Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cWofge5e3ipAnAxy0oq4bWMTQac.roa
File: cWofge5e3ipAnAxy0oq4bWMTQac.roa (raw, json)
Hash identifier: ecGaQCpzP/uhU0z5d4KBmWUAE0OX8/Q7PnVm3c9kNZ8=
Subject key identifier: 71:6A:1F:81:EE:5E:DE:2A:40:9C:0C:72:D2:8A:B8:6D:63:13:41:A7
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194A34D762796F45097C8321EBD47710971
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cWofge5e3ipAnAxy0oq4bWMTQac.roa
Signing time: Sun 26 Jan 2025 15:49:10 +0000
ROA not before: Sun 26 Jan 2025 15:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.74.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.156.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.33.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.142.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.163.0/24 maxlen: 24
31.58.230.0/23 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.42.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.108.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
31.59.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Jan 2025 06:50:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a3:4d:76:27:96:f4:50:97:c8:32:1e:bd:47:71:09:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 26 15:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=716a1f81ee5ede2a409c0c72d28ab86d631341a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b5:3e:4a:c2:2c:60:5e:99:5f:36:33:5f:86:
1a:60:28:62:23:83:f7:68:da:8a:ab:28:6b:51:b0:
87:3a:fb:d4:a9:ef:0f:ea:9c:9b:51:9c:e3:19:99:
74:a5:be:ad:08:27:7f:3d:26:ce:f8:42:b4:4f:7f:
23:9a:de:84:f8:76:e0:c5:c0:aa:47:37:ab:a0:3d:
ab:7c:d8:12:8b:67:a3:9d:b7:c1:01:12:6f:4a:89:
43:10:e1:c4:1f:13:70:ee:d8:d9:8f:3a:50:45:87:
d3:e5:e5:0e:f6:50:98:c7:8d:22:e7:9f:4d:5a:ea:
f0:af:d0:8b:1e:1c:2e:eb:4a:cb:a4:e3:65:52:8f:
b2:59:ef:66:68:2a:f9:3d:39:45:4a:e0:d7:9a:c9:
a6:50:69:51:ba:79:81:bd:0c:8f:be:73:62:41:f3:
d8:f3:97:00:ac:37:ac:70:4c:f3:50:2b:72:5b:53:
0c:4d:d3:11:25:36:0e:0a:d3:b2:a7:f5:6a:98:77:
7b:86:64:f0:42:ce:5a:86:94:0c:44:66:48:ff:40:
57:42:a5:86:22:31:38:ae:64:b3:09:53:6d:56:99:
37:4d:1a:c0:e9:73:90:74:51:70:ca:78:57:c2:d7:
a3:e6:95:d1:37:f4:cc:51:7a:86:5b:da:15:29:0c:
1a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:6A:1F:81:EE:5E:DE:2A:40:9C:0C:72:D2:8A:B8:6D:63:13:41:A7
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cWofge5e3ipAnAxy0oq4bWMTQac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.74.0/24
31.56.89.0-31.56.91.255
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.156.0/24
31.56.200.0/22
31.57.104.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.176.0/21
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.33.0-31.58.35.255
31.58.142.0/24
31.58.152.0/22
31.58.163.0/24
31.58.230.0/23
31.59.41.0-31.59.42.255
31.59.57.0/24
31.59.96.0/22
31.59.108.0/24
31.59.112.0/22
31.59.184.0/22
31.59.228.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:2a:7b:e9:c7:ba:31:35:67:e7:02:58:0e:8d:92:19:47:bf:
6b:36:43:14:69:06:77:2a:08:83:b1:4c:e7:80:a8:92:8a:58:
a3:ea:1b:34:fc:98:03:19:65:01:9d:9e:8e:7b:3b:20:60:0f:
17:7f:41:40:0c:cd:46:9f:b2:0b:6e:82:0b:b6:5d:74:b3:b1:
ba:2d:2d:d5:d3:aa:3b:5d:22:81:51:3c:c1:ad:91:1b:c4:39:
b8:38:b5:00:ab:b5:41:6a:0c:66:58:7a:30:7c:22:44:cb:02:
c2:5f:89:9f:bd:ec:61:05:c7:51:69:7e:1b:6c:87:b4:4e:1a:
5e:1a:30:64:8e:23:80:68:78:58:c8:c0:ba:ca:e3:ce:07:4b:
34:00:a8:f2:a4:d1:e4:e9:a7:6a:36:4d:ad:64:86:c6:59:a3:
a9:d5:da:29:59:96:b5:9a:3b:cd:94:a1:43:e9:e7:05:90:c1:
07:ca:7d:bc:73:8e:e8:8d:94:c6:e8:a6:61:6c:4b:55:25:ce:
23:86:45:fa:27:f7:e6:ed:2e:c7:3d:70:5a:57:03:f8:c4:c7:
8d:a9:96:8c:3a:f3:e5:5e:1e:c1:db:67:80:81:46:a6:ef:97:
cb:ef:ba:ae:87:9f:12:3c:a2:36:b1:f1:9e:dd:ba:0c:84:86:
0a:40:1e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:48:39 2025 by rpki-client