Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WlDg5BbD7TE3fjoJVqi-Gu3StSw.roa
File: WlDg5BbD7TE3fjoJVqi-Gu3StSw.roa (raw, json)
Hash identifier: GBAfdBAbRTJbaxkOSvUUPp5d/aOnvx0kAMi0G+QJf9c=
Subject key identifier: 5A:50:E0:E4:16:C3:ED:31:37:7E:3A:09:56:A8:BE:1A:ED:D2:B5:2C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019557DBD7F9C9F283E4B459226255334A3F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WlDg5BbD7TE3fjoJVqi-Gu3StSw.roa
Signing time: Sun 02 Mar 2025 17:16:20 +0000
ROA not before: Sun 02 Mar 2025 17:16:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.85.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.156.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.92.0/22 maxlen: 24
31.57.96.0/22 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.196.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.76.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.91.0/24 maxlen: 24
31.58.100.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.160.0/24 maxlen: 24
31.58.224.0/22 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
31.59.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Mar 2025 18:04:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:57:db:d7:f9:c9:f2:83:e4:b4:59:22:62:55:33:4a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 2 17:16:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a50e0e416c3ed31377e3a0956a8be1aedd2b52c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e4:ba:21:42:3c:de:7b:54:c2:de:27:7a:2f:
de:cc:e0:3e:b0:87:94:5c:b5:de:4c:75:58:ce:46:
c2:65:b1:40:32:7f:95:1d:7c:c7:b6:70:80:c0:4e:
2f:8c:5b:a5:3f:06:bd:8d:ed:80:79:e5:c4:2c:d1:
e1:40:2c:01:48:9e:01:ab:82:8f:1c:e9:d1:0e:ef:
b8:7b:a8:71:2f:78:db:20:6c:e4:44:99:30:ad:37:
91:4b:b9:4d:06:ca:56:89:92:cb:ab:cb:84:70:25:
e5:94:82:0d:73:21:36:fe:01:22:c4:12:45:96:cc:
3e:20:b4:ad:1b:85:70:fd:af:5c:9e:35:85:ab:b4:
31:61:59:32:7c:bb:e1:ef:3f:95:59:f5:1e:e7:f0:
69:b4:ed:f1:21:a0:4a:34:e6:1e:9b:b1:ad:ef:fe:
f3:c2:37:9b:8a:d7:b1:37:4c:55:0a:4d:11:33:3c:
4d:65:cb:65:32:3f:80:a7:7d:75:f6:c1:df:4e:6c:
60:21:f7:a1:0e:25:eb:b6:ae:1e:ad:60:8a:03:c6:
16:15:ea:48:38:0a:8b:e9:0f:3f:fd:55:ba:ba:64:
23:08:9d:97:0c:96:d4:38:aa:20:86:41:f7:51:8e:
0b:50:b7:19:51:aa:99:87:35:5d:e7:89:9d:35:b4:
73:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:50:E0:E4:16:C3:ED:31:37:7E:3A:09:56:A8:BE:1A:ED:D2:B5:2C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WlDg5BbD7TE3fjoJVqi-Gu3StSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.71.0/24
31.56.85.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.156.0/24
31.56.200.0/22
31.57.92.0-31.57.99.255
31.57.104.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.176.0/21
31.57.192.0-31.57.196.255
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.34.0/23
31.58.50.0/23
31.58.68.0/22
31.58.76.0/22
31.58.84.0/22
31.58.91.0/24
31.58.100.0/22
31.58.152.0/22
31.58.160.0/24
31.58.224.0/22
31.59.41.0/24
31.59.96.0/22
31.59.112.0/22
31.59.184.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:86:c9:fc:a0:aa:0d:d4:04:6c:48:c4:ef:9b:24:0e:16:60:
5c:2c:cf:79:e1:ba:33:c5:e0:34:0b:01:89:d0:cc:21:01:16:
8d:09:fd:c8:af:dc:3c:02:ef:59:2a:b1:39:00:39:c7:d7:cd:
ae:af:61:53:d2:4a:f2:ed:e2:e4:d1:7f:77:b6:45:fd:1e:8d:
c0:3f:5c:3a:d7:74:16:4c:9a:a8:64:93:0a:c8:bc:83:fb:7f:
3a:bd:38:41:63:b8:18:99:7a:00:0c:11:ab:c6:3f:d3:b1:59:
6c:4e:0b:d6:94:a8:a6:32:13:e9:b8:13:3e:b5:7a:8f:94:68:
5f:db:76:88:90:42:21:10:20:36:e0:0b:ac:ed:f8:67:4b:10:
df:22:3e:47:29:92:cc:2b:99:a3:b0:82:67:53:24:45:4a:73:
5e:ad:8b:21:31:49:ae:73:26:ba:c5:57:d6:ec:1e:1b:7c:97:
39:77:d0:95:53:29:84:ba:a3:33:72:70:ef:c5:90:ec:d6:a2:
c5:df:ba:58:e8:9c:95:dc:04:d6:3d:3f:50:0b:01:d3:c8:9b:
ec:46:ec:27:8c:77:37:81:56:55:1d:ab:0f:b3:8a:b4:fe:48:
ec:ef:70:0c:83:7c:21:82:b4:16:aa:5e:7c:e6:60:46:69:49:
37:45:91:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:03:28 2025 by rpki-client