Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ew_Knj7oz5mpFiLQ8CDtzj__cuQ.roa
File: ew_Knj7oz5mpFiLQ8CDtzj__cuQ.roa (raw, json)
Hash identifier: FNgay708LJGu8QyT7YeR1nK4pprJrT17EZNfCM83T+w=
Subject key identifier: 7B:0F:CA:9E:3E:E8:CF:99:A9:16:22:D0:F0:20:ED:CE:3F:FF:72:E4
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194C7E8BEDA7F20736419E507072C7B52FF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ew_Knj7oz5mpFiLQ8CDtzj__cuQ.roa
Signing time: Sun 02 Feb 2025 18:25:06 +0000
ROA not before: Sun 02 Feb 2025 18:25:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.74.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.129.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.191.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.197.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.238.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.33.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.163.0/24 maxlen: 24
31.58.230.0/23 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.42.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.108.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
31.59.228.0/24 maxlen: 24
31.59.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Feb 2025 06:42:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c7:e8:be:da:7f:20:73:64:19:e5:07:07:2c:7b:52:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 2 18:25:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b0fca9e3ee8cf99a91622d0f020edce3fff72e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:53:bd:38:df:8b:32:9a:76:59:53:cd:94:e8:
10:33:69:f0:ad:df:4b:e1:88:56:ee:03:4e:08:0c:
e3:35:4d:51:9e:8d:b5:16:97:c5:53:1b:96:04:3b:
65:19:cd:72:9d:c4:ef:b1:df:ce:a6:ea:1a:fb:4e:
62:e5:a6:b9:d6:2e:8a:0c:82:3e:d2:fb:ad:d0:22:
75:67:b7:3c:1d:f9:b9:99:f4:aa:12:2f:96:84:e6:
53:0f:6b:fc:77:b3:4a:10:be:8f:27:35:7d:ea:e1:
70:65:3d:d1:b4:88:ca:99:fc:2c:09:1c:38:1f:e1:
02:8f:82:c6:2f:c4:f1:ff:52:19:16:ed:b7:41:11:
ec:9d:c3:b8:17:22:01:b7:2d:26:7f:de:bc:28:97:
aa:5f:6a:2b:88:8f:30:c5:71:8d:b6:28:7e:11:bb:
cf:76:df:7a:a3:a1:5d:6d:99:1c:70:b1:71:eb:0d:
b1:f1:85:d5:e8:44:df:b5:11:c3:bc:c8:22:9a:98:
5c:13:e1:29:c6:e6:0f:8d:fa:53:c5:35:c8:74:1b:
db:e4:1e:89:84:4e:02:07:16:2d:f9:7a:bc:87:ae:
7f:84:53:93:a3:d6:ee:6f:5f:de:0c:07:33:2c:59:
b3:8d:41:ed:65:70:b2:52:e7:2c:da:41:25:fc:a4:
d3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0F:CA:9E:3E:E8:CF:99:A9:16:22:D0:F0:20:ED:CE:3F:FF:72:E4
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ew_Knj7oz5mpFiLQ8CDtzj__cuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.74.0/24
31.56.89.0-31.56.91.255
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.104.0/21
31.57.129.0/24
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.176.0/21
31.57.191.0-31.57.195.255
31.57.197.0/24
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.238.0/24
31.57.252.0/22
31.58.33.0-31.58.35.255
31.58.152.0/22
31.58.163.0/24
31.58.230.0/23
31.59.41.0-31.59.42.255
31.59.57.0/24
31.59.96.0/22
31.59.108.0/24
31.59.112.0/22
31.59.184.0/22
31.59.228.0/24
31.59.230.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:1e:94:85:98:5a:83:3c:cf:ab:b4:f9:cc:9a:97:20:02:eb:
c3:c8:a7:d8:cb:4f:ad:4b:9d:46:0a:4d:a8:0e:0f:b3:67:8b:
b4:49:80:ff:79:60:57:96:78:29:3c:b6:08:0c:26:09:09:b5:
1f:ac:1a:df:87:8f:a9:d2:86:57:bd:19:3d:96:bd:a0:fb:16:
9f:59:03:86:71:46:4d:8f:4e:9c:23:30:75:43:4c:2c:9b:45:
d4:cf:ac:9b:bc:8b:88:0a:04:ad:6e:5a:a6:a0:a4:01:2f:2f:
8c:b0:1c:25:7e:dd:11:64:f1:f8:69:e8:e0:f2:27:fa:c1:ca:
4b:39:cf:69:3a:d9:9c:fc:11:dd:31:3e:99:0b:b7:c8:02:e2:
4f:8a:d6:74:4a:d6:ee:dc:29:ad:ad:df:56:5f:1b:d6:37:ff:
35:c8:4b:a9:b1:7e:ed:40:01:52:02:5c:75:23:6f:a2:b8:ae:
dd:43:e2:1a:4b:63:1f:8e:3c:50:05:8d:99:23:74:79:23:bc:
77:b7:27:b6:3f:a7:6b:7a:b0:6f:44:72:00:39:6c:93:c8:cf:
ac:af:73:c0:09:f8:2c:c2:f6:b9:d2:6f:42:84:c5:97:59:d4:
f9:7d:84:1c:0a:d9:21:12:4a:aa:df:12:44:c4:3b:32:54:b8:
89:bf:2d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:50:59 2025 by rpki-client