:5d:1c:59:01:da:4b:78:31:33:43:80:a1:7f:
d0:0a:91:40:12:51:8d:08:55:e9:a2:57:70:2c:bd:d0:0f:09:
84:37:77:96:42:b6:0f:da:30:fc:1d:d4:ca:13:5b:03:d0:8c:
57:42:b5:88:89:5a:92:13:9e:a1:12:9a:c8:a6:8d:33:a3:92:
6f:e2:ae:11:09:cf:01:d6:6c:a9:d7:b8:4c:e6:1e:2e:5a:43:
03:11:19:b0:ca:f3:4d:87:88:87:a7:5e:d4:1b:20:a2:93:e8:
94:09:ea:f7:a2:73:b2:c8:45:9c:12:52:50:4f:bd:8a:6e:cb:
f9:2f:8e:d0:67:03:c2:23:dc:3e:3c:5f:fa:68:8d:93:da:04:
9c:a0:d1:71:14:fb:2c:c1:8c:7b:80:eb:b0:ae:67:c6:91:69:
b5:0e:b2:67:4e:78:fa:88:3b:f8:cb:91:ee:af:a3:8c:05:da:
e8:64:15:3e:1f:38:66:56:25:ec:3a:8e:c0:ac:30:76:8e:3f:
f3:e1:42:31:b8:88:d9:eb:f2:ad:12:53:59:67:2f:8c:d3:01:
bb:46:83:d1:18:94:86:54:b1:f5:4b:1c:e2:9e:05:76:e5:6e:
f7:68:b3:b5:a3:1e:52:b2:01:dc:ef:03:65:79:0a:7b:be:4c:
5e:c7:13:d1
-----BEGIN CERTIFICATE-----
MIIF8jCCBNqgAwIBAgISAZSiW7TwOyzmcgENhAnAsFEFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMTI2MTEyNTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTk4N2Y2ZTdlZjJhN2M0YTY5MThkOWVmNThkNGJjYTY2OTBmYzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQrRx9cKR0z6qQoabaUMzgtwptRz
KLv/hWNQ+R2/33kgeTORVjlCg9YjAepR07xjDJXhue1Y4GJLqf78fY/DtfVfOfQ2
XJMYwoksuCmDmu+5yRcZSOFbRUsdVDG0JQ0XFtGhzQgrXVuaUWp/wGBEaXH25ux3
ClQPIBgRxKUNlGiFh25PD5IXiootJLQZZHfPU3ZJwMFnsSOsEKxatolGZ8juSkwB
txYtXtJW0yIXGhjOg4vbegg5x31Nhc9nvHBY2YoSu3MIC+eMZFNpTntvVbVxdTkv
Xb3dhHwtpN8PDqFrT8s9CkYYEewTtSLBj8+QujoBSYqNKMhu2+y2WKkSBQIDAQAB
o4IC/jCCAvowHQYDVR0OBBYEFCqYf25+8qfEppGNnvWNS8pmkPw1MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvS3BoX2JuN3lwOFNta1kyZTlZMUx5bWFRX0RVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBEgYIKwYBBQUHAQcBAf8EggEBMIH+MIH7BAIAATCB9AME
AR84BAMEAB84GAMEAR84KgMEAB84OQMEAB84SjAMAwQAHzhZAwQCHzhYAwQDHzho
AwQBHzhyMAwDBAEfOHYDBAIfOHgDBAAfOJwDBAIfOMgDBAAfOUEDBAMfOWgDBAEf
OYQDBAMfOYgDBAEfOZIDBAMfObADBAIfOcADBAEfOcgwDAMEBB850AMEAh854AME
Ah856AMEAh85/DAMAwQAHzohAwQCHzogAwQAHzqOAwQCHzqYAwQAHzqjAwQBHzrm
MAwDBAAfOykDBAAfOyoDBAAfOzkDBAIfO2ADBAAfO2wDBAIfO3ADBAIfO7gDBAAf
O+QwDQYJKoZIhvcNAQELBQADggEBALlpe1TCXRxZAdpLeDEzQ4Chf9AKkUASUY0I
VemiV3AsvdAPCYQ3d5ZCtg/aMPwd1MoTWwPQjFdCtYiJWpITnqESmsimjTOjkm/i
rhEJzwHWbKnXuEzmHi5aQwMRGbDK802HiIenXtQbIKKT6JQJ6veic7LIRZwSUlBP
vYpuy/kvjtBnA8Ij3D48X/pojZPaBJyg0XEU+yzBjHuA67CuZ8aRabUOsmdOePqI
O/jLke6vo4wF2uhkFT4fOGZWJew6jsCsMHaOP/PhQjG4iNnr8q0SU1lnL4zTAbtG
g9EYlIZUsfVLHOKeBXblbvdos7WjHlKyAdzvA2V5Cnu+TF7HE9E=
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:48:52 2025 by rpki-client