Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/p1HALT6ZGNHPmgH3T-vshmKpyhw.roa
File: p1HALT6ZGNHPmgH3T-vshmKpyhw.roa (raw, json)
Hash identifier: L9cwJO+b/hiJPWbziXNI4yH7NIYuGbKHTibeY6/5mr8=
Subject key identifier: A7:51:C0:2D:3E:99:18:D1:CF:9A:01:F7:4F:EB:EC:86:62:A9:CA:1C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019408C2EB88E371DA9FE81CF0B6E0493EF7
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/p1HALT6ZGNHPmgH3T-vshmKpyhw.roa
Signing time: Fri 27 Dec 2024 15:36:19 +0000
ROA not before: Fri 27 Dec 2024 15:36:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.16.0/22 maxlen: 22
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.74.0/24 maxlen: 24
31.56.75.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.146.0/23 maxlen: 24
31.57.147.0/24 maxlen: 24
31.57.151.0/24 maxlen: 24
31.57.152.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.178.0/24 maxlen: 24
31.57.179.0/24 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.182.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.176.0/22 maxlen: 24
31.58.200.0/22 maxlen: 24
31.58.216.0/22 maxlen: 24
31.58.240.0/22 maxlen: 24
31.58.252.0/22 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.42.0/24 maxlen: 24
31.59.43.0/24 maxlen: 24
31.59.56.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.58.0/24 maxlen: 24
31.59.64.0/22 maxlen: 24
31.59.80.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.124.0/22 maxlen: 24
31.59.130.0/24 maxlen: 24
31.59.176.0/22 maxlen: 22
31.59.180.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
31.59.188.0/22 maxlen: 22
31.59.192.0/22 maxlen: 22
31.59.216.0/22 maxlen: 24
31.59.228.0/24 maxlen: 24
31.59.229.0/24 maxlen: 24
31.59.231.0/24 maxlen: 24
31.59.244.0/24 maxlen: 24
31.59.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 28 Dec 2024 04:57:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:08:c2:eb:88:e3:71:da:9f:e8:1c:f0:b6:e0:49:3e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 27 15:36:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a751c02d3e9918d1cf9a01f74febec8662a9ca1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:07:2e:38:84:6a:fb:fc:92:14:a8:e5:9c:4a:
d6:87:5d:bd:c3:05:c2:f7:97:b0:88:0a:22:9b:d4:
50:20:6e:09:de:1f:b9:84:22:b1:2a:f4:f9:15:cb:
a8:bb:e1:f5:05:69:e9:f0:6d:66:fb:7e:17:1d:5f:
8d:02:99:16:8b:04:27:cf:e1:28:49:e9:a0:1b:bf:
bd:4d:67:5b:c4:a0:c4:01:2f:d1:41:7d:74:84:bf:
68:4b:97:e5:a5:05:8e:fd:62:9c:9e:0f:6e:db:55:
33:f4:53:5b:74:d5:13:56:3e:2f:6c:38:7c:19:17:
56:6e:5e:8c:04:4d:75:31:b0:7e:9f:50:d7:cb:c9:
4f:4c:a9:08:0c:b2:01:4d:68:f2:c0:9d:58:a7:28:
41:f7:d8:6a:7e:0c:aa:7c:ea:e7:57:bf:a5:1a:2b:
51:6b:af:e9:1a:ec:0f:91:42:f5:37:b1:5f:6e:c5:
aa:d7:66:25:56:70:45:cf:fd:c3:a5:c9:3f:b7:57:
a6:73:13:d3:e5:d0:88:bd:54:bb:26:74:f5:d2:ea:
d7:19:b0:23:c2:03:61:3f:42:fc:1c:ab:fc:74:4b:
85:90:c8:c0:42:2c:fd:18:a8:38:bb:ff:45:d3:ca:
13:62:fc:f9:12:c4:23:16:7a:fc:3b:f1:42:e2:2e:
84:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:51:C0:2D:3E:99:18:D1:CF:9A:01:F7:4F:EB:EC:86:62:A9:CA:1C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/p1HALT6ZGNHPmgH3T-vshmKpyhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.16.0/22
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.71.0/24
31.56.74.0/23
31.56.89.0/24
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.57.132.0/23
31.57.146.0/23
31.57.151.0-31.57.152.255
31.57.176.0/21
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.34.0/23
31.58.152.0/22
31.58.176.0/22
31.58.200.0/22
31.58.216.0/22
31.58.240.0/22
31.58.252.0/22
31.59.41.0-31.59.43.255
31.59.56.0-31.59.58.255
31.59.64.0/22
31.59.80.0/22
31.59.96.0/22
31.59.112.0/22
31.59.124.0/22
31.59.130.0/24
31.59.176.0-31.59.195.255
31.59.216.0/22
31.59.228.0/23
31.59.231.0/24
31.59.244.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:16:60:66:65:b9:19:27:55:2f:cd:1c:4d:e3:30:bb:ef:f1:
6b:99:0e:f2:f3:1f:13:8c:e7:dd:eb:87:0b:c8:c4:05:c2:31:
f4:82:08:91:80:a3:8c:bb:fc:90:a0:c8:e6:8e:c6:d4:16:5a:
bb:0f:e5:e9:25:bb:15:69:d2:77:1b:69:6b:a9:d0:15:ea:d8:
67:4b:97:f4:5b:35:5b:9b:ba:2c:f3:87:56:c7:70:16:38:ac:
e4:12:0d:f2:06:4b:8e:07:48:37:47:63:cf:e1:5f:5e:4e:fb:
7a:2e:4e:b1:2e:9f:57:40:f1:d2:82:35:e6:b6:bc:27:ce:7c:
77:96:2a:77:b3:27:ba:64:a0:97:d0:e3:0b:19:91:a6:c8:d8:
08:98:bb:03:9d:42:bd:d7:5d:32:4b:53:47:52:61:5b:b6:3a:
89:f8:8d:04:d2:aa:ee:32:19:ca:94:b5:3b:f5:a2:40:24:a1:
dd:19:72:c3:e7:ea:1c:35:df:52:34:a3:89:a6:f5:da:7d:b4:
0b:69:97:3d:0e:5e:97:36:9d:b8:c7:5f:81:c8:2c:90:fa:35:
63:f0:69:57:1b:4d:45:1d:4e:fc:db:b7:12:19:8e:a1:19:c6:
4a:0e:1f:d4:c6:2e:74:64:aa:86:a8:aa:22:9d:ff:77:73:09:
a9:d2:19:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:48:42 2025 by rpki-client