Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uN2GOkaMDenmGI0Ia5Mj0YXWWoM.roa
File: uN2GOkaMDenmGI0Ia5Mj0YXWWoM.roa (raw, json)
Hash identifier: mN3vXN0+hXhG9GICjU/202r763Q0EfIF30Zm939HWKA=
Subject key identifier: B8:DD:86:3A:46:8C:0D:E9:E6:18:8D:08:6B:93:23:D1:85:D6:5A:83
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194461E9E469CEE3C18D6C129E746FCE127
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uN2GOkaMDenmGI0Ia5Mj0YXWWoM.roa
Signing time: Wed 08 Jan 2025 13:33:19 +0000
ROA not before: Wed 08 Jan 2025 13:33:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.67.0/24 maxlen: 24
31.56.74.0/24 maxlen: 24
31.56.75.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.112.0/24 maxlen: 24
31.56.113.0/24 maxlen: 24
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.126.0/24 maxlen: 24
31.56.157.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.191.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.198.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.136.0/24 maxlen: 24
31.58.142.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.157.0/24 maxlen: 24
31.58.163.0/24 maxlen: 24
31.58.230.0/23 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.42.0/24 maxlen: 24
31.59.43.0/24 maxlen: 24
31.59.56.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.58.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.97.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.112.0/24 maxlen: 24
31.59.113.0/24 maxlen: 24
31.59.130.0/24 maxlen: 24
31.59.184.0/22 maxlen: 24
31.59.228.0/24 maxlen: 24
31.59.229.0/24 maxlen: 24
31.59.231.0/24 maxlen: 24
31.59.244.0/24 maxlen: 24
31.59.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Jan 2025 08:17:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:46:1e:9e:46:9c:ee:3c:18:d6:c1:29:e7:46:fc:e1:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 8 13:33:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8dd863a468c0de9e6188d086b9323d185d65a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9b:e1:26:c2:a3:e0:b6:9f:9f:ac:61:d2:e6:
0f:b2:ee:00:c3:c6:1b:e5:bc:43:36:17:e2:e8:22:
68:4f:52:b8:a9:8b:3d:39:29:bf:c3:72:8c:7e:94:
99:c1:b0:d9:03:a6:93:42:03:8b:a9:8a:41:78:ef:
56:df:00:a2:48:63:f2:44:60:52:0b:f9:02:bf:23:
e0:c9:e4:82:2f:a3:5f:af:25:ec:a5:55:c8:00:b0:
2a:53:ab:66:5b:26:ce:fc:0a:20:bc:58:da:84:f3:
c6:bd:da:fa:31:4c:52:0b:69:2b:28:f4:83:8c:f7:
ff:f8:f7:83:1b:d6:24:34:ed:70:ba:c9:40:3c:84:
11:83:43:a8:69:05:49:26:57:f0:14:e9:17:61:36:
56:71:cc:f0:80:cb:33:6f:08:09:02:7c:6b:8f:ab:
e9:99:00:9a:3b:ed:38:a2:ca:41:37:e6:aa:e2:35:
f3:17:da:72:96:53:fe:68:64:9f:11:fe:71:de:40:
9c:73:f1:bd:c2:1a:5c:7e:2e:3e:6f:c7:38:c4:05:
7f:c6:3b:02:37:28:1e:71:e0:cf:bb:cd:2a:de:b5:
c8:a1:25:b6:a0:09:65:c7:77:6f:21:12:8b:a3:4b:
8a:d3:6f:c4:e5:cd:ac:28:1b:13:90:22:1f:50:1c:
a6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:DD:86:3A:46:8C:0D:E9:E6:18:8D:08:6B:93:23:D1:85:D6:5A:83
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uN2GOkaMDenmGI0Ia5Mj0YXWWoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.67.0/24
31.56.74.0/23
31.56.89.0/24
31.56.104.0-31.56.115.255
31.56.118.0-31.56.123.255
31.56.126.0/24
31.56.157.0/24
31.56.200.0/22
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.176.0/21
31.57.191.0-31.57.195.255
31.57.198.0/24
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.34.0/23
31.58.136.0/24
31.58.142.0/24
31.58.152.0/22
31.58.157.0/24
31.58.163.0/24
31.58.230.0/23
31.59.41.0-31.59.43.255
31.59.56.0-31.59.58.255
31.59.96.0/22
31.59.112.0/22
31.59.130.0/24
31.59.184.0/22
31.59.228.0/23
31.59.231.0/24
31.59.244.0/23
Signature Algorithm: sha256WithRSAEncryption
72:d0:4a:cb:03:ad:df:c8:32:cf:96:3d:c7:c1:c5:e9:fb:80:
5d:10:3c:bc:44:31:72:63:fb:2f:17:66:0f:94:1b:cc:2e:a4:
6d:11:84:a8:33:c7:08:e1:05:bd:5e:6a:38:00:0a:54:bf:0b:
c1:df:fa:10:ed:95:59:cb:06:85:db:37:fb:d7:08:3b:47:cb:
b0:5c:d1:66:f8:4a:c7:5c:1a:7f:53:52:0a:f8:a2:1d:85:42:
6b:68:5a:2b:e0:0c:d1:d9:03:1c:b0:73:37:0c:81:73:2a:9f:
53:ad:b3:66:95:2b:eb:a7:a5:c7:ef:e3:7d:d1:c3:cd:f2:1b:
6e:df:c5:fd:37:0b:6f:6f:fe:c0:01:97:a3:2d:2d:1b:cf:7c:
ec:7b:9c:c1:0f:5b:60:5e:a2:45:f0:f9:dc:2f:cb:f7:0b:91:
5a:55:96:8d:e3:64:94:3a:83:58:92:ad:36:88:c7:f8:18:e9:
0f:1d:2f:7d:6d:d8:c9:97:9c:3d:36:7a:24:13:06:9a:39:2f:
58:2d:23:a5:e9:a1:95:74:7b:bd:7f:81:53:62:3a:05:a9:81:
b9:17:f6:93:90:12:88:fa:b4:94:17:dc:ac:29:d3:8d:3d:93:
f9:b1:1b:49:38:23:62:b9:cf:1a:7b:a4:a6:02:47:fc:f7:dd:
45:59:43:19
-----BEGIN CERTIFICATE-----
MIIGFTCCBP2gAwIBAgISAZRGHp5GnO48GNbBKedG/OEnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMTA4MTMzMzE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOGRkODYzYTQ2OGMwZGU5ZTYxODhkMDg2YjkzMjNkMTg1ZDY1YTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspvhJsKj4Lafn6xh0uYPsu4Aw8Yb
5bxDNhfi6CJoT1K4qYs9OSm/w3KMfpSZwbDZA6aTQgOLqYpBeO9W3wCiSGPyRGBS
C/kCvyPgyeSCL6NfryXspVXIALAqU6tmWybO/AogvFjahPPGvdr6MUxSC2krKPSD
jPf/+PeDG9YkNO1wuslAPIQRg0OoaQVJJlfwFOkXYTZWcczwgMszbwgJAnxrj6vp
mQCaO+04ospBN+aq4jXzF9pyllP+aGSfEf5x3kCcc/G9whpcfi4+b8c4xAV/xjsC
NygeceDPu80q3rXIoSW2oAllx3dvIRKLo0uK02/E5c2sKBsTkCIfUBymiwIDAQAB
o4IDITCCAx0wHQYDVR0OBBYEFLjdhjpGjA3p5hiNCGuTI9GF1lqDMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvdU4yR09rYU1EZW5tR0kwSWE1TWowWVhXV29NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBNQYIKwYBBQUHAQcBAf8EggEkMIIBIDCCARwEAgABMIIB
FAMEAR84BAMEAB84GAMEAR84KgMEAB84OQMEAB84QwMEAR84SgMEAB84WTAMAwQD
HzhoAwQCHzhwMAwDBAEfOHYDBAIfOHgDBAAfOH4DBAAfOJ0DBAIfOMgDBAEfOYQD
BAMfOYgDBAEfOZIDBAMfObAwDAMEAB85vwMEAh85wAMEAB85xgMEAR85yDAMAwQE
HznQAwQCHzngAwQCHznoAwQCHzn8AwQBHzoiAwQAHzqIAwQAHzqOAwQCHzqYAwQA
HzqdAwQAHzqjAwQBHzrmMAwDBAAfOykDBAIfOygwDAMEAx87OAMEAB87OgMEAh87
YAMEAh87cAMEAB87ggMEAh87uAMEAR875AMEAB875wMEAR879DANBgkqhkiG9w0B
AQsFAAOCAQEActBKywOt38gyz5Y9x8HF6fuAXRA8vEQxcmP7LxdmD5QbzC6kbRGE
qDPHCOEFvV5qOAAKVL8Lwd/6EO2VWcsGhds3+9cIO0fLsFzRZvhKx1waf1NSCvii
HYVCa2haK+AM0dkDHLBzNwyBcyqfU62zZpUr66elx+/jfdHDzfIbbt/F/TcLb2/+
wAGXoy0tG8987HucwQ9bYF6iRfD53C/L9wuRWlWWjeNklDqDWJKtNojH+BjpDx0v
fW3YyZecPTZ6JBMGmjkvWC0jpemhlXR7vX+BU2I6BamBuRf2k5ASiPq0lBfcrCnT
jT2T+bEbSTgjYrnPGnukpgJH/PfdRVlDGQ==
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:48:38 2025 by rpki-client