Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fe9z9nOw7pbfjnmP7ReGj4gYi_g.roa
File: fe9z9nOw7pbfjnmP7ReGj4gYi_g.roa (raw, json)
Hash identifier: XijGP47Eb5T80gH8I1UBqhrGYbMNXFBeQy8upJghJMs=
Subject key identifier: 7D:EF:73:F6:73:B0:EE:96:DF:8E:79:8F:ED:17:86:8F:88:18:8B:F8
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194880B439AD22672597E2BC786FEEFBF3A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fe9z9nOw7pbfjnmP7ReGj4gYi_g.roa
Signing time: Tue 21 Jan 2025 08:47:07 +0000
ROA not before: Tue 21 Jan 2025 08:47:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.74.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.120.0/24 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.122.0/24 maxlen: 24
31.56.123.0/24 maxlen: 24
31.56.156.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.65.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.33.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.142.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.163.0/24 maxlen: 24
31.58.230.0/23 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.42.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.108.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
31.59.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Jan 2025 15:55:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:88:0b:43:9a:d2:26:72:59:7e:2b:c7:86:fe:ef:bf:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 21 08:47:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7def73f673b0ee96df8e798fed17868f88188bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7c:6d:0e:81:25:97:d4:b7:16:ae:2e:7d:58:
e0:d7:0d:eb:77:56:72:57:e6:33:bc:8b:65:33:b7:
6a:b3:d1:34:a9:a4:48:20:91:17:e0:ee:32:34:5b:
3b:8d:02:f4:dd:a4:6a:87:a5:e8:62:e8:be:1b:5b:
12:d0:ec:a8:7e:66:61:d3:43:b8:ef:d9:4e:69:b9:
15:c5:f5:d9:df:67:97:df:ff:0c:25:4a:03:0e:8c:
f9:d5:a9:20:7e:4d:26:ef:12:7d:77:09:cc:8f:a4:
6f:c3:5d:10:46:4a:82:db:e2:f1:1f:02:a8:f4:44:
e1:31:62:92:b2:53:a9:af:f5:d2:5c:58:77:5f:e3:
a4:59:ff:e0:72:1c:b2:f9:90:77:79:ce:70:ba:b7:
8d:e7:56:b5:59:e8:2d:c5:23:fd:8e:96:3e:8e:d1:
3e:34:19:0d:75:53:44:35:6c:15:0e:b2:cf:1e:6a:
a0:9b:e8:4c:fa:ec:5b:25:16:4d:a1:9e:85:09:c6:
6b:7d:bc:37:32:d0:cf:4d:e7:ef:bf:59:e3:17:1d:
51:1f:19:69:b4:a3:40:94:4a:6b:c7:78:c5:f1:45:
86:9f:a2:48:8a:a5:20:95:5f:fb:12:4f:bf:10:cc:
6b:04:7e:f4:c1:85:c2:10:9c:06:03:0a:75:04:0d:
ae:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:EF:73:F6:73:B0:EE:96:DF:8E:79:8F:ED:17:86:8F:88:18:8B:F8
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fe9z9nOw7pbfjnmP7ReGj4gYi_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.74.0/24
31.56.89.0-31.56.91.255
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.156.0/24
31.56.200.0/22
31.57.65.0/24
31.57.104.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.176.0/21
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.33.0-31.58.35.255
31.58.142.0/24
31.58.152.0/22
31.58.163.0/24
31.58.230.0/23
31.59.41.0-31.59.42.255
31.59.57.0/24
31.59.96.0/22
31.59.108.0/24
31.59.112.0/22
31.59.184.0/22
31.59.228.0/24
Signature Algorithm: sha256WithRSAEncryption
59:01:6d:d4:d9:42:d4:fc:64:64:fa:d8:00:a6:37:d3:18:96:
b8:cd:61:2c:d6:9d:a0:83:8e:60:5f:be:b4:27:c3:55:c3:bb:
94:4a:c8:a3:f0:f3:9e:2f:75:62:12:9e:34:29:08:a0:33:77:
ab:b0:36:06:90:97:42:13:60:64:81:80:5a:bc:05:2a:35:30:
a6:e7:03:d8:da:27:07:4e:9a:78:19:8f:f9:3f:33:41:0c:97:
f2:81:31:37:05:bb:cd:f4:88:a7:e1:0e:4a:03:8c:63:c3:01:
45:be:1e:64:20:3a:ab:20:18:04:1a:b9:eb:66:7d:4f:ff:97:
a9:0e:21:77:c6:69:aa:4d:df:8b:ae:4b:26:5e:9a:ba:4f:af:
f4:bb:27:84:49:c7:4d:cb:6c:8c:a1:42:fe:a3:59:43:d5:0e:
49:d2:ab:3e:34:51:b0:bf:e6:9c:30:78:7c:60:0b:de:06:72:
8b:20:e1:87:6d:1a:e6:53:5f:58:ab:e9:a6:43:30:ed:49:48:
2d:b6:f4:ae:d3:da:69:5d:93:bc:09:8f:e3:48:80:5d:d2:be:
e1:cb:d1:00:1d:72:43:12:2a:ee:b7:73:40:91:93:47:5a:03:
13:dd:49:dc:bb:41:1a:c2:2a:ed:a5:71:74:d6:9b:b1:1e:61:
fd:47:93:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:09 2025 by rpki-client