Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qTUp_ZhX21_5ndwS9HUtTH4_JC4.roa
File: qTUp_ZhX21_5ndwS9HUtTH4_JC4.roa (raw, json)
Hash identifier: baSYQZCW1/5taM/Jyc8bRXtigQpTQXFh78njPaEy3fw=
Subject key identifier: A9:35:29:FD:98:57:DB:5F:F9:9D:DC:12:F4:75:2D:4C:7E:3F:24:2E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195A7CDFECD95A47D7474BACF86F43F59EF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qTUp_ZhX21_5ndwS9HUtTH4_JC4.roa
Signing time: Tue 18 Mar 2025 05:50:49 +0000
ROA not before: Tue 18 Mar 2025 05:50:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.42.0/24 maxlen: 24
31.56.43.0/24 maxlen: 24
31.56.47.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.103.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.113.0/24 maxlen: 24
31.57.114.0/24 maxlen: 24
31.57.115.0/24 maxlen: 24
31.57.116.0/24 maxlen: 24
31.57.117.0/24 maxlen: 24
31.57.118.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.200.0/24 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.212.0/24 maxlen: 24
31.57.213.0/24 maxlen: 24
31.57.214.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.57.254.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.76.0/24 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Mar 2025 15:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a7:cd:fe:cd:95:a4:7d:74:74:ba:cf:86:f4:3f:59:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 18 05:50:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a93529fd9857db5ff99ddc12f4752d4c7e3f242e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5f:ee:e5:73:06:99:5c:63:6c:54:b8:da:bf:
e3:3c:94:e0:7c:a6:3f:03:c8:1e:2d:01:ca:04:f4:
a6:24:c1:60:e2:35:92:93:ca:9a:fa:bb:70:9a:73:
01:92:37:f4:1b:ed:ef:15:6d:bb:12:27:f0:53:61:
6c:52:9b:4e:ef:2b:f2:ff:f6:ad:f5:fb:97:5f:85:
27:ab:f0:3b:d4:ee:1a:f5:dc:14:07:db:22:e8:76:
a8:71:ac:77:56:06:8d:65:d2:da:0d:ac:43:61:05:
7e:f4:d5:99:b8:c5:3a:73:81:76:05:9b:fe:b3:2d:
a8:d9:13:d8:fa:94:d9:b8:ec:2b:dd:dc:16:6e:14:
11:12:cc:d0:46:67:d2:c0:d0:3a:c2:80:f1:73:d4:
c3:16:17:13:36:7e:41:80:93:54:e6:55:a7:3d:1c:
9f:f5:9f:2a:58:60:cb:96:2c:6a:e6:5b:47:5e:d8:
15:01:2c:23:5b:1d:1b:ab:c3:8b:28:e1:79:a7:67:
29:32:a0:fe:f5:d4:fd:6b:b3:4b:f8:6b:62:41:1b:
c6:b0:89:cb:77:7f:16:0d:fb:8c:64:73:32:22:13:
c9:00:82:af:0e:84:f0:94:b5:3d:c5:ec:57:f9:64:
15:29:8b:24:be:71:74:f9:28:8d:79:3c:e1:0e:5c:
08:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:35:29:FD:98:57:DB:5F:F9:9D:DC:12:F4:75:2D:4C:7E:3F:24:2E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qTUp_ZhX21_5ndwS9HUtTH4_JC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.47.0/24
31.56.57.0/24
31.56.71.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.103.0-31.57.111.255
31.57.113.0-31.57.118.255
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0/21
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.76.0/24
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.224.0/22
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
Signature Algorithm: sha256WithRSAEncryption
33:81:c4:bc:ba:63:cf:9a:8a:2f:ed:fc:11:80:a3:1d:94:ac:
f2:24:e0:22:1d:e4:9f:bc:aa:60:48:60:35:ed:37:de:e8:cb:
f0:14:9b:65:ae:ad:fb:4d:08:3d:a9:0c:35:42:1b:65:53:5d:
c1:61:3a:dd:29:a7:e0:cc:ed:64:bb:90:0d:bb:5b:d0:52:05:
30:5a:5d:2b:1a:99:5d:9d:7a:50:7c:a1:80:2e:98:23:1b:8c:
e8:af:c6:b4:a1:e5:55:f2:da:a3:c1:01:ff:9a:2d:71:d4:e3:
42:7e:44:0c:9b:92:73:fa:08:05:4d:e6:58:48:fa:f6:9b:57:
8f:ec:da:b6:7d:66:67:cc:59:81:df:81:8f:5c:0e:99:0f:cf:
2b:f2:49:94:b6:c9:51:bd:da:53:1d:3a:45:85:2e:24:5e:98:
a6:b5:c5:c1:e4:e6:bc:bf:ea:37:8e:fe:f9:5a:41:c2:67:50:
f1:d9:ed:77:e9:b5:49:78:c4:d8:36:4d:f5:12:3e:b5:09:f6:
a5:38:6b:a7:f6:20:7e:6f:60:ff:f5:8c:ab:ad:d5:e7:25:bc:
0e:2e:de:25:10:4e:e3:a9:1d:d8:f6:18:ad:8c:32:ca:ef:81:
65:a7:20:62:83:35:0b:2c:aa:ee:d7:51:e4:4e:33:1c:5a:a9:
ad:8c:5b:50
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgISAZWnzf7NlaR9dHS6z4b0P1nvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMzE4MDU1MDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTM1MjlmZDk4NTdkYjVmZjk5ZGRjMTJmNDc1MmQ0YzdlM2YyNDJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnF/u5XMGmVxjbFS42r/jPJTgfKY/
A8geLQHKBPSmJMFg4jWSk8qa+rtwmnMBkjf0G+3vFW27EifwU2FsUptO7yvy//at
9fuXX4Unq/A71O4a9dwUB9si6Haocax3VgaNZdLaDaxDYQV+9NWZuMU6c4F2BZv+
sy2o2RPY+pTZuOwr3dwWbhQREszQRmfSwNA6woDxc9TDFhcTNn5BgJNU5lWnPRyf
9Z8qWGDLlixq5ltHXtgVASwjWx0bq8OLKOF5p2cpMqD+9dT9a7NL+GtiQRvGsInL
d38WDfuMZHMyIhPJAIKvDoTwlLU9xexX+WQVKYskvnF0+SiNeTzhDlwIWwIDAQAB
o4IDAzCCAv8wHQYDVR0OBBYEFKk1Kf2YV9tf+Z3cEvR1LUx+PyQuMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvcVRVcF9aaFgyMV81bmR3UzlIVXRUSDRfSkM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBFwYIKwYBBQUHAQcBAf8EggEGMIIBAjCB/wQCAAEwgfgD
BAEfOAQDBAAfOBgDBAEfOCoDBAAfOC8DBAAfODkDBAAfOEcDBAEfOFoDBAMfOGgD
BAEfOHIwDAMEAR84dgMEAh84eAMEAh84yDAMAwQAHzlnAwQEHzlgMAwDBAAfOXED
BAAfOXYDBAEfOYQDBAMfOYgDBAEfOZIDBAIfOagDBAMfObADBAIfOcADBAEfOcgw
DAMEBB850AMEAh854AMEAh856AMEAh85/AMEAR86IgMEAB86KAMEAR86MgMEAh86
RAMEAB86TAMEAh86VAMEAh86mAMEAh86rAMEAh864AMEAh87TAMEAh87YAMEAh87
cAMEAh87eDANBgkqhkiG9w0BAQsFAAOCAQEAM4HEvLpjz5qKL+38EYCjHZSs8iTg
Ih3kn7yqYEhgNe033ujL8BSbZa6t+00IPakMNUIbZVNdwWE63Smn4MztZLuQDbtb
0FIFMFpdKxqZXZ16UHyhgC6YIxuM6K/GtKHlVfLao8EB/5otcdTjQn5EDJuSc/oI
BU3mWEj69ptXj+zatn1mZ8xZgd+Bj1wOmQ/PK/JJlLbJUb3aUx06RYUuJF6YprXF
weTmvL/qN47++VpBwmdQ8dntd+m1SXjE2DZN9RI+tQn2pThrp/Ygfm9g//WMq63V
5yW8Di7eJRBO46kd2PYYrYwyyu+BZacgYoM1Cyyq7tdR5E4zHFqprYxbUA==
-----END CERTIFICATE-----
Generated at Fri Apr 18 09:49:37 2025 by rpki-client