Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tv7kC5imC-b861SQ0EqT4q8mw8U.roa
File: tv7kC5imC-b861SQ0EqT4q8mw8U.roa (raw, json)
Hash identifier: As8CsZxngj4ruWOzHZPnj4rzgDhoV6Y+Pi+YiOxS6CM=
Subject key identifier: B6:FE:E4:0B:98:A6:0B:E6:FC:EB:54:90:D0:4A:93:E2:AF:26:C3:C5
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01944A25801FCA91B89C9546FFDA2BDA5C1B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tv7kC5imC-b861SQ0EqT4q8mw8U.roa
Signing time: Thu 09 Jan 2025 08:19:19 +0000
ROA not before: Thu 09 Jan 2025 08:19:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.44.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.67.0/24 maxlen: 24
31.56.74.0/24 maxlen: 24
31.56.75.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.112.0/24 maxlen: 24
31.56.113.0/24 maxlen: 24
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.126.0/24 maxlen: 24
31.56.157.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.191.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.136.0/24 maxlen: 24
31.58.142.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.157.0/24 maxlen: 24
31.58.163.0/24 maxlen: 24
31.58.230.0/23 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.42.0/24 maxlen: 24
31.59.43.0/24 maxlen: 24
31.59.56.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.58.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.97.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.112.0/24 maxlen: 24
31.59.113.0/24 maxlen: 24
31.59.130.0/24 maxlen: 24
31.59.184.0/22 maxlen: 24
31.59.228.0/24 maxlen: 24
31.59.229.0/24 maxlen: 24
31.59.231.0/24 maxlen: 24
31.59.244.0/24 maxlen: 24
31.59.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Jan 2025 07:20:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4a:25:80:1f:ca:91:b8:9c:95:46:ff:da:2b:da:5c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 9 08:19:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6fee40b98a60be6fceb5490d04a93e2af26c3c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d1:7e:2a:c3:1b:63:2a:49:d0:4b:d1:93:fb:
dc:e1:67:48:78:e9:03:e6:5b:6a:41:d7:94:50:b4:
7f:db:f6:42:c8:ed:a7:3d:e6:7e:ba:b8:3f:bc:f7:
56:e7:73:a9:79:2d:1d:88:83:08:2e:c6:13:91:f3:
85:8b:15:de:d9:e6:95:b7:7f:7b:bb:82:8f:7a:52:
03:d6:3a:05:59:f8:29:2c:54:ff:d3:3b:09:8a:ed:
a8:2d:7c:cf:95:75:8c:6a:e1:37:49:c6:c9:7d:e3:
b7:97:34:a3:52:c3:30:38:ac:fc:54:96:68:77:6b:
45:01:a6:ed:59:78:08:91:c4:a1:55:84:24:32:8a:
42:ee:e4:01:4d:6c:85:ca:5a:4e:e2:2b:15:83:b0:
de:99:a5:9b:ed:d0:73:97:41:be:71:79:0d:32:de:
55:8f:59:95:e4:03:32:db:1d:0f:ff:14:47:c6:e4:
73:66:27:28:81:84:9e:f3:0c:c5:ac:da:c0:f3:24:
58:1f:db:12:1c:a5:b0:d1:fa:70:9b:36:1e:ef:3e:
4f:87:36:33:cd:f6:ae:ad:c4:c9:3a:5f:cf:7e:39:
02:19:06:76:21:52:cf:a5:58:9a:3b:44:1c:ea:d9:
43:fb:24:50:9c:25:d4:3c:54:c3:ff:a0:ca:cc:e8:
2b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FE:E4:0B:98:A6:0B:E6:FC:EB:54:90:D0:4A:93:E2:AF:26:C3:C5
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tv7kC5imC-b861SQ0EqT4q8mw8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0-31.56.44.255
31.56.57.0/24
31.56.67.0/24
31.56.74.0/23
31.56.89.0/24
31.56.104.0-31.56.115.255
31.56.118.0-31.56.123.255
31.56.126.0/24
31.56.157.0/24
31.56.200.0/22
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.176.0/21
31.57.191.0-31.57.195.255
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.34.0/23
31.58.136.0/24
31.58.142.0/24
31.58.152.0/22
31.58.157.0/24
31.58.163.0/24
31.58.230.0/23
31.59.41.0-31.59.43.255
31.59.56.0-31.59.58.255
31.59.96.0/22
31.59.112.0/22
31.59.130.0/24
31.59.184.0/22
31.59.228.0/23
31.59.231.0/24
31.59.244.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:dc:7d:88:cc:f0:6e:16:a8:77:8b:28:28:f4:be:ba:fb:75:
e4:ed:a4:ff:15:9c:4e:95:e3:0a:d9:fb:26:36:e5:92:ec:97:
b9:7b:65:f3:0b:cf:4a:e5:ff:56:ed:b3:42:24:ff:4b:db:e1:
98:99:09:3e:34:11:8d:8d:f9:51:d1:c0:b4:0c:df:bb:0a:bd:
a2:a7:39:d0:1d:89:b2:06:c7:16:38:94:28:56:51:58:d8:37:
cb:dc:2d:32:8e:c4:52:39:67:16:8b:28:d7:3f:ca:f6:f5:01:
2a:90:a6:c6:0a:33:9e:fe:cd:71:81:3b:91:13:08:67:f2:8f:
6c:49:cc:66:c8:35:fb:d8:41:1b:b7:e2:fa:71:63:b3:8e:89:
27:fb:54:c5:97:94:26:db:f5:56:4f:eb:ed:fc:79:c9:bf:67:
ef:f2:bf:8d:db:f7:4a:05:1c:b7:52:db:09:19:ca:63:9e:2e:
99:84:b6:50:22:14:da:ef:a5:da:d8:56:df:c0:d3:2d:a5:bb:
8a:c4:db:17:e7:10:bf:54:ba:f1:d3:26:2f:10:cb:b6:0b:28:
78:50:a1:3f:72:4b:98:bd:40:a0:ff:b3:87:79:44:78:a7:a9:
4f:ea:ae:39:dc:08:91:9a:af:4a:9b:fa:57:95:af:e2:34:a1:
a5:af:19:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:45:38 2025 by rpki-client