Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nInFWX8etZ03MpkiStWHz1tAcFo.roa
File: nInFWX8etZ03MpkiStWHz1tAcFo.roa (raw, json)
Hash identifier: GaQ4DHZwOFfQNEL6uDt2jtvP+vQxi/TnUq6anKkX9Ik=
Subject key identifier: 9C:89:C5:59:7F:1E:B5:9D:37:32:99:22:4A:D5:87:CF:5B:40:70:5A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195D922C781C25FE52F3F723C33DA2C1B17
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nInFWX8etZ03MpkiStWHz1tAcFo.roa
Signing time: Thu 27 Mar 2025 19:44:50 +0000
ROA not before: Thu 27 Mar 2025 19:44:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.87.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.103.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.113.0/24 maxlen: 24
31.57.114.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.143.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.168.0/23 maxlen: 23
31.57.176.0/21 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.214.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.76.0/24 maxlen: 24
31.58.77.0/24 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 28 Mar 2025 08:12:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d9:22:c7:81:c2:5f:e5:2f:3f:72:3c:33:da:2c:1b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 27 19:44:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c89c5597f1eb59d373299224ad587cf5b40705a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f9:fa:a4:65:85:29:10:32:3e:fb:79:ab:1e:
42:5e:91:e8:40:98:f1:3d:72:c0:71:4c:ba:c2:a5:
3d:2e:90:94:df:e5:dd:a0:91:09:44:40:f2:ec:48:
81:fc:5d:00:28:11:0d:1b:f9:c1:a8:84:60:ca:ac:
34:3f:11:b2:3a:32:69:3f:95:eb:c7:d1:b1:3b:2f:
1b:a6:da:ca:b4:fd:20:46:b5:3f:9e:5a:27:44:48:
a0:99:99:3b:d1:32:a0:e3:f1:aa:ef:b7:15:6b:fb:
af:43:39:10:cc:26:86:37:41:cb:39:73:2c:f6:69:
52:4b:14:d7:e5:c7:ab:17:e3:d2:f7:bc:b2:f7:28:
f5:2c:48:b5:c1:56:d9:63:96:e7:d9:c5:22:0f:a4:
11:b4:ce:a9:cb:63:ff:2a:84:76:97:73:aa:fe:5d:
32:7f:72:58:81:0d:22:07:ac:7d:95:f6:40:b2:36:
af:25:14:95:a2:77:3e:1a:e9:d4:92:76:15:91:16:
57:9c:7e:b1:40:28:cf:9b:38:de:ec:50:4a:12:c9:
b0:81:3c:7e:d6:32:97:ce:fa:bb:7b:2c:ed:d6:01:
35:26:98:9f:74:d5:f3:95:98:ea:6d:73:fe:84:30:
d0:cf:c0:14:09:26:65:86:fd:de:48:9a:4a:ee:df:
25:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:89:C5:59:7F:1E:B5:9D:37:32:99:22:4A:D5:87:CF:5B:40:70:5A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nInFWX8etZ03MpkiStWHz1tAcFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.57.0/24
31.56.71.0/24
31.56.87.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.103.0-31.57.111.255
31.57.113.0-31.57.114.255
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0/21
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.76.0/23
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.224.0/22
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.175.255
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
67:aa:64:83:9c:a8:ca:a4:64:fd:6e:98:81:ac:7e:52:21:5e:
cb:24:47:6f:59:d3:1c:64:06:2e:70:d5:2b:a0:5e:cf:8b:9f:
34:3e:f7:9b:38:1c:74:70:79:d5:fa:d3:a4:24:06:7e:dd:cb:
aa:fd:7e:6b:82:6e:20:d1:64:80:5f:a2:9f:3d:be:8f:17:7f:
52:bc:ff:83:c2:75:0d:b6:10:c5:50:ff:c9:95:a9:e1:24:bf:
23:25:bf:f7:17:1f:5d:e4:5c:09:f1:64:a6:e8:8f:be:dd:56:
c5:cc:1e:20:1b:02:2a:9d:02:24:88:1e:e0:0d:3e:a4:d0:54:
6f:fb:c9:46:9c:51:14:50:02:86:26:12:dd:65:3c:f3:12:9f:
b0:1b:88:80:b8:59:78:f1:14:2b:3a:42:e6:6b:e7:e3:82:ad:
34:4e:04:e4:c3:c9:4e:bf:21:f5:e3:b1:bd:2f:0c:e7:39:f3:
00:1f:1e:29:18:70:d9:0f:cc:65:d6:14:9c:33:7a:36:2e:af:
16:61:62:ae:15:22:10:fd:cc:e4:96:6f:fc:e3:c1:26:ea:6f:
a0:90:67:0a:08:54:ad:0e:28:c7:f2:b9:f4:f1:59:17:cb:f2:
53:c2:d3:cf:11:e2:63:93:fa:1a:ef:71:80:24:e5:df:26:46:
8f:02:88:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:55:42 2025 by rpki-client