Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jSxpHL-sa3n2141QooZICzCp61E.roa
File: jSxpHL-sa3n2141QooZICzCp61E.roa (raw, json)
Hash identifier: m5aD6szIochL1EtSuCrmBABfzONF0U4e6s1LBLArMEo=
Subject key identifier: 8D:2C:69:1C:BF:AC:6B:79:F6:D7:8D:50:A2:86:48:0B:30:A9:EB:51
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01971659374360F73B5959C07D90D19B1582
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jSxpHL-sa3n2141QooZICzCp61E.roa
Signing time: Wed 28 May 2025 10:03:55 +0000
ROA not before: Wed 28 May 2025 10:03:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.23.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.196.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.56.238.0/24 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.60.0/22 maxlen: 24
31.57.92.0/22 maxlen: 22
31.57.98.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.110.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.244.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.56.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.212.0/22 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 29 May 2025 09:03:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:16:59:37:43:60:f7:3b:59:59:c0:7d:90:d1:9b:15:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 28 10:03:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d2c691cbfac6b79f6d78d50a286480b30a9eb51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:76:4b:1e:75:e8:82:0d:b0:07:02:5b:fe:6c:
30:72:66:65:04:45:0e:d9:27:12:50:23:21:3e:7a:
f4:db:f6:41:55:86:3a:c8:4d:7d:fb:10:81:b5:eb:
3e:29:e2:02:f7:d6:76:1b:7d:2b:31:fa:08:a7:f0:
ae:c8:5f:54:c8:2d:c6:d1:f2:14:a6:a3:4f:da:4c:
d4:25:42:9a:c7:be:ff:49:79:2d:b7:24:ce:70:e7:
bb:85:bc:b3:14:00:f7:cf:d1:87:4e:32:ab:a5:43:
52:bb:39:56:45:5a:55:45:21:cb:e9:b0:85:8f:48:
a6:bf:63:96:6f:d9:9d:77:7f:36:a8:19:a1:8b:2d:
93:fc:bb:6f:40:44:c5:17:d3:eb:55:e8:a5:1c:29:
b5:2a:6f:cd:d8:4e:bd:fb:98:8e:51:bd:14:d7:4e:
00:17:03:d1:08:14:ec:58:e3:a6:ae:dd:ad:01:e0:
70:ac:d3:76:56:b2:a9:fe:a9:40:b0:46:a0:3c:3d:
7b:5d:72:b8:82:77:f7:9f:dd:1b:4d:a7:cb:ed:52:
09:7d:99:d0:d5:f4:48:73:d9:0f:ef:3b:12:e0:c1:
58:07:fb:70:53:ca:76:22:1b:c1:07:c9:2c:4c:40:
ed:bd:a3:60:02:c2:4d:a2:95:57:e1:f0:61:89:9e:
78:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2C:69:1C:BF:AC:6B:79:F6:D7:8D:50:A2:86:48:0B:30:A9:EB:51
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jSxpHL-sa3n2141QooZICzCp61E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.23.0/24
31.56.57.0/24
31.56.77.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0/22
31.56.196.0-31.56.203.255
31.56.208.0/21
31.56.228.0/22
31.56.236.0/22
31.57.36.0/22
31.57.60.0/22
31.57.92.0/22
31.57.98.0/24
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.244.0/24
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.56.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.212.0/22
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
28:6d:18:bb:89:eb:30:23:74:6b:6b:0a:03:0b:da:76:1b:46:
24:9b:6e:87:dd:a8:4a:11:8e:ab:34:99:a0:65:a8:18:27:16:
9c:f4:18:c3:b8:d6:20:4f:ed:0a:49:63:92:d6:06:d9:58:32:
8b:e0:fe:25:54:d3:ce:5b:97:3d:fd:4c:2e:3a:12:99:4c:f1:
4d:48:a8:96:54:8c:d1:4d:68:1d:9f:22:bd:fc:b9:7a:28:57:
2e:c6:8a:c4:6c:3f:1c:23:4e:9d:5b:f3:98:df:92:79:6a:de:
3f:db:dc:c1:ef:8d:22:59:7c:8f:ff:0e:ee:42:f0:b1:b7:be:
08:b9:49:f7:8a:00:ea:05:28:5e:d8:4b:7e:b4:b8:98:99:5f:
0a:40:2c:0a:db:ac:eb:6e:85:be:18:67:06:27:d0:54:89:f5:
71:99:4a:68:ce:cd:cb:3e:7a:0b:dc:2e:3c:5b:fd:16:b9:f6:
74:e2:3c:97:bb:1c:2f:6d:4c:7e:9c:af:8f:20:85:2c:39:fe:
de:15:2b:dd:b9:24:e4:db:66:f5:0e:3a:3d:99:fc:7e:05:22:
78:30:52:da:20:0e:03:fa:c3:b9:5a:2b:01:db:1b:72:ec:94:
f3:78:41:40:21:e7:3f:61:fc:bc:30:e1:c6:17:71:31:3f:58:
f1:8c:72:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 03:54:00 2025 by rpki-client