Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/V9XLDHZb9yHYR8w8RW7DvwHQ6Sg.roa
File: V9XLDHZb9yHYR8w8RW7DvwHQ6Sg.roa (raw, json)
Hash identifier: j+Jmh2mcBWfWdQ5yeONv7ggg8iOkp/WtjDo/hgKQ1dk=
Subject key identifier: 57:D5:CB:0C:76:5B:F7:21:D8:47:CC:3C:45:6E:C3:BF:01:D0:E9:28
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01959AA96EEFC47C7F55FB120E6A75D894E1
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/V9XLDHZb9yHYR8w8RW7DvwHQ6Sg.roa
Signing time: Sat 15 Mar 2025 16:35:50 +0000
ROA not before: Sat 15 Mar 2025 16:35:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.77.0/24 maxlen: 24
31.57.103.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.113.0/24 maxlen: 24
31.57.114.0/24 maxlen: 24
31.57.115.0/24 maxlen: 24
31.57.116.0/24 maxlen: 24
31.57.117.0/24 maxlen: 24
31.57.118.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.200.0/24 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.212.0/24 maxlen: 24
31.57.213.0/24 maxlen: 24
31.57.214.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.57.254.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.224.0/22 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.184.0/22 maxlen: 24
31.59.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 16 Mar 2025 19:42:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:9a:a9:6e:ef:c4:7c:7f:55:fb:12:0e:6a:75:d8:94:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 15 16:35:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57d5cb0c765bf721d847cc3c456ec3bf01d0e928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e8:ac:0e:c6:99:38:70:94:9d:db:e1:cc:93:
c4:e9:64:cf:5a:56:64:c2:c4:81:53:e9:2e:6d:78:
ea:dc:ae:8a:82:6d:39:10:26:6b:bf:76:dc:97:b7:
c4:1b:09:b4:09:0e:21:dc:b1:7f:47:dc:87:12:3b:
84:ce:da:e5:b8:d3:4e:d9:47:b9:77:95:b1:c8:af:
40:79:24:01:89:25:03:80:73:5f:20:9a:bd:3e:22:
bc:91:54:39:a8:cc:67:82:73:20:74:d8:8e:c8:d1:
b5:d6:92:03:b2:3a:83:46:48:36:8b:0a:6b:06:b4:
38:13:02:02:23:1c:70:46:c9:78:18:10:58:73:b7:
b4:82:b4:a5:9b:1f:dd:6f:d2:65:27:a7:60:39:61:
05:98:17:ea:f2:e2:c3:cd:81:fd:d1:19:eb:84:14:
60:c1:bb:a3:de:e8:a9:cb:20:53:4f:c0:12:9c:3e:
4e:14:49:78:a4:28:5b:75:af:b0:83:29:38:34:fa:
f0:f8:20:55:e8:c4:25:f2:3e:93:6c:81:01:34:ea:
42:06:d3:35:ba:43:d0:2a:89:e7:95:87:97:28:0b:
be:3f:df:61:b7:2c:a5:ee:ce:f2:b8:4b:2e:da:5d:
3d:a7:40:6e:0c:25:e7:44:13:97:c2:9b:3b:2c:ac:
ba:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D5:CB:0C:76:5B:F7:21:D8:47:CC:3C:45:6E:C3:BF:01:D0:E9:28
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/V9XLDHZb9yHYR8w8RW7DvwHQ6Sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.71.0/24
31.56.89.0-31.56.91.255
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.77.0/24
31.57.103.0-31.57.111.255
31.57.113.0-31.57.118.255
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.176.0/21
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.34.0/23
31.58.50.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.224.0/22
31.59.41.0/24
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.184.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:67:2f:93:82:d0:29:0b:90:14:4d:44:54:fd:10:1b:ca:80:
9f:50:4f:db:d2:a4:7b:bf:88:f3:95:8c:16:ee:24:c2:a9:9b:
83:2e:6b:9d:54:50:dd:ac:0d:fd:06:de:b3:83:47:ac:7f:3c:
01:bc:fb:5a:fd:6b:69:1c:36:0c:f0:77:33:cf:14:7d:fb:9c:
4c:74:c3:d4:57:ad:88:00:9a:7d:40:9b:7b:78:12:5b:8a:40:
32:38:b6:40:85:33:4d:dc:9b:a0:74:c4:fd:e8:a5:a0:1e:d4:
7b:84:23:16:61:70:3d:f5:5a:a8:6f:bc:a3:bc:75:e7:a0:5c:
fd:95:c0:e0:c4:16:25:ba:35:d7:c4:13:5c:13:90:cd:5f:24:
b6:00:09:dd:d8:da:38:93:92:4a:8a:b6:f4:56:30:1f:a6:8b:
57:78:61:42:9c:fc:2c:e6:20:7b:a1:68:c1:06:9d:4c:a7:ea:
7e:1d:2c:86:5b:cd:cb:7b:fb:81:07:d5:a7:34:4c:bf:1c:dc:
6c:96:38:54:63:7e:61:17:8a:0f:5b:7e:7e:b1:47:48:2d:6f:
46:dd:14:60:48:45:26:61:04:01:ed:e0:16:57:56:8b:6d:09:
82:71:ca:b6:76:1a:4b:27:de:d6:85:85:e2:ab:36:11:83:73:
46:ad:6d:f2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 18 09:58:09 2025 by rpki-client