Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/krvTyIx_T8CgjQQrhMfayiMcPTM.roa
File: krvTyIx_T8CgjQQrhMfayiMcPTM.roa (raw, json)
Hash identifier: z99PzUCW8Hef4q8SfMfJ4hycaNvLSJpWARvZq74DYJw=
Subject key identifier: 92:BB:D3:C8:8C:7F:4F:C0:A0:8D:04:2B:84:C7:DA:CA:23:1C:3D:33
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194170435297998DB0A2FC77807C1E025A3
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/krvTyIx_T8CgjQQrhMfayiMcPTM.roa
Signing time: Mon 30 Dec 2024 10:02:19 +0000
ROA not before: Mon 30 Dec 2024 10:02:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.16.0/22 maxlen: 22
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.74.0/24 maxlen: 24
31.56.75.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.16.0/22 maxlen: 24
31.57.20.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.146.0/23 maxlen: 24
31.57.147.0/24 maxlen: 24
31.57.151.0/24 maxlen: 24
31.57.152.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.178.0/24 maxlen: 24
31.57.179.0/24 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.182.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.176.0/22 maxlen: 24
31.58.200.0/22 maxlen: 24
31.58.216.0/22 maxlen: 24
31.58.240.0/22 maxlen: 24
31.58.252.0/22 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.42.0/24 maxlen: 24
31.59.43.0/24 maxlen: 24
31.59.56.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.58.0/24 maxlen: 24
31.59.64.0/22 maxlen: 24
31.59.80.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.124.0/22 maxlen: 24
31.59.130.0/24 maxlen: 24
31.59.176.0/22 maxlen: 22
31.59.180.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
31.59.188.0/22 maxlen: 22
31.59.192.0/22 maxlen: 22
31.59.216.0/22 maxlen: 24
31.59.228.0/24 maxlen: 24
31.59.229.0/24 maxlen: 24
31.59.231.0/24 maxlen: 24
31.59.244.0/24 maxlen: 24
31.59.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Dec 2024 20:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:17:04:35:29:79:98:db:0a:2f:c7:78:07:c1:e0:25:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 30 10:02:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92bbd3c88c7f4fc0a08d042b84c7daca231c3d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b4:29:9b:20:8d:ad:f0:ab:64:0d:eb:12:01:
74:b7:62:aa:3a:5e:19:8a:42:5c:f8:4c:42:d1:0f:
8e:5b:46:4c:e2:a2:57:20:d6:58:9c:59:b3:9a:b9:
1f:db:ac:c0:74:5e:cd:6f:7d:1b:04:09:e5:86:71:
b0:df:d5:04:47:78:68:05:54:ee:c4:b1:67:b3:98:
2b:97:11:a3:e1:07:ab:82:f1:35:ee:9d:c4:5e:dd:
8e:ab:a1:69:7d:7a:18:ff:8b:83:f4:43:76:98:a4:
c5:79:b6:ff:94:f9:b3:a0:38:0d:7a:03:b2:4f:2b:
2e:14:97:72:0b:3b:03:38:19:05:8f:92:78:1c:fb:
aa:4d:c9:09:74:24:43:14:7a:d6:eb:a2:76:a4:9b:
f9:cb:a6:44:3c:d4:e3:10:04:dd:9b:4b:77:a0:7c:
4c:25:4a:5a:a0:f5:aa:39:6e:67:3c:ec:72:60:d5:
17:aa:70:3b:2d:9b:0c:e2:3d:b2:8d:87:92:1f:33:
88:ce:e1:89:c7:96:02:8a:c9:12:c6:a1:f1:19:c7:
3e:fb:f9:67:3b:00:90:db:3a:af:27:c4:33:bb:fc:
99:03:da:cf:32:ee:bd:cd:59:e2:52:61:e9:00:74:
fe:f5:86:82:74:1b:e1:e6:c0:02:ad:53:97:6c:cc:
96:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BB:D3:C8:8C:7F:4F:C0:A0:8D:04:2B:84:C7:DA:CA:23:1C:3D:33
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/krvTyIx_T8CgjQQrhMfayiMcPTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.16.0/22
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.71.0/24
31.56.74.0/23
31.56.89.0/24
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.16.0/21
31.57.132.0/23
31.57.146.0/23
31.57.151.0-31.57.152.255
31.57.176.0/21
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.34.0/23
31.58.152.0/22
31.58.176.0/22
31.58.200.0/22
31.58.216.0/22
31.58.240.0/22
31.58.252.0/22
31.59.41.0-31.59.43.255
31.59.56.0-31.59.58.255
31.59.64.0/22
31.59.80.0/22
31.59.96.0/22
31.59.112.0/22
31.59.124.0/22
31.59.130.0/24
31.59.176.0-31.59.195.255
31.59.216.0/22
31.59.228.0/23
31.59.231.0/24
31.59.244.0/23
Signature Algorithm: sha256WithRSAEncryption
36:f1:32:62:89:b9:86:6e:ce:d0:1b:99:b2:13:99:f4:9c:ba:
ab:d0:95:5a:e6:d2:07:ea:c4:8e:b5:b1:9d:01:13:b9:67:0d:
44:58:97:63:d7:93:13:98:61:3c:e1:a6:92:72:f2:b0:22:9d:
02:b7:19:bb:2c:9a:51:02:cd:32:6e:7d:93:db:7f:40:ec:08:
47:6e:eb:5f:e9:dc:02:9f:04:3f:ce:55:ae:d2:0f:86:d7:3c:
ec:b6:82:73:d7:95:07:2a:86:c6:7b:6b:29:bf:f5:b5:c8:d9:
83:c7:a8:86:5b:62:49:1f:44:65:24:ac:67:ac:5c:f9:7a:f4:
ee:cf:78:64:c5:a4:68:c5:a2:18:a0:16:d7:46:2f:78:d5:e3:
4d:ad:39:56:f0:d3:19:24:4d:bd:1f:1c:03:51:ed:b5:f1:2c:
10:b9:38:f1:2c:c9:59:7f:a7:44:28:7f:5f:4a:ca:07:3c:43:
ff:fb:b1:70:10:32:d4:82:84:44:0e:ac:5f:e5:82:76:0b:ac:
cb:c0:5e:46:a6:4d:1e:6c:62:f5:df:29:a2:b6:c7:84:d8:03:
4c:38:fb:8d:21:25:e6:da:d0:73:b6:6e:6e:78:bb:4f:18:04:
31:59:9c:03:3e:eb:3b:ba:64:f7:c4:d5:51:eb:86:5d:7c:44:
cd:02:de:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:48:37 2025 by rpki-client