Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VxaofZcMbVMlUc7fmauzND4U4ok.roa
File: VxaofZcMbVMlUc7fmauzND4U4ok.roa (raw, json)
Hash identifier: m3aqLcGpTki4qnHG9XJVZGEPRtnOKPWsVDZ3xge+QWg=
Subject key identifier: 57:16:A8:7D:97:0C:6D:53:25:51:CE:DF:99:AB:B3:34:3E:14:E2:89
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195237805144404EF0FDFE1A9014E08CE61
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VxaofZcMbVMlUc7fmauzND4U4ok.roa
Signing time: Thu 20 Feb 2025 13:07:02 +0000
ROA not before: Thu 20 Feb 2025 13:07:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.85.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.141.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.244.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.56.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.152.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
31.59.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 22 Feb 2025 17:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:23:78:05:14:44:04:ef:0f:df:e1:a9:01:4e:08:ce:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 20 13:07:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5716a87d970c6d532551cedf99abb3343e14e289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:30:62:1e:38:20:6f:9c:02:9b:32:89:17:22:
74:d1:a9:84:2c:70:b3:c4:4b:d5:86:ee:ff:a3:10:
06:b3:f4:5b:4c:2c:e9:9c:32:1e:98:f4:e5:5d:91:
8b:64:55:52:c9:da:85:ee:6e:af:21:01:d4:68:6a:
54:a5:d1:3e:ee:8f:0c:d7:ca:fc:ea:5b:b2:3f:e2:
03:f3:7f:6d:1b:98:df:b4:80:74:de:ba:b1:95:82:
d0:14:96:97:4e:7c:6c:53:cf:af:5b:fe:2e:59:7f:
d9:c9:ac:bc:0a:40:0b:6c:27:e9:46:d7:46:81:0b:
0b:d2:b1:c5:8b:f5:c6:38:21:b7:85:4f:0f:d4:62:
b6:6e:b4:97:f7:56:db:67:05:2b:60:58:87:d0:c6:
2b:0c:c0:31:d9:72:dd:7c:31:c3:cf:ae:dd:24:28:
5c:02:37:e2:a4:61:79:2d:a2:04:67:c8:64:61:66:
8c:31:9e:e3:11:cf:fa:60:de:ac:84:fa:63:40:16:
0f:8b:7c:1e:d9:3d:89:78:6f:ea:92:91:10:b2:c0:
05:b5:35:94:74:6c:c3:08:b1:6a:fe:fb:2f:52:b0:
f6:51:7c:79:6e:14:4b:e2:04:2f:06:62:26:8c:63:
0b:27:fa:ef:ca:a1:f0:6d:aa:70:d5:bb:87:0c:17:
b7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:16:A8:7D:97:0C:6D:53:25:51:CE:DF:99:AB:B3:34:3E:14:E2:89
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VxaofZcMbVMlUc7fmauzND4U4ok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.71.0/24
31.56.85.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.104.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.176.0/21
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.244.0/24
31.57.252.0/22
31.58.34.0/23
31.58.50.0/23
31.58.56.0/23
31.58.64.0/23
31.58.152.0/22
31.59.96.0/22
31.59.112.0/22
31.59.184.0/22
Signature Algorithm: sha256WithRSAEncryption
40:85:72:92:8a:13:ce:87:18:e3:48:be:bd:78:d1:6d:36:da:
a4:78:92:70:23:c7:fe:22:bc:a6:a4:27:6d:4c:de:62:f1:51:
32:ac:a6:8f:2d:d9:3b:e9:56:aa:01:ef:19:cf:b5:2d:81:a3:
73:78:ea:50:5a:23:18:51:4a:5a:1f:67:b7:d9:46:d4:2e:53:
e6:f1:28:ec:9c:3e:2d:9f:d7:dd:1d:10:1c:bc:99:52:14:b3:
f1:4d:e3:9a:8c:05:0b:1c:35:17:4b:6f:7f:5a:a1:78:2a:1c:
c1:b2:18:7f:ef:45:91:41:c6:22:31:6f:f8:23:59:c5:11:13:
3a:01:89:fc:41:e4:56:b4:b2:6d:4b:d2:d4:93:f8:65:46:ad:
a6:b3:65:19:95:a6:a4:9a:db:67:f5:56:e7:4e:29:c1:7d:4d:
58:76:ca:0a:84:07:5d:8f:8c:2a:31:6d:73:7a:fe:14:00:cb:
ba:8b:50:7c:2a:c3:4c:86:cd:49:b3:18:00:19:0c:a3:e1:8b:
1d:63:5f:74:84:d9:9b:fb:01:fa:18:ba:f8:f6:4f:32:36:52:
db:ba:66:ce:b0:92:55:91:95:d8:5d:09:aa:5b:cf:99:f6:95:
a2:d0:a9:61:ad:62:a6:fe:8b:73:14:cd:0f:25:91:01:fb:07:
ea:75:35:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:00:50 2025 by rpki-client