Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nmUa92i4HgmiW_1t72DCLZ5rUX4.roa
File: nmUa92i4HgmiW_1t72DCLZ5rUX4.roa (raw, json)
Hash identifier: dJMbISDPYV7Q5iVg7uKObvvV3Cxca72vSqOphQrvODQ=
Subject key identifier: 9E:65:1A:F7:68:B8:1E:09:A2:5B:FD:6D:EF:60:C2:2D:9E:6B:51:7E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01940BA0409F48E17D3FA9D39AE5AA0CEB07
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nmUa92i4HgmiW_1t72DCLZ5rUX4.roa
Signing time: Sat 28 Dec 2024 04:57:19 +0000
ROA not before: Sat 28 Dec 2024 04:57:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.16.0/22 maxlen: 22
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.74.0/24 maxlen: 24
31.56.75.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.16.0/22 maxlen: 24
31.57.20.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.146.0/23 maxlen: 24
31.57.147.0/24 maxlen: 24
31.57.151.0/24 maxlen: 24
31.57.152.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.178.0/24 maxlen: 24
31.57.179.0/24 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.182.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.176.0/22 maxlen: 24
31.58.200.0/22 maxlen: 24
31.58.216.0/22 maxlen: 24
31.58.240.0/22 maxlen: 24
31.58.252.0/22 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.42.0/24 maxlen: 24
31.59.43.0/24 maxlen: 24
31.59.56.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.58.0/24 maxlen: 24
31.59.64.0/22 maxlen: 24
31.59.80.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.124.0/22 maxlen: 24
31.59.130.0/24 maxlen: 24
31.59.176.0/22 maxlen: 22
31.59.180.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
31.59.188.0/22 maxlen: 22
31.59.192.0/22 maxlen: 22
31.59.216.0/22 maxlen: 24
31.59.228.0/24 maxlen: 24
31.59.229.0/24 maxlen: 24
31.59.231.0/24 maxlen: 24
31.59.244.0/24 maxlen: 24
31.59.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 28 Dec 2024 15:19:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:0b:a0:40:9f:48:e1:7d:3f:a9:d3:9a:e5:aa:0c:eb:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 28 04:57:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e651af768b81e09a25bfd6def60c22d9e6b517e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:66:a8:81:53:4d:04:42:24:5c:80:df:72:3c:
77:7c:3e:17:49:9b:5d:b1:8e:b7:91:8d:83:ac:1c:
d2:ab:8d:86:16:91:30:ca:30:ae:9c:c4:36:48:f6:
86:30:73:f2:2a:49:80:45:4c:f1:6e:2a:57:5d:52:
ae:ef:e4:93:7f:f1:41:79:79:92:60:e1:3a:11:6d:
ac:dc:b4:c8:47:2a:04:eb:a4:b5:72:4e:27:23:d9:
86:44:6e:7c:ec:91:c7:ad:0f:39:ab:2e:73:95:2a:
39:95:d3:4a:60:c9:5b:a6:ef:df:44:43:af:a3:37:
d3:c4:a6:3c:23:99:07:55:5e:3c:bb:cc:13:cf:82:
75:ef:e6:91:af:af:83:7e:e9:f4:72:67:36:e6:71:
6e:9e:ab:fc:3d:1e:53:bd:ce:6f:e8:12:6b:57:df:
85:0b:03:a5:9b:fe:69:fe:69:78:ac:8a:a4:64:37:
aa:bf:4d:2a:58:7c:5b:d3:5a:9f:b6:c0:7f:09:57:
a3:61:53:10:e4:7f:54:a1:11:27:79:9c:a7:0b:4b:
87:37:e7:0d:03:2e:c5:f8:67:7e:3e:b5:e7:71:92:
1a:b3:b3:99:19:79:c9:80:0a:19:0e:08:52:36:7a:
2b:5f:db:6a:62:c8:e4:0c:d8:68:af:df:68:e6:5b:
5f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:65:1A:F7:68:B8:1E:09:A2:5B:FD:6D:EF:60:C2:2D:9E:6B:51:7E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nmUa92i4HgmiW_1t72DCLZ5rUX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.16.0/22
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.71.0/24
31.56.74.0/23
31.56.89.0/24
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.16.0/21
31.57.132.0/23
31.57.146.0/23
31.57.151.0-31.57.152.255
31.57.176.0/21
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.34.0/23
31.58.152.0/22
31.58.176.0/22
31.58.200.0/22
31.58.216.0/22
31.58.240.0/22
31.58.252.0/22
31.59.41.0-31.59.43.255
31.59.56.0-31.59.58.255
31.59.64.0/22
31.59.80.0/22
31.59.96.0/22
31.59.112.0/22
31.59.124.0/22
31.59.130.0/24
31.59.176.0-31.59.195.255
31.59.216.0/22
31.59.228.0/23
31.59.231.0/24
31.59.244.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:f2:16:d3:5c:b7:81:60:fa:38:b6:5c:6e:8c:7f:a2:fe:1f:
fd:af:b4:77:1d:a1:a6:e5:e2:1b:43:b9:79:e0:b2:97:6b:8e:
78:a2:3b:92:f5:4c:6e:b6:32:5f:f7:64:25:88:7c:bd:23:37:
bf:f4:0f:4e:63:7b:b8:ea:57:7f:d6:ab:0f:f0:37:99:2c:a0:
7a:33:8f:99:d5:4d:c6:7d:65:78:7a:1a:8d:90:c4:d2:70:d1:
10:f1:f5:9f:93:f4:b2:28:2e:3a:67:f3:dc:fb:da:8f:28:48:
dc:45:e0:92:72:df:01:ba:2e:2e:eb:06:db:a0:e4:43:74:54:
42:d4:ab:f2:e5:33:bb:17:1e:61:72:db:58:ff:49:c0:ac:39:
54:d3:24:f6:9e:ce:9d:cd:1a:b7:66:95:05:2c:dd:4e:fd:33:
e8:bb:9f:f6:86:d2:d5:fe:25:2f:46:91:f3:12:0d:c5:9e:f9:
64:0a:76:a1:9e:43:49:9d:b8:79:4e:e3:85:a6:d5:89:41:2b:
3e:ce:de:df:a9:05:a4:6c:56:f5:6a:27:9a:9d:94:25:dc:5e:
6f:36:4b:d5:29:1c:5b:f4:32:45:83:db:6f:bd:1a:04:5d:a4:
e2:a4:8a:97:c3:81:cc:bd:3c:05:e9:2e:75:b4:e7:fb:f3:ce:
dd:25:2d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:48:43 2025 by rpki-client