Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QDsQXUmcWblk2ckmmb_3kYpfepM.roa
File: QDsQXUmcWblk2ckmmb_3kYpfepM.roa (raw, json)
Hash identifier: OdZauBYlnV3JiWH2iXYRKQjKynuMLIaty8zLGwiq10k=
Subject key identifier: 40:3B:10:5D:49:9C:59:B9:64:D9:C9:26:99:BF:F7:91:8A:5F:7A:93
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019410F28F6C3E8FCA4896FBC524665CAA65
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QDsQXUmcWblk2ckmmb_3kYpfepM.roa
Signing time: Sun 29 Dec 2024 05:45:19 +0000
ROA not before: Sun 29 Dec 2024 05:45:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.16.0/22 maxlen: 22
31.56.22.0/24 maxlen: 24
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.74.0/24 maxlen: 24
31.56.75.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.16.0/22 maxlen: 24
31.57.20.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.146.0/23 maxlen: 24
31.57.147.0/24 maxlen: 24
31.57.151.0/24 maxlen: 24
31.57.152.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.178.0/24 maxlen: 24
31.57.179.0/24 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.182.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.176.0/22 maxlen: 24
31.58.200.0/22 maxlen: 24
31.58.216.0/22 maxlen: 24
31.58.240.0/22 maxlen: 24
31.58.252.0/22 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.42.0/24 maxlen: 24
31.59.43.0/24 maxlen: 24
31.59.56.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.58.0/24 maxlen: 24
31.59.64.0/22 maxlen: 24
31.59.80.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.124.0/22 maxlen: 24
31.59.130.0/24 maxlen: 24
31.59.176.0/22 maxlen: 22
31.59.180.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
31.59.188.0/22 maxlen: 22
31.59.192.0/22 maxlen: 22
31.59.216.0/22 maxlen: 24
31.59.228.0/24 maxlen: 24
31.59.229.0/24 maxlen: 24
31.59.231.0/24 maxlen: 24
31.59.244.0/24 maxlen: 24
31.59.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Dec 2024 10:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:10:f2:8f:6c:3e:8f:ca:48:96:fb:c5:24:66:5c:aa:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 29 05:45:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=403b105d499c59b964d9c92699bff7918a5f7a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1c:22:c8:77:7e:32:fb:2d:a3:1b:36:26:ff:
83:47:36:49:e9:0b:b1:27:a7:f1:a1:15:14:49:42:
84:3a:d9:81:37:5b:9b:f9:74:f5:0a:cf:d2:c5:5e:
df:9c:1c:07:04:18:c2:21:e4:0c:ab:56:97:5c:c1:
10:4f:64:84:1e:a0:ac:c9:d5:6f:75:7c:6c:bd:17:
b4:3a:4b:fe:f8:d2:c8:03:c7:e3:dc:aa:f3:df:30:
e8:ed:05:d1:e9:7c:d5:e8:63:d7:0c:e8:b6:af:a2:
87:a5:c2:f1:ec:dd:ae:35:28:cd:a5:d7:ee:68:ed:
c9:ef:67:59:3c:a1:ec:d6:7c:5e:15:93:17:dc:a9:
22:42:ac:b0:31:62:3e:9b:5a:6e:91:11:be:cb:36:
c7:bf:41:8d:84:a4:b3:44:0d:81:fd:c6:19:37:b1:
49:c2:c3:ee:29:1b:b0:8e:fc:ce:43:fa:94:79:6d:
39:59:38:2e:19:1d:96:9d:63:f7:34:b8:7b:94:cd:
46:80:af:99:7f:f9:1e:4e:5e:ac:65:08:c8:f7:19:
88:be:8a:c1:6e:70:30:8c:65:fe:72:27:43:b6:eb:
1e:9d:c7:30:20:f4:48:1a:f3:f6:e4:44:8b:11:6e:
04:8a:de:c3:f9:94:ae:16:cd:94:31:a3:3c:ac:09:
c8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3B:10:5D:49:9C:59:B9:64:D9:C9:26:99:BF:F7:91:8A:5F:7A:93
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QDsQXUmcWblk2ckmmb_3kYpfepM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.16.0/22
31.56.22.0/24
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.71.0/24
31.56.74.0/23
31.56.89.0/24
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.16.0/21
31.57.132.0/23
31.57.146.0/23
31.57.151.0-31.57.152.255
31.57.176.0/21
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.34.0/23
31.58.152.0/22
31.58.176.0/22
31.58.200.0/22
31.58.216.0/22
31.58.240.0/22
31.58.252.0/22
31.59.41.0-31.59.43.255
31.59.56.0-31.59.58.255
31.59.64.0/22
31.59.80.0/22
31.59.96.0/22
31.59.112.0/22
31.59.124.0/22
31.59.130.0/24
31.59.176.0-31.59.195.255
31.59.216.0/22
31.59.228.0/23
31.59.231.0/24
31.59.244.0/23
Signature Algorithm: sha256WithRSAEncryption
94:73:71:26:64:39:b9:73:b5:e1:10:8c:82:99:d6:c7:68:e5:
4c:ec:76:12:b2:d6:9f:b3:b0:bb:3e:d7:55:ad:60:4c:ff:5a:
05:1e:73:a2:34:95:ae:89:32:1b:43:f1:ed:35:17:6d:6d:dd:
ff:1a:6d:69:f6:96:3b:6d:85:01:65:e2:e5:c9:0e:6a:2e:98:
9c:7c:1c:4e:4b:60:fa:68:14:a5:cb:ba:08:a9:a9:ba:18:e2:
7d:d6:58:60:46:99:bf:f3:d7:81:a7:28:74:5d:e2:fc:82:74:
fd:a5:35:82:23:31:e3:36:ad:ea:e3:d9:4b:b0:38:80:1f:71:
76:6c:b3:db:a6:70:68:7d:12:a1:5a:3f:68:c3:60:dd:0e:e2:
64:4b:27:2a:11:75:5e:b7:4f:53:36:3c:2e:81:66:7a:a6:e6:
cf:3d:63:c3:cc:98:02:b0:8d:85:05:c8:e9:51:f4:1d:a4:34:
a8:27:30:2e:3b:f1:e0:4b:5d:68:b7:64:f7:b5:fe:7d:87:51:
df:1c:d9:14:ec:49:59:2d:eb:34:cd:44:ab:18:16:76:7e:2e:
c3:65:60:1f:95:86:34:07:9e:16:7f:0c:24:9e:72:3e:da:63:
7f:80:5f:e0:b3:c2:6f:7f:4c:93:f1:35:55:57:3b:1f:26:58:
3e:a8:c6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:48:46 2025 by rpki-client