Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LYWnnzNRJkViOuefA4RxA_ZvKko.roa
File: LYWnnzNRJkViOuefA4RxA_ZvKko.roa (raw, json)
Hash identifier: iM6MuAOY2pb32OvqbrR16LQBXnvTWLDEDHhuMnAqOUQ=
Subject key identifier: 2D:85:A7:9F:33:51:26:45:62:3A:E7:9F:03:84:71:03:F6:6F:2A:4A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195A4F4528ABF1308F88E0AB04E7B4D11FD
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LYWnnzNRJkViOuefA4RxA_ZvKko.roa
Signing time: Mon 17 Mar 2025 16:33:50 +0000
ROA not before: Mon 17 Mar 2025 16:33:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.42.0/24 maxlen: 24
31.56.43.0/24 maxlen: 24
31.56.47.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.77.0/24 maxlen: 24
31.57.103.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.113.0/24 maxlen: 24
31.57.114.0/24 maxlen: 24
31.57.115.0/24 maxlen: 24
31.57.116.0/24 maxlen: 24
31.57.117.0/24 maxlen: 24
31.57.118.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.200.0/24 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.212.0/24 maxlen: 24
31.57.213.0/24 maxlen: 24
31.57.214.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.57.254.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.51.0/24 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.76.0/24 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.184.0/22 maxlen: 24
31.59.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Mar 2025 17:55:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a4:f4:52:8a:bf:13:08:f8:8e:0a:b0:4e:7b:4d:11:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 17 16:33:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d85a79f33512645623ae79f03847103f66f2a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f4:67:53:3a:aa:a4:93:67:bc:81:b9:2c:dd:
ab:fc:14:0f:d9:ec:69:b9:63:c2:53:a8:bc:e8:7b:
d8:51:96:cb:40:7c:a5:bd:64:18:bc:c6:cb:b3:40:
54:2f:ac:a6:26:04:c7:d1:a9:19:d3:3d:11:82:4e:
e2:0c:2f:b0:e5:87:f0:ef:6f:f5:de:85:69:1b:25:
74:ad:91:97:5e:7e:31:8d:34:67:16:c6:7e:fb:07:
53:51:b7:b9:12:ad:89:b2:f7:fe:9d:2f:55:43:db:
a6:e4:56:56:37:13:2e:ab:ea:c4:a8:89:c5:de:94:
65:ab:17:5d:de:d5:43:fa:03:9a:df:b1:a4:d8:18:
e1:99:8d:f2:ec:20:e9:2f:e7:da:35:56:04:ef:a2:
61:13:60:e7:6e:19:48:90:db:18:3d:cb:f9:4f:a0:
d9:61:3c:2a:af:1b:59:08:e1:3c:68:44:08:35:8d:
49:99:3a:66:1b:9b:a1:a9:98:8a:36:08:e7:25:e6:
1a:4b:e4:8b:84:4d:88:39:de:72:ab:a0:a0:d4:2c:
f3:9d:de:08:5c:96:2b:9c:28:21:8d:b5:00:2f:c7:
1a:05:9b:5c:e0:ea:70:de:3f:18:46:31:5f:8e:4b:
e6:d1:52:1a:2d:10:d3:3e:9e:c5:e0:96:b5:ab:56:
0d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:85:A7:9F:33:51:26:45:62:3A:E7:9F:03:84:71:03:F6:6F:2A:4A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LYWnnzNRJkViOuefA4RxA_ZvKko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.47.0/24
31.56.57.0/24
31.56.71.0/24
31.56.89.0-31.56.91.255
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.77.0/24
31.57.103.0-31.57.111.255
31.57.113.0-31.57.118.255
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0/21
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.76.0/24
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.224.0/22
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.184.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:9e:97:54:47:11:10:bb:72:6b:a4:c4:9b:b2:d6:8a:19:bc:
76:16:68:08:09:b7:f7:67:7f:45:28:16:c6:b7:38:d2:f5:6a:
85:ac:a9:e4:a9:de:58:c5:9d:61:b8:28:c3:9f:5f:f7:81:15:
44:69:5a:a7:15:07:7a:85:1c:2a:25:02:e3:41:d8:fc:60:1a:
49:c5:b4:7d:61:8a:cc:9d:b2:9f:42:69:60:4e:5e:bd:fe:98:
e2:90:18:f3:dd:87:d5:23:ce:96:91:1c:16:eb:c2:65:14:6f:
54:f4:df:7e:a7:52:99:63:c3:5f:b8:3a:71:c1:20:c3:cc:63:
f2:03:6c:41:c1:6b:d8:ba:b5:cd:df:ca:b4:3f:e9:cf:41:54:
9e:93:95:31:d7:d6:c1:5b:cb:6a:54:58:ad:6d:d4:fb:69:36:
f6:a9:4f:17:8e:e7:b5:d2:9b:76:6d:58:88:03:bb:37:13:e5:
78:ef:f7:e7:ba:e7:5f:a0:07:01:b8:2d:f1:86:07:cd:7f:53:
52:f4:ca:7a:3a:1e:6b:16:e2:9c:75:23:b9:37:85:00:16:b6:
20:16:6f:58:93:0b:84:bb:53:5f:04:26:b0:dd:f4:b0:50:10:
55:95:91:e1:de:2f:b7:34:c1:c2:98:bc:38:4d:8e:1d:01:98:
53:34:da:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:59:26 2025 by rpki-client