Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YsFYAxvSWs1fB7sZE8PRgSOSg_o.roa
File: YsFYAxvSWs1fB7sZE8PRgSOSg_o.roa (raw, json)
Hash identifier: LS1RlTd5XX0Ch652xChOUxk919O28LHplajeGeevivM=
Subject key identifier: 62:C1:58:03:1B:D2:5A:CD:5F:07:BB:19:13:C3:D1:81:23:92:83:FA
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194192985DB62B2A0C88E1DA5E51CE13E4A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YsFYAxvSWs1fB7sZE8PRgSOSg_o.roa
Signing time: Mon 30 Dec 2024 20:02:19 +0000
ROA not before: Mon 30 Dec 2024 20:02:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.16.0/22 maxlen: 22
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.74.0/24 maxlen: 24
31.56.75.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.16.0/22 maxlen: 24
31.57.20.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.146.0/23 maxlen: 24
31.57.147.0/24 maxlen: 24
31.57.151.0/24 maxlen: 24
31.57.152.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.178.0/24 maxlen: 24
31.57.179.0/24 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.182.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.210.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.176.0/22 maxlen: 24
31.58.200.0/22 maxlen: 24
31.58.216.0/22 maxlen: 24
31.58.240.0/22 maxlen: 24
31.58.252.0/22 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.42.0/24 maxlen: 24
31.59.43.0/24 maxlen: 24
31.59.56.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.58.0/24 maxlen: 24
31.59.64.0/22 maxlen: 24
31.59.80.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.124.0/22 maxlen: 24
31.59.130.0/24 maxlen: 24
31.59.176.0/22 maxlen: 22
31.59.180.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
31.59.188.0/22 maxlen: 22
31.59.192.0/22 maxlen: 22
31.59.216.0/22 maxlen: 24
31.59.228.0/24 maxlen: 24
31.59.229.0/24 maxlen: 24
31.59.231.0/24 maxlen: 24
31.59.244.0/24 maxlen: 24
31.59.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 31 Dec 2024 09:47:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:19:29:85:db:62:b2:a0:c8:8e:1d:a5:e5:1c:e1:3e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 30 20:02:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=62c158031bd25acd5f07bb1913c3d181239283fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0e:4a:dd:65:59:43:d0:99:38:49:de:3d:d4:
b7:54:4c:e8:58:dc:aa:cc:85:54:2a:47:db:e1:8d:
69:41:40:5f:da:6a:94:8f:9b:c3:51:84:37:04:9f:
f8:fb:96:b7:4d:bf:bf:42:54:45:b5:92:ea:8e:7a:
9d:2c:50:28:06:56:c6:c5:b5:6e:ca:4d:18:cf:cb:
02:40:8a:83:00:ef:eb:d2:81:c1:3c:fb:42:a1:bc:
8b:91:29:8d:d7:c8:d1:75:0f:a4:e9:bc:9f:36:50:
0d:e7:18:c3:ea:0c:99:08:18:0d:bf:a4:a8:1f:68:
3a:b7:38:33:a2:db:fb:0d:f1:ab:89:10:13:d5:79:
ca:c8:c3:4f:ec:f8:a1:5b:bf:3e:47:f8:1f:07:1f:
68:99:b2:fd:ac:42:a4:e5:7e:6d:41:91:f6:96:06:
f6:9d:68:e1:43:91:ef:28:b3:c2:3d:4d:90:8e:60:
89:88:7d:db:a8:9c:4e:ac:ff:a1:d9:72:7f:12:fd:
66:63:53:37:a0:9e:9d:7d:48:b8:3e:ad:f7:96:5f:
72:7b:b5:16:02:73:0b:5c:f6:58:31:24:2a:19:9f:
92:e1:86:0e:58:59:e9:11:38:76:a9:4f:3d:70:e9:
f1:94:55:ce:4d:58:4b:06:1d:9a:94:23:a2:d1:04:
3e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C1:58:03:1B:D2:5A:CD:5F:07:BB:19:13:C3:D1:81:23:92:83:FA
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YsFYAxvSWs1fB7sZE8PRgSOSg_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.16.0/22
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.71.0/24
31.56.74.0/23
31.56.89.0/24
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.16.0/21
31.57.132.0/23
31.57.146.0/23
31.57.151.0-31.57.152.255
31.57.176.0/21
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.34.0/23
31.58.152.0/22
31.58.176.0/22
31.58.200.0/22
31.58.216.0/22
31.58.240.0/22
31.58.252.0/22
31.59.41.0-31.59.43.255
31.59.56.0-31.59.58.255
31.59.64.0/22
31.59.80.0/22
31.59.96.0/22
31.59.112.0/22
31.59.124.0/22
31.59.130.0/24
31.59.176.0-31.59.195.255
31.59.216.0/22
31.59.228.0/23
31.59.231.0/24
31.59.244.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:8b:f0:d0:04:6b:a8:f0:3b:63:c2:7a:36:5e:52:a7:81:00:
46:7e:ba:4c:cb:22:88:ba:0f:f2:cf:e8:74:b9:20:cf:07:60:
f7:bf:18:80:ab:94:43:28:f5:07:d4:a1:04:bd:b8:b9:81:e3:
4b:9f:ef:9c:f6:71:c5:14:ef:c5:6d:f1:b8:80:50:ae:7d:80:
25:24:c1:c8:fc:ad:73:96:12:ed:81:a5:05:06:92:d0:84:fe:
ec:24:75:10:ec:52:74:b5:66:c8:ba:15:ee:87:89:4e:16:f0:
db:1a:26:18:98:8e:18:09:80:a7:df:1b:9b:86:80:46:16:dc:
c6:26:cd:d4:6d:ba:70:5a:a4:08:31:04:65:78:dc:c5:88:d6:
e2:56:f4:1c:3a:dc:16:2a:55:d3:ee:c8:af:33:65:c6:10:65:
a2:93:85:0a:e3:a3:73:79:51:f5:4f:ef:0a:c8:2e:0b:39:06:
e8:2b:6a:02:11:6d:e3:c2:b1:fe:55:25:3b:7e:36:31:22:9e:
2b:03:d0:9a:7a:9b:de:f8:b9:69:8e:c0:43:6a:9f:7b:0c:b4:
f8:e5:5c:92:37:0d:93:60:11:ca:60:62:84:49:fd:16:0f:79:
d4:2a:7a:48:c7:62:61:9a:bf:6d:75:13:4a:36:c5:d5:b8:d8:
39:6a:d4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:13 2025 by rpki-client