Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Z-5LwPDWPzEgKWcin9kORsxjsgU.roa
File: Z-5LwPDWPzEgKWcin9kORsxjsgU.roa (raw, json)
Hash identifier: oyDPxZJqprQtRYztcAgfir1mP13x4hkuBOBKoWnQB0A=
Subject key identifier: 67:EE:4B:C0:F0:D6:3F:31:20:29:67:22:9F:D9:0E:46:CC:63:B2:05
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01943BF052E39DFC5D6246D03D14BE2E6C3B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Z-5LwPDWPzEgKWcin9kORsxjsgU.roa
Signing time: Mon 06 Jan 2025 14:06:32 +0000
ROA not before: Mon 06 Jan 2025 14:06:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.74.0/24 maxlen: 24
31.56.75.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.112.0/24 maxlen: 24
31.56.113.0/24 maxlen: 24
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.157.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.146.0/23 maxlen: 24
31.57.147.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.178.0/24 maxlen: 24
31.57.189.0/24 maxlen: 24
31.57.191.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.198.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.136.0/24 maxlen: 24
31.58.142.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.157.0/24 maxlen: 24
31.58.163.0/24 maxlen: 24
31.58.230.0/23 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.42.0/24 maxlen: 24
31.59.43.0/24 maxlen: 24
31.59.56.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.58.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.97.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.112.0/24 maxlen: 24
31.59.113.0/24 maxlen: 24
31.59.130.0/24 maxlen: 24
31.59.184.0/22 maxlen: 24
31.59.228.0/24 maxlen: 24
31.59.229.0/24 maxlen: 24
31.59.231.0/24 maxlen: 24
31.59.244.0/24 maxlen: 24
31.59.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Jan 2025 19:31:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3b:f0:52:e3:9d:fc:5d:62:46:d0:3d:14:be:2e:6c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 6 14:06:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67ee4bc0f0d63f31202967229fd90e46cc63b205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:33:24:4b:d0:65:90:99:2d:19:cf:28:7b:80:
69:44:8b:2e:50:19:3d:00:43:54:55:2e:7c:d8:cb:
7f:02:a8:83:4c:6d:6e:8c:2c:88:56:36:8d:5d:aa:
c5:fe:33:32:3e:87:13:5c:5e:7d:0f:77:9a:af:2f:
cd:4e:b0:26:79:70:2d:40:48:62:c3:0d:ca:49:e8:
65:25:30:6e:72:3f:f9:15:bf:1e:ad:21:4c:f2:fb:
b6:87:52:e4:d3:6d:42:c3:db:ce:96:f7:d2:95:51:
07:29:67:7f:7a:19:67:7a:03:1d:46:9b:46:77:c5:
90:70:4f:7d:95:16:eb:cf:d8:b6:59:ad:5c:8c:b9:
4b:92:5b:e1:25:b2:97:4d:7c:5e:65:85:c5:89:e5:
e8:05:96:ba:71:bb:85:e1:98:ed:65:70:86:8f:da:
ae:20:3a:49:80:70:ca:db:9a:08:80:26:38:cf:de:
4a:87:b7:49:d1:c8:7d:47:d7:44:18:3b:81:94:10:
76:34:d2:63:ca:ff:79:5d:81:31:43:55:ce:99:ad:
00:8f:f1:9d:ce:ed:02:a1:77:c1:78:06:43:a7:26:
82:bb:0f:e9:f3:5b:6e:45:34:22:90:21:ad:1b:7d:
07:03:68:b6:41:03:22:1b:04:9a:93:6b:f7:7f:09:
be:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:EE:4B:C0:F0:D6:3F:31:20:29:67:22:9F:D9:0E:46:CC:63:B2:05
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Z-5LwPDWPzEgKWcin9kORsxjsgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.74.0/23
31.56.89.0/24
31.56.104.0-31.56.115.255
31.56.118.0-31.56.123.255
31.56.157.0/24
31.56.200.0/22
31.57.132.0/23
31.57.146.0/23
31.57.176.0/21
31.57.189.0/24
31.57.191.0-31.57.195.255
31.57.198.0/24
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.34.0/23
31.58.136.0/24
31.58.142.0/24
31.58.152.0/22
31.58.157.0/24
31.58.163.0/24
31.58.230.0/23
31.59.41.0-31.59.43.255
31.59.56.0-31.59.58.255
31.59.96.0/22
31.59.112.0/22
31.59.130.0/24
31.59.184.0/22
31.59.228.0/23
31.59.231.0/24
31.59.244.0/23
Signature Algorithm: sha256WithRSAEncryption
11:fa:7f:58:9d:03:0d:5a:bf:ac:ea:44:97:7c:71:30:57:a0:
36:7f:91:9a:d7:62:2a:fd:64:cd:0a:20:20:12:a1:64:8f:d7:
99:cf:c6:0c:43:0a:d8:bf:f2:a9:0c:5f:cb:db:03:05:ea:02:
d4:b7:ba:cf:e4:ea:94:5f:60:3e:8b:18:be:c0:3f:af:09:c1:
c2:6e:3c:10:68:e1:a9:ae:a4:8f:af:f4:32:59:e9:32:b1:65:
4a:e3:f9:53:6e:40:75:e8:13:c4:13:a9:4a:aa:58:bd:84:5b:
15:d6:44:50:f5:6d:c1:2a:b2:ec:cf:ab:56:1a:b0:be:db:e0:
69:f7:98:e3:8b:99:23:58:b0:ce:84:3b:9e:73:98:31:0f:fe:
21:10:42:da:80:59:ba:75:6b:8c:67:1b:89:14:9a:dd:8b:24:
ff:38:00:55:1a:b3:b7:9a:49:5c:06:fc:26:a8:ad:bd:ee:55:
cc:a9:7e:ca:cc:dd:69:9f:0a:9a:0e:b8:41:0d:00:c9:c5:66:
5e:d3:59:3d:ae:07:e7:aa:63:27:5f:9d:67:b3:47:4b:a7:c5:
22:39:d1:e5:2f:cb:95:81:cb:b9:48:06:cb:e2:4e:93:2c:a9:
d3:8e:ab:88:d3:1f:18:15:9e:e2:c0:5d:83:02:3b:3a:62:0a:
36:5b:fc:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:48:39 2025 by rpki-client