Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hIVX6gOO6ljYYuaNLvaqD3oYHqA.roa
File: hIVX6gOO6ljYYuaNLvaqD3oYHqA.roa (raw, json)
Hash identifier: IV3ayk6Eq2OQv+TgnSnN7t6CzsOEtRlHpqlNBX1fP3s=
Subject key identifier: 84:85:57:EA:03:8E:EA:58:D8:62:E6:8D:2E:F6:AA:0F:7A:18:1E:A0
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194CA8C6780A84C2F8081E8D46C2D65C300
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hIVX6gOO6ljYYuaNLvaqD3oYHqA.roa
Signing time: Mon 03 Feb 2025 06:43:06 +0000
ROA not before: Mon 03 Feb 2025 06:43:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.74.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.129.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.191.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.197.0/24 maxlen: 24
31.57.198.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.238.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.57.254.0/24 maxlen: 24
31.58.33.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.163.0/24 maxlen: 24
31.58.230.0/23 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.42.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.108.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
31.59.228.0/24 maxlen: 24
31.59.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Feb 2025 07:32:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ca:8c:67:80:a8:4c:2f:80:81:e8:d4:6c:2d:65:c3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 3 06:43:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=848557ea038eea58d862e68d2ef6aa0f7a181ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:55:a2:d4:6f:55:b9:88:d3:52:7d:f2:e7:41:
fa:84:84:e1:74:93:f9:97:8a:77:56:e3:8a:3a:95:
4e:9c:3b:c7:28:4e:91:d1:7d:7c:06:7b:2d:87:3f:
53:82:e7:88:00:f1:dd:44:0f:d2:18:50:da:6e:58:
77:45:1d:59:be:f4:be:0e:b2:20:2c:18:11:1d:7a:
ce:9d:05:67:de:79:18:9d:d2:86:1b:53:9c:58:46:
ec:c9:04:8d:c4:fd:f2:dd:3f:ba:bf:0e:ec:e9:d9:
c4:88:e3:aa:0f:ea:2b:f8:c2:47:88:ab:cf:b9:cb:
d5:e9:51:22:35:fe:9b:da:de:8b:6c:8d:be:39:cd:
b3:1e:06:f9:f4:5e:8e:07:ff:74:a0:13:2f:0f:6d:
0a:68:90:3d:04:92:30:87:ff:0b:11:3e:18:db:ee:
e4:a1:bb:8d:72:19:d3:70:b6:0f:90:9f:1a:13:1e:
b4:82:02:7c:2d:8d:4e:bb:a0:40:6d:06:10:de:d4:
63:c6:d5:2a:d8:54:b7:12:83:16:95:0d:b4:05:16:
67:ab:31:12:ed:b4:d4:5f:ef:a3:81:8d:f5:a6:cc:
b9:b8:09:86:ac:2f:b5:c4:91:f8:a1:a1:93:72:ea:
4f:93:dc:05:ac:c5:72:de:2b:a5:23:4b:31:c3:ce:
a2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:85:57:EA:03:8E:EA:58:D8:62:E6:8D:2E:F6:AA:0F:7A:18:1E:A0
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hIVX6gOO6ljYYuaNLvaqD3oYHqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.74.0/24
31.56.89.0-31.56.91.255
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.104.0/21
31.57.129.0/24
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.176.0/21
31.57.191.0-31.57.195.255
31.57.197.0-31.57.198.255
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.238.0/24
31.57.252.0/22
31.58.33.0-31.58.35.255
31.58.152.0/22
31.58.163.0/24
31.58.230.0/23
31.59.41.0-31.59.42.255
31.59.57.0/24
31.59.96.0/22
31.59.108.0/24
31.59.112.0/22
31.59.184.0/22
31.59.228.0/24
31.59.230.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:ca:28:e6:24:8f:be:ba:54:39:dc:3f:d2:2c:cb:1f:40:05:
13:d7:28:20:21:20:8f:4d:5c:69:d2:dd:c6:06:23:14:37:b7:
c2:02:0f:1a:06:5c:a8:54:44:f5:d5:0a:37:08:89:11:00:44:
c4:d1:e5:f1:e7:49:2c:a3:db:f7:1b:b7:1b:3a:14:af:f2:21:
df:88:18:f0:22:15:f2:94:f7:f7:14:05:4f:6f:d2:11:3f:b4:
9c:6e:31:17:20:49:9f:99:c8:6e:8b:ca:4f:d6:68:56:42:7a:
ea:cc:b4:a6:d7:9e:9b:3d:4b:43:a7:9e:01:b4:fd:2d:76:08:
9b:23:65:0b:74:9f:b4:dc:dc:79:1e:4a:ba:f3:b1:e4:4f:71:
31:0d:1b:b8:4b:f0:5c:bf:0b:6a:9f:fb:93:f1:3b:39:f6:f9:
1d:91:d6:d5:7e:be:82:7a:c6:14:2f:3d:d5:6e:e0:c2:62:34:
fd:39:16:0d:46:69:40:ab:94:41:82:39:e1:12:7b:7a:af:27:
c6:09:09:85:65:81:a0:da:a1:4f:4b:14:18:40:a2:c3:4d:c9:
70:f4:d4:fc:65:fe:3a:cd:41:fb:60:a0:09:de:c5:ed:2b:f3:
b1:d3:9f:19:83:1b:03:bd:21:b3:4d:e5:aa:03:8e:07:e4:20:
42:40:62:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:45:40 2025 by rpki-client