Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YLmi3ZLoD26DeQGTWCdUNhCZHJQ.roa
File: YLmi3ZLoD26DeQGTWCdUNhCZHJQ.roa (raw, json)
Hash identifier: sVTqRh590lzlftV92KiKSandQgPyPkPEJvevQXOJxCQ=
Subject key identifier: 60:B9:A2:DD:92:E8:0F:6E:83:79:01:93:58:27:54:36:10:99:1C:94
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194644F63C1B1E6D28A7A0540F341A31278
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YLmi3ZLoD26DeQGTWCdUNhCZHJQ.roa
Signing time: Tue 14 Jan 2025 10:15:11 +0000
ROA not before: Tue 14 Jan 2025 10:15:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.74.0/24 maxlen: 24
31.56.75.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.114.0/24 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.157.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.133.0/24 maxlen: 24
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.142.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.163.0/24 maxlen: 24
31.58.230.0/23 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.42.0/24 maxlen: 24
31.59.43.0/24 maxlen: 24
31.59.56.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.97.0/24 maxlen: 24
31.59.108.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.112.0/24 maxlen: 24
31.59.113.0/24 maxlen: 24
31.59.130.0/24 maxlen: 24
31.59.184.0/22 maxlen: 24
31.59.228.0/24 maxlen: 24
31.59.229.0/24 maxlen: 24
31.59.231.0/24 maxlen: 24
31.59.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 Jan 2025 11:27:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:64:4f:63:c1:b1:e6:d2:8a:7a:05:40:f3:41:a3:12:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 14 10:15:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60b9a2dd92e80f6e837901935827543610991c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9d:30:c1:85:2f:55:37:52:1c:6f:fe:a5:d3:
41:6a:9e:18:ae:b3:03:65:74:cc:71:34:0c:78:71:
0a:0e:d1:7b:80:b3:42:d8:1a:d1:37:4e:15:89:80:
86:d5:a0:55:34:ff:6f:42:a8:02:7b:07:a4:8e:f0:
2c:73:f2:cd:f0:39:09:78:e0:48:54:1d:06:85:8d:
33:b3:e3:7a:79:99:08:a5:c1:e9:83:e6:5b:97:e9:
d9:5b:31:09:38:10:70:4a:c3:eb:8f:64:27:38:30:
70:86:cd:41:8c:70:09:d3:20:4c:c5:a5:58:b1:03:
a2:61:4c:9d:4a:26:20:87:e8:23:16:51:97:ec:ad:
03:d5:05:0c:61:c8:5b:f0:78:9d:5b:f3:40:66:ea:
1b:9e:a5:af:52:7b:9f:ca:65:9d:20:ab:17:98:7f:
b9:e4:cc:34:11:6d:f5:2c:c3:e6:5e:d4:6c:b1:4d:
6e:e5:01:df:b0:80:28:9d:04:34:94:11:dd:23:56:
4d:cd:cc:d4:db:68:f1:3f:e6:a8:22:9d:04:8f:fc:
77:b3:e1:d8:a8:df:83:25:b3:ca:f5:36:ce:51:a3:
1c:0b:bf:93:9e:aa:ba:d1:39:c4:ff:5e:06:46:01:
4d:ab:3a:69:b8:c8:5b:df:da:76:3f:fb:33:72:5f:
6f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B9:A2:DD:92:E8:0F:6E:83:79:01:93:58:27:54:36:10:99:1C:94
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YLmi3ZLoD26DeQGTWCdUNhCZHJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.74.0/23
31.56.89.0/24
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.157.0/24
31.56.200.0/22
31.57.104.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.176.0/21
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.34.0/23
31.58.142.0/24
31.58.152.0/22
31.58.163.0/24
31.58.230.0/23
31.59.41.0-31.59.43.255
31.59.56.0/23
31.59.96.0/22
31.59.108.0/24
31.59.112.0/22
31.59.130.0/24
31.59.184.0/22
31.59.228.0/23
31.59.231.0/24
31.59.245.0/24
Signature Algorithm: sha256WithRSAEncryption
31:ed:ad:e6:a8:84:54:fd:88:c3:af:c5:30:0a:98:fe:13:5a:
cd:b2:dc:6d:ab:a1:83:75:a9:86:94:1b:27:80:d6:97:2d:9c:
9d:fb:74:bc:86:28:ea:1e:92:e9:ce:39:91:39:88:ea:f3:e5:
29:34:75:5d:04:8b:64:f9:62:aa:d3:a5:34:d0:ad:a2:1b:fd:
47:c8:2e:54:a8:51:d2:4d:a6:5f:61:71:25:34:c0:a0:c4:ca:
fc:7f:8c:54:6a:23:9a:22:0c:e8:9d:ba:30:5d:81:e2:45:01:
ab:3d:3e:00:b5:18:25:58:91:05:80:bc:c7:70:f5:ee:a2:7d:
eb:50:d8:60:62:61:6b:03:6e:71:59:69:7b:69:4d:01:7a:76:
69:63:68:c5:bb:85:0a:91:ac:9c:da:a1:9b:ab:02:52:ac:e4:
e2:3e:44:dc:a5:74:11:9b:f4:55:d2:81:99:91:f9:4a:20:c3:
01:25:a7:e0:a6:9e:89:7f:3d:84:fe:09:9b:dc:4e:33:ee:79:
8b:4c:49:0e:ec:8c:e9:55:89:50:2e:88:91:d0:16:42:e2:30:
da:76:92:7d:8d:58:5f:e2:13:4f:5c:31:76:e9:44:3a:b1:b7:
d5:29:8b:a4:ed:13:18:33:9c:70:17:f9:2c:f9:4c:68:4b:ea:
5b:96:c8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:15 2025 by rpki-client