Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bcCcfpaH_gG9MLq6W-0iC7E8PrE.roa
File: bcCcfpaH_gG9MLq6W-0iC7E8PrE.roa (raw, json)
Hash identifier: QYI0Eyr4gfBPRf8sQR7jbvkJDWtwa+A2XPJiOYSVFuY=
Subject key identifier: 6D:C0:9C:7E:96:87:FE:01:BD:30:BA:BA:5B:ED:22:0B:B1:3C:3E:B1
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019517BE03B3EEA6C006DDA13269C88A572B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bcCcfpaH_gG9MLq6W-0iC7E8PrE.roa
Signing time: Tue 18 Feb 2025 06:28:03 +0000
ROA not before: Tue 18 Feb 2025 06:28:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.85.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.140.0/24 maxlen: 24
31.57.141.0/24 maxlen: 24
31.57.143.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.244.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.56.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.230.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
31.59.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Feb 2025 13:09:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:17:be:03:b3:ee:a6:c0:06:dd:a1:32:69:c8:8a:57:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 18 06:28:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6dc09c7e9687fe01bd30baba5bed220bb13c3eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1c:75:eb:9f:b9:bc:fb:a6:a8:3b:f8:d4:9b:
ec:85:18:9a:af:40:89:52:66:79:db:74:e3:4e:f0:
e9:e5:7c:10:2e:d5:47:4b:4c:e9:af:55:b8:f8:34:
12:0e:ae:50:3e:1a:d2:ac:68:3a:88:36:ba:92:9f:
8d:1f:d1:68:9f:53:de:d7:d1:ee:69:87:cd:ae:3a:
ca:82:2a:95:11:42:35:9f:1d:4b:e0:11:d6:ce:a5:
7d:97:34:21:d0:3f:ee:47:db:f0:d1:e1:36:3f:e5:
5e:d7:51:c5:0b:69:7b:29:14:9f:cf:52:9b:e4:b4:
ca:ea:c1:ce:a5:c4:c5:7c:60:fc:1a:e9:71:ec:6e:
ba:c0:5a:f1:ff:3b:cf:61:7a:07:9d:24:14:c6:a1:
f5:73:e3:23:dc:56:f9:ec:91:22:83:6a:0b:39:bf:
77:3c:f2:9d:09:f4:4e:c0:ab:8b:1e:8c:aa:7c:0f:
c1:24:5b:24:f4:fd:76:aa:31:2e:26:39:5f:8e:3b:
32:c4:38:e2:94:c0:43:90:4e:e6:f4:b9:4e:b0:0f:
da:8f:ac:e8:0b:9d:f6:3e:b9:cc:80:64:a3:f0:f1:
0c:b8:58:2d:29:c9:3e:13:48:72:8d:56:5f:5a:a6:
d0:2d:34:3b:06:e4:94:2b:9d:33:de:7c:43:a4:d3:
c1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C0:9C:7E:96:87:FE:01:BD:30:BA:BA:5B:ED:22:0B:B1:3C:3E:B1
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bcCcfpaH_gG9MLq6W-0iC7E8PrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.71.0/24
31.56.85.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.104.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.176.0/21
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.244.0/24
31.57.252.0/22
31.58.34.0/23
31.58.50.0/23
31.58.56.0/23
31.58.64.0/23
31.58.152.0/22
31.58.230.0/24
31.59.96.0/22
31.59.112.0/22
31.59.184.0/22
Signature Algorithm: sha256WithRSAEncryption
85:3d:b5:2a:ff:c7:73:e8:32:63:b8:f0:5a:fc:43:9c:8a:20:
58:7b:f5:c9:6e:1b:84:8d:00:0c:56:93:b1:04:de:2b:85:8f:
bd:6d:21:1e:98:00:8f:cb:78:65:21:b5:be:5e:b7:ed:b4:49:
fe:22:1e:9a:a2:59:16:fd:c3:cb:24:4b:f1:49:be:d0:d8:de:
90:50:81:5d:34:f8:82:f5:3a:b5:b4:64:6a:f8:2b:42:c1:fb:
50:2d:6d:95:d9:b9:9b:52:e0:32:1c:62:00:68:28:cb:8d:a6:
bf:bb:94:0e:2a:8a:6a:5d:0d:ab:45:cc:f8:e3:8a:67:40:42:
d8:9d:8f:38:a7:e4:da:3f:15:13:dd:d2:11:25:4f:b0:20:73:
ef:a0:f2:61:38:ba:0a:da:de:26:48:9b:9f:9c:c9:b6:e6:41:
bd:c0:34:73:2d:6f:42:48:d7:0a:a5:87:0a:8f:c3:7b:4b:96:
51:10:27:ee:6d:30:d7:8f:aa:1e:c8:48:75:16:6a:7e:23:b1:
78:18:0e:ca:01:b8:7e:84:55:3d:90:b7:a6:24:ad:81:b0:ec:
d9:59:78:3a:b5:a2:97:1f:bc:2d:19:0c:b2:45:5b:07:19:08:
88:65:7d:10:8d:79:73:e7:fd:52:36:0c:29:e4:79:06:aa:1f:
76:26:5f:7a
-----BEGIN CERTIFICATE-----
MIIFxjCCBK6gAwIBAgISAZUXvgOz7qbABt2hMmnIilcrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMjE4MDYyODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZGMwOWM3ZTk2ODdmZTAxYmQzMGJhYmE1YmVkMjIwYmIxM2MzZWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBx165+5vPumqDv41JvshRiar0CJ
UmZ523TjTvDp5XwQLtVHS0zpr1W4+DQSDq5QPhrSrGg6iDa6kp+NH9Fon1Pe19Hu
aYfNrjrKgiqVEUI1nx1L4BHWzqV9lzQh0D/uR9vw0eE2P+Ve11HFC2l7KRSfz1Kb
5LTK6sHOpcTFfGD8Gulx7G66wFrx/zvPYXoHnSQUxqH1c+Mj3Fb57JEig2oLOb93
PPKdCfROwKuLHoyqfA/BJFsk9P12qjEuJjlfjjsyxDjilMBDkE7m9LlOsA/aj6zo
C532PrnMgGSj8PEMuFgtKck+E0hyjVZfWqbQLTQ7BuSUK50z3nxDpNPBJwIDAQAB
o4IC0jCCAs4wHQYDVR0OBBYEFG3AnH6Wh/4BvTC6ulvtIguxPD6xMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvYmNDY2ZwYUhfZ0c5TUxxNlctMGlDN0U4UHJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHnBggrBgEFBQcBBwEB/wSB1zCB1DCB0QQCAAEwgcoDBAEf
OAQDBAAfOBgDBAEfOCoDBAAfODkDBAAfOEcDBAAfOFUDBAEfOFoDBAMfOGgDBAEf
OHIwDAMEAR84dgMEAh84eAMEAh84yAMEAx85aAMEAR85hAMEAx85iAMEAR85kgME
Ax85sAMEAh85wAMEAR85yDAMAwQEHznQAwQCHzngAwQCHznoAwQAHzn0AwQCHzn8
AwQBHzoiAwQBHzoyAwQBHzo4AwQBHzpAAwQCHzqYAwQAHzrmAwQCHztgAwQCHztw
AwQCHzu4MA0GCSqGSIb3DQEBCwUAA4IBAQCFPbUq/8dz6DJjuPBa/EOciiBYe/XJ
bhuEjQAMVpOxBN4rhY+9bSEemACPy3hlIbW+XrfttEn+Ih6aolkW/cPLJEvxSb7Q
2N6QUIFdNPiC9Tq1tGRq+CtCwftQLW2V2bmbUuAyHGIAaCjLjaa/u5QOKopqXQ2r
Rcz444pnQELYnY84p+TaPxUT3dIRJU+wIHPvoPJhOLoK2t4mSJufnMm25kG9wDRz
LW9CSNcKpYcKj8N7S5ZRECfubTDXj6oeyEh1Fmp+I7F4GA7KAbh+hFU9kLemJK2B
sOzZWXg6taKXH7wtGQyyRVsHGQiIZX0QjXlz5/1SNgwp5HkGqh92Jl96
-----END CERTIFICATE-----
Generated at Fri Apr 18 09:50:47 2025 by rpki-client