Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/s8STtNLG_V6ufLZbxWi_z4lzrSQ.roa
File: s8STtNLG_V6ufLZbxWi_z4lzrSQ.roa (raw, json)
Hash identifier: IKFN73I22yMKx6mn7J2hfQylWeikGSUzc5wIIwXRbdI=
Subject key identifier: B3:C4:93:B4:D2:C6:FD:5E:AE:7C:B6:5B:C5:68:BF:CF:89:73:AD:24
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019531D5B081CBF5B3BBB37671C2BC607023
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/s8STtNLG_V6ufLZbxWi_z4lzrSQ.roa
Signing time: Sun 23 Feb 2025 08:04:02 +0000
ROA not before: Sun 23 Feb 2025 08:04:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.85.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.141.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.244.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.66.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
31.59.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 23 Feb 2025 15:18:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:31:d5:b0:81:cb:f5:b3:bb:b3:76:71:c2:bc:60:70:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 23 08:04:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3c493b4d2c6fd5eae7cb65bc568bfcf8973ad24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b1:73:d4:86:f1:48:2d:d4:a6:ef:e3:05:9f:
45:04:e8:7d:b0:07:05:db:24:71:08:9c:57:a4:60:
b6:f5:51:ce:4a:a2:a2:4d:00:85:d2:48:e7:ea:76:
3d:1d:d6:cc:6a:be:a5:ef:90:2b:77:48:cc:40:e2:
3e:5c:3c:54:59:1f:e7:78:ea:1c:f5:83:2d:55:de:
fb:a0:9e:47:d0:08:89:94:e9:81:3d:96:99:af:3e:
cc:40:b6:14:27:cf:d4:fe:87:be:ad:1f:7d:45:d4:
7d:cb:05:89:e8:fd:27:35:21:5b:05:37:7a:df:1c:
c0:cd:5a:78:ad:ea:85:65:ff:20:0c:28:81:e1:34:
6d:20:02:94:16:d4:1c:60:4b:3e:42:9d:94:f8:de:
70:14:5e:bc:44:98:91:1e:e7:4a:43:98:55:eb:73:
b0:69:39:26:c8:af:62:be:c3:98:4a:42:d7:0e:80:
dd:e3:b7:33:7c:cb:9f:93:b1:97:a2:0d:86:b3:b6:
52:59:66:45:a9:95:90:a6:03:9d:99:21:9d:9d:99:
16:39:5a:5b:ec:4e:1e:85:e7:97:e5:5d:25:21:37:
db:67:17:77:45:ca:fd:01:ab:69:d9:86:ab:0e:c8:
7e:95:60:d0:34:b6:b0:68:bc:22:7f:76:6c:d9:3c:
18:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C4:93:B4:D2:C6:FD:5E:AE:7C:B6:5B:C5:68:BF:CF:89:73:AD:24
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/s8STtNLG_V6ufLZbxWi_z4lzrSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.71.0/24
31.56.77.0/24
31.56.85.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.104.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.176.0/21
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.244.0/24
31.57.252.0/22
31.58.34.0/23
31.58.50.0/23
31.58.66.0/24
31.58.152.0/22
31.59.96.0/22
31.59.112.0/22
31.59.184.0/22
Signature Algorithm: sha256WithRSAEncryption
62:6c:f6:9e:b6:a5:3b:2e:c0:60:9a:2e:b7:54:2d:22:98:ea:
43:ed:40:7d:72:26:4c:73:f0:cf:59:01:09:e8:08:06:ae:a3:
a0:53:1a:8e:76:00:5f:8a:3a:b5:8c:0c:28:65:60:15:d6:cc:
47:2b:14:ab:97:7a:05:91:e4:ff:b6:5a:38:87:a3:c1:22:0e:
96:bf:c3:b7:26:c5:a9:f1:23:cc:86:d4:8e:36:af:6d:b1:70:
d5:6d:5a:70:7e:ac:7c:22:6c:f5:50:f1:d0:85:28:73:79:47:
8c:ef:e1:08:c6:5d:85:5b:1c:c4:b7:8f:eb:b7:ea:8d:3c:65:
48:4e:2b:fc:5b:79:b5:d6:28:e3:4d:90:fc:98:fe:0a:cc:8f:
a5:2f:01:22:75:3a:3a:69:f9:a7:c7:7c:26:a3:15:20:43:3f:
76:ce:a0:07:d6:24:ae:08:fa:c5:cb:d5:61:61:2f:45:7e:b7:
31:e4:48:dd:9f:0e:7b:2b:3a:08:64:23:07:b0:60:82:6b:b5:
07:2d:db:13:f7:cd:8a:d7:9b:24:d1:36:a8:d2:e2:ca:02:92:
61:b6:81:66:66:3a:dd:38:02:d9:92:a2:95:30:17:6f:b4:48:
a2:c5:bc:ec:81:08:b7:1e:20:5a:24:53:9a:bb:30:1c:e0:e6:
85:53:d3:ab
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgISAZUx1bCBy/Wzu7N2ccK8YHAjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMjIzMDgwNDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiM2M0OTNiNGQyYzZmZDVlYWU3Y2I2NWJjNTY4YmZjZjg5NzNhZDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrFz1IbxSC3Upu/jBZ9FBOh9sAcF
2yRxCJxXpGC29VHOSqKiTQCF0kjn6nY9HdbMar6l75Ard0jMQOI+XDxUWR/neOoc
9YMtVd77oJ5H0AiJlOmBPZaZrz7MQLYUJ8/U/oe+rR99RdR9ywWJ6P0nNSFbBTd6
3xzAzVp4reqFZf8gDCiB4TRtIAKUFtQcYEs+Qp2U+N5wFF68RJiRHudKQ5hV63Ow
aTkmyK9ivsOYSkLXDoDd47czfMufk7GXog2Gs7ZSWWZFqZWQpgOdmSGdnZkWOVpb
7E4eheeX5V0lITfbZxd3Rcr9Aatp2YarDsh+lWDQNLawaLwif3Zs2TwYpwIDAQAB
o4ICzDCCAsgwHQYDVR0OBBYEFLPEk7TSxv1erny2W8Vov8+Jc60kMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvczhTVHROTEdfVjZ1ZkxaYnhXaV96NGx6clNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHhBggrBgEFBQcBBwEB/wSB0TCBzjCBywQCAAEwgcQDBAEf
OAQDBAAfOBgDBAEfOCoDBAAfODkDBAAfOEcDBAAfOE0DBAAfOFUDBAEfOFoDBAMf
OGgDBAEfOHIwDAMEAR84dgMEAh84eAMEAh84yAMEAx85aAMEAR85hAMEAx85iAME
AR85kgMEAx85sAMEAh85wAMEAR85yDAMAwQEHznQAwQCHzngAwQCHznoAwQAHzn0
AwQCHzn8AwQBHzoiAwQBHzoyAwQAHzpCAwQCHzqYAwQCHztgAwQCHztwAwQCHzu4
MA0GCSqGSIb3DQEBCwUAA4IBAQBibPaetqU7LsBgmi63VC0imOpD7UB9ciZMc/DP
WQEJ6AgGrqOgUxqOdgBfijq1jAwoZWAV1sxHKxSrl3oFkeT/tlo4h6PBIg6Wv8O3
JsWp8SPMhtSONq9tsXDVbVpwfqx8Imz1UPHQhShzeUeM7+EIxl2FWxzEt4/rt+qN
PGVITiv8W3m11ijjTZD8mP4KzI+lLwEidTo6afmnx3wmoxUgQz92zqAH1iSuCPrF
y9VhYS9Ffrcx5Ejdnw57KzoIZCMHsGCCa7UHLdsT982K15sk0Tao0uLKApJhtoFm
ZjrdOALZkqKVMBdvtEiixbzsgQi3HiBaJFOauzAc4OaFU9Or
-----END CERTIFICATE-----
Generated at Fri Apr 18 09:50:53 2025 by rpki-client