Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fvU2g85CYpYaeNgVhC0TvN4UlWQ.roa
File: fvU2g85CYpYaeNgVhC0TvN4UlWQ.roa (raw, json)
Hash identifier: WITTMPMOR7ADDpKUdfdeRZMJwHDVC98jX3Qd36ieU9M=
Subject key identifier: 7E:F5:36:83:CE:42:62:96:1A:78:D8:15:84:2D:13:BC:DE:14:95:64
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01941C1CD533CC51DF626BCC148E7A4EDB52
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fvU2g85CYpYaeNgVhC0TvN4UlWQ.roa
Signing time: Tue 31 Dec 2024 09:47:19 +0000
ROA not before: Tue 31 Dec 2024 09:47:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.16.0/22 maxlen: 22
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.74.0/24 maxlen: 24
31.56.75.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.16.0/22 maxlen: 24
31.57.20.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.146.0/23 maxlen: 24
31.57.147.0/24 maxlen: 24
31.57.151.0/24 maxlen: 24
31.57.152.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.178.0/24 maxlen: 24
31.57.179.0/24 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.182.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.210.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.136.0/24 maxlen: 24
31.58.142.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.176.0/22 maxlen: 24
31.58.200.0/22 maxlen: 24
31.58.216.0/22 maxlen: 24
31.58.230.0/23 maxlen: 24
31.58.240.0/22 maxlen: 24
31.58.252.0/22 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.42.0/24 maxlen: 24
31.59.43.0/24 maxlen: 24
31.59.56.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.58.0/24 maxlen: 24
31.59.64.0/22 maxlen: 24
31.59.80.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.124.0/22 maxlen: 24
31.59.130.0/24 maxlen: 24
31.59.176.0/22 maxlen: 22
31.59.180.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
31.59.188.0/22 maxlen: 22
31.59.192.0/22 maxlen: 22
31.59.216.0/22 maxlen: 24
31.59.228.0/24 maxlen: 24
31.59.229.0/24 maxlen: 24
31.59.231.0/24 maxlen: 24
31.59.244.0/24 maxlen: 24
31.59.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 31 Dec 2024 15:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1c:1c:d5:33:cc:51:df:62:6b:cc:14:8e:7a:4e:db:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 31 09:47:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ef53683ce4262961a78d815842d13bcde149564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7a:b5:6d:d3:7e:35:62:8c:48:af:ac:17:09:
56:a6:a3:b8:d8:56:6d:5f:26:99:57:0d:35:1c:61:
dc:f8:5d:7b:5a:c8:f7:69:2f:92:c4:7b:06:8d:67:
e2:bb:dd:40:68:b7:68:4b:5c:49:66:28:19:59:f2:
99:e9:26:61:42:0d:0a:10:a5:33:2c:3e:2d:ba:cc:
98:00:88:bc:98:34:89:d3:ee:e9:04:4c:ca:7e:a1:
c0:db:dd:f7:97:36:59:70:cb:95:65:f9:00:ca:33:
5a:0a:15:7b:94:57:b9:d9:76:f0:06:91:63:35:74:
69:14:73:f9:35:5d:2f:fb:e4:e1:66:c3:03:7c:90:
a6:1d:93:3b:e6:fe:3c:39:06:ae:e3:52:b0:39:3f:
e1:78:ec:7e:43:62:08:2d:25:bd:df:d7:db:af:46:
9c:a5:ca:b7:1e:9d:66:50:57:25:3d:97:90:fa:6c:
98:7e:8c:10:7b:9c:1a:69:bc:f1:81:db:d6:34:1c:
b3:9c:b2:ae:b4:1c:c2:34:6c:eb:9f:8a:65:04:0d:
c0:d4:0f:be:47:04:e7:56:bb:3a:2a:92:40:22:25:
47:1a:d0:f3:0d:d0:0a:17:11:36:1d:fb:1a:ce:13:
6a:ab:6b:af:62:26:91:40:5f:e2:7e:11:65:e6:8d:
40:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F5:36:83:CE:42:62:96:1A:78:D8:15:84:2D:13:BC:DE:14:95:64
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fvU2g85CYpYaeNgVhC0TvN4UlWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.16.0/22
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.71.0/24
31.56.74.0/23
31.56.89.0/24
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.16.0/21
31.57.132.0/23
31.57.146.0/23
31.57.151.0-31.57.152.255
31.57.176.0/21
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.34.0/23
31.58.136.0/24
31.58.142.0/24
31.58.152.0/22
31.58.176.0/22
31.58.200.0/22
31.58.216.0/22
31.58.230.0/23
31.58.240.0/22
31.58.252.0/22
31.59.41.0-31.59.43.255
31.59.56.0-31.59.58.255
31.59.64.0/22
31.59.80.0/22
31.59.96.0/22
31.59.112.0/22
31.59.124.0/22
31.59.130.0/24
31.59.176.0-31.59.195.255
31.59.216.0/22
31.59.228.0/23
31.59.231.0/24
31.59.244.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:de:00:52:03:84:e1:e2:05:72:35:87:a5:a4:62:26:c5:0a:
7e:4e:f3:4d:c4:5c:90:99:ea:e7:86:46:fe:b9:8d:80:bf:e1:
f6:84:f3:b9:4e:5f:ca:57:9b:3b:ef:e9:9d:c8:25:4a:17:2d:
96:2d:6e:42:c1:a5:67:54:5c:f4:d8:f7:c9:54:fc:d2:65:84:
2b:d0:d8:af:ea:e3:c6:97:3b:29:4b:81:a5:52:4a:57:03:bd:
38:bf:91:35:5f:30:6c:1a:3f:ed:20:34:00:b3:27:9b:df:2e:
b3:95:a2:51:20:80:24:67:d9:95:40:b7:f0:67:da:01:c1:1c:
84:f6:b2:d7:6b:17:ef:0f:8d:ae:3f:b3:0b:ea:0f:b3:86:f3:
d9:2a:72:3c:b7:a3:98:36:b3:14:26:f0:f2:8b:92:1e:70:d5:
f8:1d:15:2b:75:5d:1e:ee:d7:1b:0b:ce:79:d0:96:fd:c2:2e:
f1:00:f1:99:d1:dc:d6:b4:d8:a8:ee:69:a5:36:e7:91:2a:48:
be:ce:4e:e2:3a:a0:2f:9c:34:a0:fa:b5:70:bd:7e:3e:8b:38:
1f:06:d8:93:3b:56:1c:20:be:b6:c6:1d:1c:5c:9a:65:95:62:
2e:3f:18:ff:18:85:06:c6:ac:95:44:c0:d2:a4:f8:d1:56:58:
87:c9:ea:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:48:40 2025 by rpki-client