Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NNu9LJs9Ludztot58tp_ecN9DUw.roa
File: NNu9LJs9Ludztot58tp_ecN9DUw.roa (raw, json)
Hash identifier: 8MQZLcEU//f4bmm5PcGGC0fFsQf5gfVpQkWXajc5NjQ=
Subject key identifier: 34:DB:BD:2C:9B:3D:2E:E7:73:B6:8B:79:F2:DA:7F:79:C3:7D:0D:4C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195ADE8CDA0FA84A355CDBFD3E99821FBFF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NNu9LJs9Ludztot58tp_ecN9DUw.roa
Signing time: Wed 19 Mar 2025 10:17:49 +0000
ROA not before: Wed 19 Mar 2025 10:17:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.42.0/24 maxlen: 24
31.56.43.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.103.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.113.0/24 maxlen: 24
31.57.114.0/24 maxlen: 24
31.57.115.0/24 maxlen: 24
31.57.116.0/24 maxlen: 24
31.57.117.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.143.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.168.0/23 maxlen: 23
31.57.176.0/21 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.200.0/24 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.212.0/24 maxlen: 24
31.57.213.0/24 maxlen: 24
31.57.214.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.57.254.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.76.0/24 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Mar 2025 17:30:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ad:e8:cd:a0:fa:84:a3:55:cd:bf:d3:e9:98:21:fb:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 19 10:17:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34dbbd2c9b3d2ee773b68b79f2da7f79c37d0d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c8:c4:c0:82:18:f8:13:5f:77:f4:6d:16:b4:
08:40:86:70:01:e3:7f:01:9c:f4:7e:c0:f1:b3:af:
28:46:a3:60:22:0f:7d:20:e7:24:01:99:78:0c:f6:
ec:96:bb:d1:7f:20:72:49:31:f3:fa:5f:ff:7a:1b:
ae:8a:21:44:d6:e9:14:25:52:a7:24:36:1a:19:7c:
58:d0:34:41:3d:cd:b9:05:ab:5d:d3:20:58:c8:45:
15:9c:ef:44:f2:69:ab:f9:b3:9a:86:77:6e:c5:70:
5a:30:5f:2f:5d:ee:52:a8:1f:3b:23:fa:c7:64:32:
c3:06:19:8d:96:53:16:e6:ac:e5:35:38:3e:43:1c:
6d:ec:c9:0e:03:6b:02:89:7f:0f:8f:70:01:ff:b3:
ac:c2:e5:b3:64:01:e9:79:e6:e1:32:e7:55:08:f7:
65:01:8b:ae:61:d6:21:09:43:0a:a4:77:ff:82:10:
a4:98:82:4b:9d:b6:47:bd:3f:ce:52:23:4d:09:14:
a2:1d:59:6e:79:75:bd:82:3f:d2:07:46:af:98:32:
e0:d0:47:77:27:79:3e:cf:64:5b:57:61:7b:31:29:
7a:08:df:7f:6e:81:c6:bc:4f:16:1b:c7:47:b7:e5:
ca:97:ff:d1:b8:da:32:84:48:5c:93:96:9d:1e:e1:
9e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DB:BD:2C:9B:3D:2E:E7:73:B6:8B:79:F2:DA:7F:79:C3:7D:0D:4C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NNu9LJs9Ludztot58tp_ecN9DUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.71.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.103.0-31.57.111.255
31.57.113.0-31.57.117.255
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0/21
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.76.0/24
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.224.0/22
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:ae:bf:bc:ea:a4:d2:ca:5a:b2:e0:0c:61:43:bb:96:c0:02:
46:67:5e:f3:9d:73:60:1a:54:19:73:be:88:3d:c9:67:1e:85:
a1:d1:57:49:86:8f:57:c7:0d:28:21:86:1e:d5:c2:6a:b4:53:
14:c7:c1:98:15:3a:c8:37:43:a0:4e:0a:7f:d5:1e:91:dd:71:
73:5a:fc:d4:09:e5:f6:22:dd:0d:ec:ea:10:5d:19:0c:d3:6c:
9e:5d:28:78:e2:ce:ad:36:1a:d1:c8:fd:3e:28:0c:ef:c5:6e:
72:df:59:ad:fe:f9:69:4e:3a:ac:be:8b:20:5f:f7:5a:d3:af:
f2:c4:32:25:50:1d:76:47:53:d6:90:3e:fd:ef:8f:9b:25:c8:
d2:ce:0c:74:0a:f1:58:94:ee:97:9e:19:f6:79:ed:a1:60:13:
ac:fa:27:47:d2:8b:bd:31:04:6d:55:22:bb:bb:83:74:c1:48:
ae:9b:6e:09:45:6b:86:b7:15:67:47:93:d1:04:d0:48:03:7f:
f4:22:13:66:47:f7:ea:30:5e:d9:1f:59:a7:c8:da:ab:50:e3:
04:27:62:f3:07:c5:01:79:cc:b5:90:6e:cd:c7:77:ec:50:37:
97:c0:2b:16:2b:b8:b3:e9:61:5c:a9:5f:1a:d6:01:5d:b6:89:
f0:4c:c8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:10:44 2025 by rpki-client