Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Vyz5UCejxli-pudHn7RssjgRpUA.roa
File: Vyz5UCejxli-pudHn7RssjgRpUA.roa (raw, json)
Hash identifier: pWwHjOCGaRDTqG6NsHfSJawId8azMFHA53WENhRY7k4=
Subject key identifier: 57:2C:F9:50:27:A3:C6:58:BE:A6:E7:47:9F:B4:6C:B2:38:11:A5:40
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193D52613EDB096F8DC62BD697A7AAB66C0
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Vyz5UCejxli-pudHn7RssjgRpUA.roa
Signing time: Tue 17 Dec 2024 15:04:22 +0000
ROA not before: Tue 17 Dec 2024 15:04:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.73.0/24 maxlen: 24
31.56.74.0/24 maxlen: 24
31.56.75.0/24 maxlen: 24
31.56.85.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.156.0/24 maxlen: 24
31.57.44.0/23 maxlen: 24
31.57.65.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.145.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.178.0/24 maxlen: 24
31.57.179.0/24 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.182.0/24 maxlen: 24
31.57.183.0/24 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.204.0/24 maxlen: 24
31.57.207.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.130.0/24 maxlen: 24
31.58.131.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.167.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Dec 2024 07:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d5:26:13:ed:b0:96:f8:dc:62:bd:69:7a:7a:ab:66:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 17 15:04:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=572cf95027a3c658bea6e7479fb46cb23811a540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ff:2d:14:cb:9b:81:f5:ff:fb:7a:51:19:42:
be:a7:fe:85:90:0b:0b:13:15:dc:d5:1c:2c:ac:fa:
a8:cb:74:85:03:42:22:e2:61:71:a5:d8:51:aa:69:
0c:62:20:9a:fd:7c:54:7b:59:0d:16:d1:50:5e:88:
66:95:fe:39:de:23:ae:3f:1b:77:00:9e:15:51:e5:
af:4e:f7:9c:99:de:7b:5b:8b:e5:6a:48:59:ff:a4:
45:19:b6:1b:34:15:4e:b2:05:6d:33:78:44:b3:b8:
53:ce:a3:e4:8d:81:19:e0:06:a8:f4:cb:bf:60:37:
2d:7e:dc:2c:dd:48:d1:5e:a9:0a:c5:8f:aa:5e:69:
e9:89:ee:66:45:d1:cc:d2:87:23:7b:81:62:08:39:
93:d6:ec:c9:92:c0:3e:0b:db:00:2c:f7:d9:37:cd:
63:ae:4a:b9:06:47:83:87:e7:a1:a7:06:a5:2a:dd:
37:80:6d:9e:a9:fe:5c:c9:1a:de:2a:72:3a:6b:b4:
59:6c:ac:3d:54:27:43:bd:07:b5:b7:c3:72:99:70:
ed:aa:c6:61:bf:1f:34:e6:85:c1:e6:06:a1:83:23:
68:dd:1e:5f:44:b7:d9:a7:9d:5c:56:c8:ba:2d:5e:
bf:82:7f:4b:d1:ef:06:b4:a7:c3:ac:1e:f4:37:52:
b4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:2C:F9:50:27:A3:C6:58:BE:A6:E7:47:9F:B4:6C:B2:38:11:A5:40
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Vyz5UCejxli-pudHn7RssjgRpUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.71.0/24
31.56.73.0-31.56.75.255
31.56.85.0/24
31.56.89.0/24
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.156.0/24
31.57.44.0/23
31.57.65.0/24
31.57.132.0/23
31.57.145.0-31.57.147.255
31.57.176.0/21
31.57.188.0/24
31.57.192.0/22
31.57.200.0/23
31.57.204.0/24
31.57.207.0/24
31.57.232.0/22
31.58.34.0/23
31.58.130.0/23
31.58.152.0/22
31.58.167.0/24
31.59.96.0/22
31.59.112.0/22
31.59.184.0/22
Signature Algorithm: sha256WithRSAEncryption
08:f6:2d:b6:45:cc:ee:56:c5:7a:93:05:62:72:b7:a1:4f:0f:
8a:2d:96:35:1e:ce:33:27:27:55:db:05:2e:f8:6d:fc:d7:75:
09:83:b6:2b:c5:a2:e8:2d:f9:a8:89:4a:49:e9:7a:a4:67:e9:
6f:aa:31:19:fc:7d:67:1f:37:e2:ba:76:1c:c6:85:17:38:ff:
e3:fd:b3:71:e7:6e:41:17:b7:37:93:d7:3f:36:b4:3b:4d:f3:
1f:80:0b:83:55:09:42:0c:71:ed:97:df:b0:b7:32:5a:84:d5:
c0:0f:4d:31:c5:97:ab:27:21:13:64:1e:45:74:f2:30:f1:65:
33:a2:2d:b3:b9:44:1f:12:b9:fd:92:2b:61:68:8a:95:e2:b8:
e6:b5:8b:af:d1:8d:ed:33:a0:18:ea:7d:1b:6f:06:cf:65:df:
7d:ff:15:10:40:05:47:fb:a2:4b:ba:ae:f8:0b:74:0f:b8:9e:
c4:6a:9b:fd:35:6f:60:61:1c:08:40:fe:72:f0:01:69:a4:98:
6c:4c:89:0a:3e:55:ea:de:a4:39:f7:03:88:16:39:d4:3d:bc:
9a:f5:62:8c:4c:21:24:a3:6b:80:71:20:07:2b:d6:de:b4:f0:
35:bc:25:2f:c5:20:d0:99:90:8e:ad:e5:a5:e4:d1:a9:57:e5:
eb:51:d4:8c
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgISAZPVJhPtsJb43GK9aXp6q2bAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMjE3MTUwNDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzJjZjk1MDI3YTNjNjU4YmVhNmU3NDc5ZmI0NmNiMjM4MTFhNTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqf8tFMubgfX/+3pRGUK+p/6FkAsL
ExXc1RwsrPqoy3SFA0Ii4mFxpdhRqmkMYiCa/XxUe1kNFtFQXohmlf453iOuPxt3
AJ4VUeWvTvecmd57W4vlakhZ/6RFGbYbNBVOsgVtM3hEs7hTzqPkjYEZ4Aao9Mu/
YDctftws3UjRXqkKxY+qXmnpie5mRdHM0ocje4FiCDmT1uzJksA+C9sALPfZN81j
rkq5BkeDh+ehpwalKt03gG2eqf5cyRreKnI6a7RZbKw9VCdDvQe1t8NymXDtqsZh
vx805oXB5gahgyNo3R5fRLfZp51cVsi6LV6/gn9L0e8GtKfDrB70N1K0tQIDAQAB
o4IC1DCCAtAwHQYDVR0OBBYEFFcs+VAno8ZYvqbnR5+0bLI4EaVAMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvVnl6NVVDZWp4bGktcHVkSG43UnNzamdScFVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHpBggrBgEFBQcBBwEB/wSB2TCB1jCB0wQCAAEwgcwDBAEf
OAQDBAAfOBgDBAEfOCoDBAAfODkDBAAfOEcwDAMEAB84SQMEAh84SAMEAB84VQME
AB84WQMEAx84aAMEAR84cjAMAwQBHzh2AwQCHzh4AwQAHzicAwQBHzksAwQAHzlB
AwQBHzmEMAwDBAAfOZEDBAIfOZADBAMfObADBAAfObwDBAIfOcADBAEfOcgDBAAf
OcwDBAAfOc8DBAIfOegDBAEfOiIDBAEfOoIDBAIfOpgDBAAfOqcDBAIfO2ADBAIf
O3ADBAIfO7gwDQYJKoZIhvcNAQELBQADggEBAAj2LbZFzO5WxXqTBWJyt6FPD4ot
ljUezjMnJ1XbBS74bfzXdQmDtivFougt+aiJSknpeqRn6W+qMRn8fWcfN+K6dhzG
hRc4/+P9s3HnbkEXtzeT1z82tDtN8x+AC4NVCUIMce2X37C3MlqE1cAPTTHFl6sn
IRNkHkV08jDxZTOiLbO5RB8Suf2SK2FoipXiuOa1i6/Rje0zoBjqfRtvBs9l333/
FRBABUf7oku6rvgLdA+4nsRqm/01b2BhHAhA/nLwAWmkmGxMiQo+VerepDn3A4gW
OdQ9vJr1YoxMISSja4BxIAcr1t608DW8JS/FINCZkI6t5aXk0alX5etR1Iw=
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:05 2025 by rpki-client