Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jeHWZzNe5_ByAgd3V_lSoFExlf4.roa
File: jeHWZzNe5_ByAgd3V_lSoFExlf4.roa (raw, json)
Hash identifier: 7X9+VZRj71TMDL88jnf7txr60BtZebZnpcbcUoRLmA0=
Subject key identifier: 8D:E1:D6:67:33:5E:E7:F0:72:02:07:77:57:F9:52:A0:51:31:95:FE
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195D34E797D55E5B68675D5088FF8818047
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jeHWZzNe5_ByAgd3V_lSoFExlf4.roa
Signing time: Wed 26 Mar 2025 16:34:50 +0000
ROA not before: Wed 26 Mar 2025 16:34:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.87.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.65.0/24 maxlen: 24
31.57.103.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.113.0/24 maxlen: 24
31.57.114.0/24 maxlen: 24
31.57.116.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.143.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.168.0/23 maxlen: 23
31.57.176.0/21 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.214.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.76.0/24 maxlen: 24
31.58.77.0/24 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 27 Mar 2025 15:24:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d3:4e:79:7d:55:e5:b6:86:75:d5:08:8f:f8:81:80:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 26 16:34:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8de1d667335ee7f07202077757f952a0513195fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:78:d5:06:7b:3b:25:e9:bb:fe:c3:51:35:af:
b2:89:59:b9:54:c1:83:86:c0:8d:97:cd:87:1b:e3:
0d:4a:5f:84:75:0a:63:c5:66:a9:38:a0:c4:17:a8:
72:70:2b:6f:9f:c2:68:d0:e5:ff:44:39:38:49:fe:
d9:5e:c5:74:b7:20:a0:b8:be:7a:f5:b9:28:11:da:
2b:10:b6:0c:87:23:99:d0:53:fd:35:e0:a4:ea:d6:
2a:8a:02:4e:86:9e:47:1e:c0:76:4a:6d:8e:8f:02:
50:2d:25:b4:3d:62:e7:e4:82:d0:eb:ab:77:65:66:
7c:5a:38:ad:df:f6:e4:60:df:0b:0b:1c:0a:aa:73:
e1:d5:30:62:20:97:32:27:9c:0f:02:6c:48:7b:78:
b1:c7:9a:e1:f1:25:20:dd:42:ca:a2:07:70:ae:f5:
95:7c:08:1a:64:15:17:aa:c9:04:1d:c9:e8:e6:d7:
25:c7:46:6e:89:59:e5:af:ba:49:db:74:13:19:65:
2b:40:9d:79:11:03:47:a1:6b:5d:7f:40:9a:89:ac:
a0:b1:d9:4f:44:c2:f5:27:cb:ff:05:0c:fb:f5:5c:
c4:73:75:c6:b6:47:ca:c4:33:ae:a7:4f:3c:e5:b2:
b9:18:7f:62:d7:54:cd:10:7e:9a:88:d5:4c:f5:7d:
44:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E1:D6:67:33:5E:E7:F0:72:02:07:77:57:F9:52:A0:51:31:95:FE
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jeHWZzNe5_ByAgd3V_lSoFExlf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.57.0/24
31.56.71.0/24
31.56.87.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.65.0/24
31.57.103.0-31.57.111.255
31.57.113.0-31.57.114.255
31.57.116.0/24
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0/21
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.76.0/23
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.224.0/22
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.175.255
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:f0:c0:89:d0:47:3b:c1:23:dd:0b:cc:76:73:af:ab:8a:16:
f8:f7:a0:4c:6f:14:c7:ec:a3:47:b2:c3:c7:30:8e:d8:cd:d5:
f5:7d:f4:47:9c:a9:85:49:dd:56:52:76:2a:d1:ac:a5:75:72:
09:60:e7:81:06:c2:37:cf:35:15:01:aa:ba:d2:58:fe:c5:12:
19:98:4e:b5:bd:0f:5b:69:00:2c:48:b2:5e:b8:84:f7:5b:d2:
13:6f:20:64:5f:4b:1d:bd:3a:7d:0b:ae:8c:3d:78:96:f7:3c:
e1:d6:89:97:2d:36:3a:6e:3e:7b:a7:05:bb:f4:15:05:64:c5:
04:19:9c:d6:16:b2:be:bd:a7:1d:c5:1b:5a:1e:34:d8:bf:16:
e0:5d:6b:7f:54:c3:16:0a:1b:6f:f3:00:f8:6a:cc:2d:a9:23:
28:df:15:b3:2e:51:2b:0b:a3:aa:ca:48:a7:64:7c:fd:0c:e2:
2e:54:d7:90:07:3d:cb:2d:e6:66:71:28:e2:2d:9c:80:40:44:
be:9f:1b:41:d9:5e:d1:b8:68:fc:3e:9f:ba:3d:cd:5e:2d:ef:
fe:23:17:72:8f:05:ee:e9:02:94:e1:da:98:b3:73:1d:35:0e:
9f:95:88:83:8c:12:ef:6d:e3:8f:7d:83:e8:6e:e1:a1:c9:78:
db:1f:72:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:48:30 2025 by rpki-client