Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jM-ZEb6S9AwPZ2n0Z1SgpSJYcwo.roa
File: jM-ZEb6S9AwPZ2n0Z1SgpSJYcwo.roa (raw, json)
Hash identifier: LJjk0MDLDwNpK21qGAqQTT/Z+4x/J4hq2SzV+Fz10V8=
Subject key identifier: 8C:CF:99:11:BE:92:F4:0C:0F:67:69:F4:67:54:A0:A5:22:58:73:0A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019470BE99C343EB58DCC72F2BA91CCEA508
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jM-ZEb6S9AwPZ2n0Z1SgpSJYcwo.roa
Signing time: Thu 16 Jan 2025 20:12:06 +0000
ROA not before: Thu 16 Jan 2025 20:12:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.74.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.115.0/24 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.120.0/24 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.122.0/24 maxlen: 24
31.56.123.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.33.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.142.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.163.0/24 maxlen: 24
31.58.230.0/23 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.42.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.108.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
31.59.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Jan 2025 07:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:70:be:99:c3:43:eb:58:dc:c7:2f:2b:a9:1c:ce:a5:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 16 20:12:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ccf9911be92f40c0f6769f46754a0a52258730a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4f:48:70:d9:d9:9a:31:1d:60:ae:47:12:2b:
8f:ce:2f:c1:07:d1:e7:fb:82:d4:48:12:42:23:58:
35:bf:aa:25:ce:f1:c1:a9:20:a1:7a:4b:6b:d8:4e:
5c:5a:db:26:e4:9d:92:44:fd:fa:ff:ad:25:e2:67:
ef:20:4f:6d:80:db:b8:56:9c:f7:e0:20:f9:51:db:
11:af:2c:04:5c:22:f5:42:68:1d:5e:ce:09:58:f3:
25:f5:98:ec:79:a5:b2:57:09:9f:a4:02:82:d9:4e:
3c:9a:b4:a8:01:3d:f7:87:70:f3:4e:a0:f1:c0:c5:
45:81:cf:e9:e6:46:39:87:3f:06:f6:88:7f:e7:90:
c4:c0:81:4e:6e:4c:8b:1d:79:eb:b0:b1:64:e5:9c:
f4:26:24:a9:6e:0c:6a:78:d3:13:58:9f:a9:05:42:
92:21:e9:0c:81:81:81:b7:75:fe:e9:e2:fc:d4:5a:
7c:6f:0a:8e:0a:d1:e7:94:31:bd:5a:88:c4:b1:a7:
56:ab:04:c9:ce:fe:9f:08:1a:25:57:4b:18:c5:62:
07:d2:37:fd:45:ea:be:a2:1c:81:4f:ad:3c:41:3f:
04:32:ca:3c:83:31:9f:0c:6a:ad:70:fe:8d:b1:2e:
2b:73:e1:46:fb:2b:22:04:db:51:d9:ac:34:1c:56:
fc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CF:99:11:BE:92:F4:0C:0F:67:69:F4:67:54:A0:A5:22:58:73:0A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jM-ZEb6S9AwPZ2n0Z1SgpSJYcwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.74.0/24
31.56.89.0/24
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.104.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.176.0/21
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.33.0-31.58.35.255
31.58.142.0/24
31.58.152.0/22
31.58.163.0/24
31.58.230.0/23
31.59.41.0-31.59.42.255
31.59.57.0/24
31.59.96.0/22
31.59.108.0/24
31.59.112.0/22
31.59.184.0/22
31.59.228.0/24
Signature Algorithm: sha256WithRSAEncryption
15:c2:a0:a7:ca:3f:03:03:70:7c:2e:3b:84:78:32:7b:e2:bf:
58:57:e2:6b:f3:dd:fd:5a:18:ae:64:1d:56:2c:ef:49:6c:ca:
28:ba:1a:2e:db:f0:37:9a:e0:f7:01:2c:4b:72:bf:a0:d6:19:
be:5c:71:cc:cb:76:8c:7d:c3:87:21:28:47:9f:fa:5d:54:80:
a9:bd:7b:42:c6:20:ae:d0:dc:4c:7e:b4:49:7c:a4:c2:14:c2:
ae:cb:91:14:cf:99:81:49:bb:85:64:53:b2:c5:80:6b:f0:bd:
27:4c:c4:8b:a8:b4:a2:53:09:c8:cd:aa:61:bd:37:75:10:bf:
7b:f5:77:80:99:28:6c:c2:5d:2d:db:d2:c8:ae:92:ba:8b:be:
f8:06:b0:19:c4:6f:b5:60:24:fc:69:af:84:1e:f5:2a:59:d4:
8d:68:6d:cf:e6:9f:04:26:57:fe:0b:be:d6:49:eb:48:5f:1d:
6b:a0:f7:3c:6f:1d:cb:8b:db:15:57:c3:2a:db:79:7a:42:ae:
06:e5:67:2c:85:ce:61:36:c3:70:77:d9:a4:47:67:99:f0:95:
54:6e:0b:53:d6:bf:68:a7:bc:83:4d:3e:6e:2e:be:31:93:76:
06:9c:40:88:64:9c:e8:ec:30:de:27:ea:de:48:cc:ca:0c:41:
85:6f:5d:8a
-----BEGIN CERTIFICATE-----
MIIF3DCCBMSgAwIBAgISAZRwvpnDQ+tY3McvK6kczqUIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMTE2MjAxMjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2NmOTkxMWJlOTJmNDBjMGY2NzY5ZjQ2NzU0YTBhNTIyNTg3MzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApk9IcNnZmjEdYK5HEiuPzi/BB9Hn
+4LUSBJCI1g1v6olzvHBqSChektr2E5cWtsm5J2SRP36/60l4mfvIE9tgNu4Vpz3
4CD5UdsRrywEXCL1QmgdXs4JWPMl9ZjseaWyVwmfpAKC2U48mrSoAT33h3DzTqDx
wMVFgc/p5kY5hz8G9oh/55DEwIFObkyLHXnrsLFk5Zz0JiSpbgxqeNMTWJ+pBUKS
IekMgYGBt3X+6eL81Fp8bwqOCtHnlDG9WojEsadWqwTJzv6fCBolV0sYxWIH0jf9
Req+ohyBT608QT8EMso8gzGfDGqtcP6NsS4rc+FG+ysiBNtR2aw0HFb8kQIDAQAB
o4IC6DCCAuQwHQYDVR0OBBYEFIzPmRG+kvQMD2dp9GdUoKUiWHMKMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvak0tWkViNlM5QXdQWjJuMFoxU2dwU0pZY3dvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIH9BggrBgEFBQcBBwEB/wSB7TCB6jCB5wQCAAEwgeADBAEf
OAQDBAAfOBgDBAEfOCoDBAAfODkDBAAfOEoDBAAfOFkDBAMfOGgDBAEfOHIwDAME
AR84dgMEAh84eAMEAh84yAMEAx85aAMEAR85hAMEAx85iAMEAR85kgMEAx85sAME
Ah85wAMEAR85yDAMAwQEHznQAwQCHzngAwQCHznoAwQCHzn8MAwDBAAfOiEDBAIf
OiADBAAfOo4DBAIfOpgDBAAfOqMDBAEfOuYwDAMEAB87KQMEAB87KgMEAB87OQME
Ah87YAMEAB87bAMEAh87cAMEAh87uAMEAB875DANBgkqhkiG9w0BAQsFAAOCAQEA
FcKgp8o/AwNwfC47hHgye+K/WFfia/Pd/VoYrmQdVizvSWzKKLoaLtvwN5rg9wEs
S3K/oNYZvlxxzMt2jH3DhyEoR5/6XVSAqb17QsYgrtDcTH60SXykwhTCrsuRFM+Z
gUm7hWRTssWAa/C9J0zEi6i0olMJyM2qYb03dRC/e/V3gJkobMJdLdvSyK6Suou+
+AawGcRvtWAk/GmvhB71KlnUjWhtz+afBCZX/gu+1knrSF8da6D3PG8dy4vbFVfD
Ktt5ekKuBuVnLIXOYTbDcHfZpEdnmfCVVG4LU9a/aKe8g00+bi6+MZN2BpxAiGSc
6Oww3ifq3kjMygxBhW9dig==
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:12 2025 by rpki-client