Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XHx8dEEyMfo1-yJi5Hgt1a3eAx4.roa
File: XHx8dEEyMfo1-yJi5Hgt1a3eAx4.roa (raw, json)
Hash identifier: 2P+m//gENVejaXmmCk3DFDdFUc4vG0jJANutTjNcn/A=
Subject key identifier: 5C:7C:7C:74:41:32:31:FA:35:FB:22:62:E4:78:2D:D5:AD:DE:03:1E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195803128A93373F49DBBEA91B6F6503AAE
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XHx8dEEyMfo1-yJi5Hgt1a3eAx4.roa
Signing time: Mon 10 Mar 2025 13:14:20 +0000
ROA not before: Mon 10 Mar 2025 13:14:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.85.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.92.0/22 maxlen: 24
31.57.96.0/22 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.200.0/24 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.208.0/24 maxlen: 24
31.57.209.0/24 maxlen: 24
31.57.210.0/24 maxlen: 24
31.57.211.0/24 maxlen: 24
31.57.212.0/24 maxlen: 24
31.57.213.0/24 maxlen: 24
31.57.214.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.57.254.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.76.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.91.0/24 maxlen: 24
31.58.100.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.224.0/22 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.184.0/22 maxlen: 24
31.59.186.0/24 maxlen: 24
31.59.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Mar 2025 19:39:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:80:31:28:a9:33:73:f4:9d:bb:ea:91:b6:f6:50:3a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 10 13:14:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c7c7c74413231fa35fb2262e4782dd5adde031e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2d:ae:ec:d7:3f:86:d7:41:1b:f6:33:a3:92:
4b:36:bc:ad:f6:f4:22:e4:ae:9b:55:ac:4e:9e:6d:
6d:89:86:2e:da:97:50:ce:93:6b:cb:11:a7:13:12:
3f:f4:71:2f:d9:b5:07:8b:7a:6c:95:bd:ba:57:2d:
fb:f9:8d:10:63:61:35:22:db:f4:f9:d0:5e:06:82:
13:bd:67:26:59:83:ea:e4:d3:34:85:0c:8c:f4:f7:
64:65:09:ba:dc:1e:cb:e8:70:26:50:67:c2:a9:11:
7f:e9:21:37:3f:e5:8f:52:ea:8d:78:a7:61:c0:ba:
20:c0:cf:28:74:58:04:73:49:4c:90:9a:48:43:9c:
8e:2f:77:1e:a2:8c:71:34:88:45:99:54:6b:3d:a4:
27:e2:15:c4:b9:14:56:f6:17:dd:76:46:f4:f4:28:
37:ee:72:27:a2:b5:5b:a1:71:65:a4:1b:66:cb:ae:
e7:da:48:bd:83:86:9b:9d:3d:ca:2d:eb:17:b9:8e:
9f:55:71:3d:be:4b:02:9f:a2:0d:28:d3:0e:d6:2a:
39:be:76:9c:c1:fd:ee:10:2d:0f:a4:d5:16:d5:20:
4e:82:0f:6a:5f:7a:6f:32:22:4b:44:c1:a3:18:15:
e6:ae:8f:2c:42:b0:ed:12:b6:43:b3:13:61:07:fa:
45:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:7C:7C:74:41:32:31:FA:35:FB:22:62:E4:78:2D:D5:AD:DE:03:1E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XHx8dEEyMfo1-yJi5Hgt1a3eAx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.71.0/24
31.56.85.0/24
31.56.89.0-31.56.91.255
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.92.0-31.57.99.255
31.57.104.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.176.0/21
31.57.188.0/24
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.34.0/23
31.58.50.0/23
31.58.68.0/22
31.58.76.0/22
31.58.84.0/22
31.58.91.0/24
31.58.100.0/22
31.58.152.0/22
31.58.224.0/22
31.59.41.0/24
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.184.0/22
31.59.230.0/24
Signature Algorithm: sha256WithRSAEncryption
56:3e:ab:e2:cf:03:38:67:b7:3f:f8:18:74:44:62:f4:eb:26:
79:39:25:55:91:1c:66:af:c4:cb:1f:5d:68:73:ef:a3:07:c8:
8f:4f:7f:0f:85:f6:7d:5b:63:6f:5c:8f:e5:ba:01:08:2d:8d:
9c:1d:5c:3b:20:f2:24:17:c8:50:03:d3:16:ce:ca:bc:1d:8c:
f7:3d:f2:c2:37:f3:24:dc:2b:4d:91:e9:e6:fc:41:62:4c:a2:
fe:6e:40:ae:9f:05:2f:f9:33:2a:07:3a:1c:07:9a:ec:40:3d:
0b:0b:6a:f4:3e:72:56:94:3e:80:43:3d:b5:a3:9f:94:df:89:
eb:39:ec:c2:56:41:51:25:e2:54:4b:97:a9:40:7f:ce:b1:a6:
76:a9:04:a7:37:96:7a:bc:28:c1:ef:cd:d3:cb:ca:c0:4c:02:
6c:90:a3:26:c3:8f:36:35:12:d2:7e:0b:51:7d:82:6b:dd:93:
5f:32:b2:1c:42:37:80:8f:3d:93:6c:3a:5a:42:5e:21:ac:82:
1a:6a:1b:4e:4e:f3:d7:16:f7:06:17:4d:e1:2e:fb:00:f4:97:
0e:0e:ce:25:ee:b1:3d:71:3f:20:ec:c2:47:0d:6e:5b:2a:e4:
5b:4f:86:4b:a9:28:fd:9b:22:1e:3e:eb:de:90:8e:09:97:18:
9e:f8:c8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:49:26 2025 by rpki-client