Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LW4_9udS9WoL4DnphRb-zJ6VdY4.roa
File: LW4_9udS9WoL4DnphRb-zJ6VdY4.roa (raw, json)
Hash identifier: 0rRiap0q6teGjtPJr5dKGKvOYkcw4Jwzjcn15IUrx8o=
Subject key identifier: 2D:6E:3F:F6:E7:52:F5:6A:0B:E0:39:E9:85:16:FE:CC:9E:95:75:8E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194D5DB50A39F8E5B455A73821415EF2A21
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LW4_9udS9WoL4DnphRb-zJ6VdY4.roa
Signing time: Wed 05 Feb 2025 11:25:07 +0000
ROA not before: Wed 05 Feb 2025 11:25:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.74.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.129.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.151.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.191.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.197.0/24 maxlen: 24
31.57.198.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.238.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.33.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.163.0/24 maxlen: 24
31.58.230.0/23 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.42.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.108.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
31.59.186.0/24 maxlen: 24
31.59.228.0/24 maxlen: 24
31.59.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Feb 2025 12:10:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d5:db:50:a3:9f:8e:5b:45:5a:73:82:14:15:ef:2a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 5 11:25:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d6e3ff6e752f56a0be039e98516fecc9e95758e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:be:8f:ab:12:1f:f4:79:c7:77:9c:02:f7:f4:
7c:2e:79:26:a0:82:79:14:1b:5b:cb:88:ae:37:7a:
2d:85:e5:2b:79:6d:d2:de:9d:d1:77:2c:36:d6:ba:
60:a9:02:47:87:93:2b:db:10:84:33:5f:63:fa:b7:
f9:84:1a:d8:41:e0:4e:28:b9:36:e6:74:9b:21:08:
c2:10:e5:39:b1:b6:9e:b5:b1:2a:eb:03:f6:46:31:
48:67:a5:db:1d:78:0c:1a:dd:34:da:6e:3c:a7:5d:
d6:99:c7:8b:d2:d8:75:11:9e:bb:0c:70:7b:44:6a:
6f:a4:4e:e8:15:6b:27:10:be:f4:ae:34:06:1a:f8:
b5:d5:62:2d:22:c3:02:a8:a8:a3:ca:af:3b:9c:2a:
a7:92:37:e8:cd:75:91:46:c1:5b:bd:8b:82:e8:7f:
d8:be:ef:89:f1:10:92:a2:22:be:7b:d4:d5:b0:25:
59:bf:ba:ec:6d:75:ac:05:82:84:c7:33:d9:38:a0:
d8:d8:36:f3:16:98:25:16:e6:7f:3e:65:ed:89:66:
7d:35:90:1c:c8:09:e4:ea:d6:83:10:24:5e:b1:30:
ac:c7:9c:ea:a2:01:f3:ae:72:ae:31:56:9e:45:f9:
25:60:e8:c4:e4:c4:32:bd:86:f5:f1:d9:fb:89:89:
2b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6E:3F:F6:E7:52:F5:6A:0B:E0:39:E9:85:16:FE:CC:9E:95:75:8E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LW4_9udS9WoL4DnphRb-zJ6VdY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.74.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.104.0/21
31.57.129.0/24
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.151.0/24
31.57.176.0/21
31.57.191.0-31.57.195.255
31.57.197.0-31.57.198.255
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.238.0/24
31.57.252.0/22
31.58.33.0-31.58.35.255
31.58.152.0/22
31.58.163.0/24
31.58.230.0/23
31.59.41.0-31.59.42.255
31.59.57.0/24
31.59.96.0/22
31.59.108.0/24
31.59.112.0/22
31.59.184.0/22
31.59.228.0/24
31.59.230.0/24
Signature Algorithm: sha256WithRSAEncryption
46:82:44:a8:7a:16:82:a9:55:22:7e:17:97:07:04:dd:ad:6d:
ba:ba:42:86:b3:7c:c1:d2:c1:d2:d5:67:60:bf:e3:42:18:33:
8f:80:92:28:86:fa:81:80:85:03:dd:51:b0:26:55:cf:87:08:
7b:af:23:75:b8:99:bb:2e:a3:05:b5:3b:ee:c6:21:06:16:e0:
c0:bf:2a:0d:c1:a9:f6:13:0d:63:1e:03:78:22:f7:61:60:65:
59:01:8b:b5:31:10:c8:ad:ae:77:05:58:7e:60:63:17:83:1d:
5e:7c:12:5b:8a:e3:f6:fc:10:5f:0f:af:56:ac:ad:71:82:9c:
7e:a8:d7:a9:2e:5f:c5:c4:6d:ed:5d:74:34:32:6c:c6:2d:fc:
c6:ba:17:f3:ec:a7:08:e7:91:43:cc:8f:18:3b:e9:b4:9b:a3:
a6:3d:ae:a8:34:31:d4:b3:7f:b3:05:1b:24:8d:4e:48:70:ca:
98:81:dd:d3:c9:8f:4b:06:ab:40:ed:e2:37:21:26:b4:f0:46:
ae:21:89:fc:1f:56:30:5e:45:07:82:68:32:0c:d1:17:44:57:
9c:aa:f1:1b:ad:04:16:93:67:5c:de:b9:b7:34:f7:49:80:de:
1a:48:00:89:de:94:23:fe:0d:24:79:0b:54:90:f7:c2:78:fe:
a4:e9:25:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:12 2025 by rpki-client