Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UXVsCXMJkYHdTfwIGxi9JdUopSo.roa
File: UXVsCXMJkYHdTfwIGxi9JdUopSo.roa (raw, json)
Hash identifier: lROdM0LwotLaGw8TbSOD7zG2EVB+qL2rlFPygAkVBKE=
Subject key identifier: 51:75:6C:09:73:09:91:81:DD:4D:FC:08:1B:18:BD:25:D5:28:A5:2A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01943D19A86815BFCF3E6958205019E75E53
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UXVsCXMJkYHdTfwIGxi9JdUopSo.roa
Signing time: Mon 06 Jan 2025 19:31:19 +0000
ROA not before: Mon 06 Jan 2025 19:31:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.74.0/24 maxlen: 24
31.56.75.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.112.0/24 maxlen: 24
31.56.113.0/24 maxlen: 24
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.157.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.146.0/23 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.178.0/24 maxlen: 24
31.57.189.0/24 maxlen: 24
31.57.191.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.198.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.136.0/24 maxlen: 24
31.58.142.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.157.0/24 maxlen: 24
31.58.163.0/24 maxlen: 24
31.58.230.0/23 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.42.0/24 maxlen: 24
31.59.43.0/24 maxlen: 24
31.59.56.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.58.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.97.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.112.0/24 maxlen: 24
31.59.113.0/24 maxlen: 24
31.59.130.0/24 maxlen: 24
31.59.184.0/22 maxlen: 24
31.59.228.0/24 maxlen: 24
31.59.229.0/24 maxlen: 24
31.59.231.0/24 maxlen: 24
31.59.244.0/24 maxlen: 24
31.59.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Jan 2025 15:42:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3d:19:a8:68:15:bf:cf:3e:69:58:20:50:19:e7:5e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 6 19:31:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51756c0973099181dd4dfc081b18bd25d528a52a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a4:d9:92:f8:d7:52:26:e0:47:b2:03:07:92:
aa:f9:49:16:f5:b5:f1:9d:37:e6:44:41:b4:5b:61:
bc:24:39:d5:1a:86:83:62:4e:9e:23:59:da:65:ba:
1c:0e:fb:04:20:2b:a9:bd:08:4c:d5:d9:2d:cc:df:
ed:87:47:d9:cf:09:07:1f:2a:fe:39:c3:51:67:38:
93:e0:b0:b1:b1:11:4a:0c:7a:63:ef:6e:82:35:9b:
db:77:99:fa:0b:7c:9c:cf:1c:9f:d0:5d:ab:72:7c:
69:ab:d1:e9:55:3f:70:a3:97:83:a2:68:fd:77:83:
08:6c:79:50:df:39:e1:4f:45:c2:3c:4c:cf:32:9b:
4d:27:54:6f:1b:a6:74:dc:6a:b8:03:98:f7:9c:8e:
f1:6b:32:7d:4c:5b:03:6b:42:3c:ff:ea:76:83:82:
b4:92:9b:09:53:55:c1:bc:ad:00:a8:c8:78:4b:e9:
8d:0f:a5:d2:47:ff:80:8e:d4:4b:b8:44:ec:c3:ac:
ee:16:32:a9:bb:87:49:2a:bd:58:30:34:1a:11:10:
47:c2:18:99:0e:3a:59:c8:cf:07:b7:b1:ca:d8:4e:
c7:91:9c:d5:83:62:80:f0:02:81:05:f3:80:00:15:
86:b1:ed:92:f7:bf:ad:f1:11:c8:4f:ba:b7:44:b9:
c0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:75:6C:09:73:09:91:81:DD:4D:FC:08:1B:18:BD:25:D5:28:A5:2A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UXVsCXMJkYHdTfwIGxi9JdUopSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.74.0/23
31.56.89.0/24
31.56.104.0-31.56.115.255
31.56.118.0-31.56.123.255
31.56.157.0/24
31.56.200.0/22
31.57.132.0/23
31.57.146.0/23
31.57.176.0/21
31.57.189.0/24
31.57.191.0-31.57.195.255
31.57.198.0/24
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.34.0/23
31.58.136.0/24
31.58.142.0/24
31.58.152.0/22
31.58.157.0/24
31.58.163.0/24
31.58.230.0/23
31.59.41.0-31.59.43.255
31.59.56.0-31.59.58.255
31.59.96.0/22
31.59.112.0/22
31.59.130.0/24
31.59.184.0/22
31.59.228.0/23
31.59.231.0/24
31.59.244.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:eb:bc:d7:2b:5f:bd:0c:a0:ae:f0:0e:2d:14:91:1d:7f:ee:
c7:8f:53:49:86:a4:43:3c:67:77:c5:35:e2:f8:17:9a:09:46:
5f:10:11:b4:8f:a3:1a:14:df:7a:b3:ba:8b:62:7b:46:79:49:
a5:a3:d5:ef:bd:8b:d4:2e:89:ae:ab:14:fd:35:9c:49:83:6a:
8a:de:70:b9:97:51:66:16:31:ef:e4:a0:a6:cf:4f:ea:4a:87:
23:38:91:74:9d:77:0f:7d:ae:2c:8a:28:85:e1:dd:29:d9:db:
cd:26:b8:6a:0d:c9:d5:0b:db:bd:a4:1a:36:fa:25:49:98:c0:
a3:c2:18:1d:1d:9d:a7:07:a6:e8:b9:cc:f7:e1:b3:e3:09:0c:
f2:8f:b0:1b:ae:fc:d1:be:91:10:a4:b2:7b:6a:47:a9:60:00:
b2:4f:ae:29:d5:37:af:1c:10:47:af:32:28:11:7e:9f:5b:d5:
ea:e5:28:19:7a:d0:b3:ff:e3:9a:85:61:a2:4b:ec:39:90:a1:
fe:d0:c0:8f:55:16:cf:8e:f1:40:f0:39:04:f2:2b:81:60:fa:
37:92:c6:ff:f5:ec:c0:fa:4d:b5:b7:46:3e:7e:4b:af:87:3e:
d8:1d:ab:7f:9c:4c:cc:d9:07:11:ca:70:df:07:33:51:a5:22:
a7:d4:bb:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:08 2025 by rpki-client