Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mZzra-PmZC9EI4OLm_jD_-wgJ80.roa
File: mZzra-PmZC9EI4OLm_jD_-wgJ80.roa (raw, json)
Hash identifier: dFlsUwDINneShQFmQU9pW++8w4cj92lg8pNcjIUT3OI=
Subject key identifier: 99:9C:EB:6B:E3:E6:64:2F:44:23:83:8B:9B:F8:C3:FF:EC:20:27:CD
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01948EB976970C9738C0EFF233A78B72F71D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mZzra-PmZC9EI4OLm_jD_-wgJ80.roa
Signing time: Wed 22 Jan 2025 15:55:06 +0000
ROA not before: Wed 22 Jan 2025 15:55:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.74.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.120.0/24 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.122.0/24 maxlen: 24
31.56.156.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.65.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.33.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.142.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.163.0/24 maxlen: 24
31.58.230.0/23 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.42.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.108.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
31.59.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Jan 2025 07:25:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8e:b9:76:97:0c:97:38:c0:ef:f2:33:a7:8b:72:f7:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 22 15:55:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=999ceb6be3e6642f4423838b9bf8c3ffec2027cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:dd:35:eb:07:f3:a9:e0:2e:87:8f:8f:8d:36:
3a:0e:44:54:f7:4a:77:e5:c3:6a:4f:af:4d:b3:96:
66:d5:a5:c1:8d:cf:68:a2:6b:dd:71:5e:3b:81:2e:
60:02:c4:33:88:33:ea:77:a1:78:ce:99:d6:d8:80:
b8:39:8c:a6:6c:b4:d6:4f:b0:77:4c:dd:81:34:7e:
08:60:22:59:8c:cd:4b:17:f5:f8:ce:8d:f3:6a:56:
fb:e9:f7:d2:48:18:57:bd:72:0a:0d:35:4c:46:67:
2e:88:72:a7:c6:14:12:c9:ec:5e:f6:77:93:f5:13:
c8:10:6c:61:e1:5f:4a:02:d9:12:f0:ca:07:48:1c:
ef:8a:b1:f8:19:2a:64:0f:04:60:29:ec:84:95:66:
26:66:bc:b4:2c:a5:72:c3:d9:92:95:c8:ac:9f:79:
05:a6:a2:ed:c6:16:a7:28:a9:f6:93:af:2b:7e:a6:
86:25:c5:3b:ed:2e:d9:62:eb:87:ab:ae:c5:db:1e:
40:a8:e7:96:c3:63:72:5e:74:ce:ca:2c:77:02:52:
38:b0:b8:dd:a7:d0:60:51:47:ee:9f:ca:cc:06:c6:
3f:01:82:5a:9c:5b:85:47:c6:9b:35:53:05:93:74:
6d:4d:ce:a8:bc:ef:9f:71:8f:a9:c3:90:92:41:46:
8f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9C:EB:6B:E3:E6:64:2F:44:23:83:8B:9B:F8:C3:FF:EC:20:27:CD
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mZzra-PmZC9EI4OLm_jD_-wgJ80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.74.0/24
31.56.89.0-31.56.91.255
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.156.0/24
31.56.200.0/22
31.57.65.0/24
31.57.104.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.176.0/21
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.33.0-31.58.35.255
31.58.142.0/24
31.58.152.0/22
31.58.163.0/24
31.58.230.0/23
31.59.41.0-31.59.42.255
31.59.57.0/24
31.59.96.0/22
31.59.108.0/24
31.59.112.0/22
31.59.184.0/22
31.59.228.0/24
Signature Algorithm: sha256WithRSAEncryption
53:c5:28:55:91:f7:0f:b7:a2:a7:bc:ab:83:5a:73:d9:12:f0:
18:d5:cc:21:bf:f1:71:51:d1:ad:e4:33:45:c7:44:98:72:e6:
1a:96:29:18:b8:a9:c9:72:5f:5d:f0:78:74:85:f3:4e:76:ce:
1e:b1:dd:32:89:eb:ce:e4:cb:eb:68:c6:5d:33:19:f6:8b:92:
4e:3d:07:5b:40:b2:60:a7:02:bc:b3:02:0b:5b:a2:98:8d:eb:
5a:42:ee:18:75:9b:6c:a7:ad:98:6e:87:e7:ad:0a:e8:60:4d:
b5:b6:7a:00:82:8e:62:1f:0d:46:54:32:77:5f:81:1f:e2:7a:
5a:a2:b4:bd:5c:81:cc:9c:55:71:97:9b:b1:fa:88:a4:46:34:
a1:6b:33:ad:36:b9:80:4c:6d:7e:0c:0e:bf:47:a8:ad:9d:69:
fa:55:ba:18:d4:e4:71:db:53:83:53:40:bd:8e:56:09:dc:ea:
a1:75:5a:7f:7d:94:d2:b3:07:4f:42:7b:05:19:50:6a:58:49:
f3:14:d2:2c:f9:04:35:46:b4:b9:7a:7d:a1:4f:fc:aa:2b:20:
d0:00:63:c7:9a:ca:8a:54:ed:82:d8:94:10:cf:c9:63:c0:77:
03:1f:c7:9f:34:dd:cb:e3:25:42:e0:d7:85:bf:1c:17:7b:e2:
8b:a5:8c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:51:11 2025 by rpki-client