Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_fh66eO1CB9xbqN36HxBL6QIiY4.roa
File: _fh66eO1CB9xbqN36HxBL6QIiY4.roa (raw, json)
Hash identifier: 7b6IwwdZ5QSPPtsIcxkZkciGD9IwyjIWGFrAUOdcKuI=
Subject key identifier: FD:F8:7A:E9:E3:B5:08:1F:71:6E:A3:77:E8:7C:41:2F:A4:08:89:8E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019512B899CD5D0597F2D9AB2671DB752BB1
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_fh66eO1CB9xbqN36HxBL6QIiY4.roa
Signing time: Mon 17 Feb 2025 07:04:02 +0000
ROA not before: Mon 17 Feb 2025 07:04:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.58.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.85.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.140.0/24 maxlen: 24
31.57.141.0/24 maxlen: 24
31.57.143.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.244.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.56.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.230.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
31.59.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Feb 2025 06:28:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:b8:99:cd:5d:05:97:f2:d9:ab:26:71:db:75:2b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 17 07:04:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fdf87ae9e3b5081f716ea377e87c412fa408898e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c1:07:66:90:f0:c9:ff:49:1b:26:2a:be:51:
4c:42:96:75:1b:ef:09:ab:f6:50:b5:9c:0a:80:0e:
3f:a9:57:9a:e3:fa:3e:16:3a:42:e2:c7:8a:2d:fd:
ea:d1:21:fe:9b:3a:10:49:0b:bd:d6:a2:c5:fd:ec:
2b:b6:84:b4:d0:88:98:4e:9b:dc:81:b3:1b:ac:a4:
16:c4:de:26:58:d8:c8:5e:58:10:06:a5:02:ea:b5:
39:b9:2a:46:7d:86:77:f8:0d:5e:8b:87:9a:a7:0d:
c4:13:59:0b:2d:fd:7a:58:d3:aa:a2:a3:d8:34:eb:
cf:ca:87:28:eb:3c:e1:2c:be:05:a5:b5:ab:da:2a:
9e:50:fd:1e:d3:b3:a7:a1:41:ac:bc:c0:3f:fc:16:
f3:87:a1:18:0b:8b:3f:36:27:26:23:db:0e:0e:1d:
59:76:e5:6e:f5:28:c6:63:75:01:51:d4:cb:6d:f6:
9a:c0:41:de:fc:8d:7d:07:1d:b6:b2:1c:98:4a:de:
3e:f4:96:65:db:63:92:a0:23:62:4d:ff:37:b2:93:
e5:7d:99:67:e6:07:f9:75:7f:d8:c1:bf:d4:08:6d:
20:b2:fb:73:e6:6a:79:c9:3c:a4:e4:d5:14:b7:2e:
87:07:01:f1:22:5e:99:c9:8c:e1:e4:cc:ec:ed:54:
c7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F8:7A:E9:E3:B5:08:1F:71:6E:A3:77:E8:7C:41:2F:A4:08:89:8E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_fh66eO1CB9xbqN36HxBL6QIiY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0-31.56.58.255
31.56.71.0/24
31.56.85.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.104.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.176.0/21
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.244.0/24
31.57.252.0/22
31.58.34.0/23
31.58.50.0/23
31.58.56.0/23
31.58.64.0/23
31.58.152.0/22
31.58.230.0/24
31.59.96.0/22
31.59.112.0/22
31.59.184.0/22
Signature Algorithm: sha256WithRSAEncryption
93:78:23:e8:b2:e3:6c:f4:cf:5a:76:0f:e3:71:c1:35:74:44:
18:75:37:9f:c2:b6:ae:85:5c:7c:cd:18:73:3e:3a:34:82:9b:
3f:20:ab:d5:fe:2c:99:46:c7:ad:3b:32:ab:76:a3:e6:af:3c:
57:84:af:44:e0:79:c1:99:0d:23:86:a8:17:35:bc:54:09:b1:
9a:29:bd:a5:d6:57:57:b5:2b:4e:a0:93:5f:fe:1f:f6:2e:d1:
ee:70:ae:58:64:c2:e5:fd:ee:2e:e8:a8:9c:e3:ac:ea:67:25:
fc:04:78:23:c5:21:14:2b:6a:17:42:2e:bc:00:60:72:5a:0b:
6c:cb:88:90:04:26:62:1d:ff:d1:56:9f:d2:d1:a0:b5:3d:c5:
2a:3d:58:f6:8a:07:ec:2b:5b:22:b5:cb:91:62:ca:8b:da:0b:
87:f6:55:aa:4e:e8:3f:cc:eb:7c:55:da:23:14:d6:06:8d:69:
d9:e0:83:7a:94:06:0e:b8:43:e3:3f:7a:3e:70:1c:d0:69:c2:
57:e9:60:f9:e1:15:98:a8:c1:eb:74:25:b9:84:2a:41:88:3f:
46:b1:07:6f:01:2d:6d:eb:2e:7c:9a:4e:a7:aa:33:07:b8:29:
01:4e:31:d9:15:78:4b:e9:dd:e6:84:f3:b5:cf:28:a4:24:a4:
3e:32:4b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:03:39 2025 by rpki-client