Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tFR8Hk9bkQ36xFRIvfX2KXF73LA.roa
File: tFR8Hk9bkQ36xFRIvfX2KXF73LA.roa (raw, json)
Hash identifier: XXSIoPsj5xbxE8dOJq0Zu9u8ypzNnHJNwDw3MiV/hHo=
Subject key identifier: B4:54:7C:1E:4F:5B:91:0D:FA:C4:54:48:BD:F5:F6:29:71:7B:DC:B0
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196DF5FF7CAE2D865BE111632D9C1DF9719
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tFR8Hk9bkQ36xFRIvfX2KXF73LA.roa
Signing time: Sat 17 May 2025 17:52:10 +0000
ROA not before: Sat 17 May 2025 17:52:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.57.0/24 maxlen: 24
31.56.67.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/22 maxlen: 24
31.56.224.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.46.0/23 maxlen: 24
31.57.92.0/22 maxlen: 22
31.57.98.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.118.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.171.0/24 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.86.0/24 maxlen: 24
31.58.144.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.120.0/24 maxlen: 24
31.59.121.0/24 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 18 May 2025 17:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:df:5f:f7:ca:e2:d8:65:be:11:16:32:d9:c1:df:97:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 17 17:52:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4547c1e4f5b910dfac45448bdf5f629717bdcb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c9:ea:a7:98:d3:d4:f6:0a:bd:da:da:4f:51:
12:0e:6f:5e:e8:ac:59:c7:71:5c:7d:47:85:7c:8c:
69:01:d5:a8:9e:71:4c:6f:bb:ae:91:11:0b:ac:5d:
2b:e2:e0:77:c4:bf:b9:2c:20:c9:68:4e:cd:8f:a8:
92:a6:b5:8d:47:21:de:5b:88:41:99:b3:68:91:c4:
8f:13:fe:10:73:ab:1b:69:c0:b3:60:0f:b2:ec:d4:
31:34:71:d1:f3:a6:4c:84:87:26:82:19:da:19:6f:
d0:7b:94:29:7c:e0:e3:ab:7b:61:3d:31:d2:47:be:
54:8a:5c:d7:3f:93:e4:ba:dc:c2:7e:02:5e:f2:32:
6b:fd:d8:f0:93:4a:90:7c:0a:ff:37:0d:65:23:61:
c6:4c:59:26:db:b7:fd:6b:1b:72:f5:5e:30:12:77:
54:3e:4b:45:38:1e:6d:61:51:2f:ab:01:bd:b8:62:
c1:87:56:60:ec:f8:0b:6a:d0:58:1b:96:08:1e:89:
5d:48:04:72:d2:b1:4d:75:ca:d4:66:75:d2:c9:f5:
fc:f9:4a:f1:b2:cd:8b:f1:19:b0:e0:2d:f4:8b:2d:
49:2a:f5:32:17:00:c0:3e:41:21:2e:dd:da:00:12:
1f:f4:59:19:43:ea:70:ce:f8:e3:cb:0a:e9:2c:7f:
65:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:54:7C:1E:4F:5B:91:0D:FA:C4:54:48:BD:F5:F6:29:71:7B:DC:B0
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tFR8Hk9bkQ36xFRIvfX2KXF73LA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.57.0/24
31.56.67.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0/22
31.56.200.0/22
31.56.208.0/21
31.56.220.0-31.56.231.255
31.56.236.0/22
31.57.36.0/22
31.57.46.0/23
31.57.92.0/22
31.57.98.0/24
31.57.104.0/21
31.57.118.0/24
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.188.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.68.0/22
31.58.84.0/22
31.58.144.0/24
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.41.0/24
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.151.255
31.59.160.0/20
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:d4:58:c0:e0:10:3a:b4:3e:6d:f3:65:92:38:ab:c5:99:ae:
56:e4:de:48:f0:65:97:1b:e9:9a:2a:42:5a:07:79:a8:77:34:
98:47:3f:34:98:04:e6:88:31:8c:48:1b:b1:fa:4d:1a:8a:30:
23:37:32:16:df:94:0f:c9:08:b2:72:b3:22:9d:a4:7f:b2:da:
76:23:a8:4e:91:73:5e:38:a8:f7:62:53:2a:25:a6:88:f5:bc:
07:56:7d:35:8c:0b:39:1d:0f:cc:10:da:3f:9d:5d:bf:68:7c:
ec:61:fc:15:6c:a1:dc:9d:77:8c:33:b6:f5:6d:09:da:06:08:
4e:e7:27:4e:be:5e:f7:17:e1:af:0a:6f:78:80:a0:42:d8:43:
19:c7:7b:c0:68:5a:06:dc:8f:da:4e:12:00:41:c3:75:59:d7:
ff:2e:71:eb:11:13:f7:91:35:c0:1a:17:d9:e3:91:f3:ec:7e:
5c:43:95:78:fa:98:59:a0:22:a8:7b:30:ba:c4:19:c0:84:ac:
07:dd:65:56:ab:44:56:c7:f7:5a:49:f0:8e:af:1b:db:46:59:
e1:d9:ab:bf:24:58:3b:54:23:54:5f:3a:a7:dc:29:0e:9b:23:
2f:71:b4:c9:75:a5:46:f0:2d:5f:9a:fc:3d:8b:6e:c9:2c:92:
3f:a5:fe:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 03:45:39 2025 by rpki-client