Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vRUn5aLDnz9aKyHiMU02A_RMXLA.roa
File: vRUn5aLDnz9aKyHiMU02A_RMXLA.roa (raw, json)
Hash identifier: FFjlTc8m8u7DdIgAO/mgVgUkfi48tzQujzF/QsJREDQ=
Subject key identifier: BD:15:27:E5:A2:C3:9F:3F:5A:2B:21:E2:31:4D:36:03:F4:4C:5C:B0
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193DE3EE56019C457AA56DD50483AFF0F85
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vRUn5aLDnz9aKyHiMU02A_RMXLA.roa
Signing time: Thu 19 Dec 2024 09:28:04 +0000
ROA not before: Thu 19 Dec 2024 09:28:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.74.0/24 maxlen: 24
31.56.75.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.156.0/24 maxlen: 24
31.57.44.0/23 maxlen: 24
31.57.65.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.145.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.178.0/24 maxlen: 24
31.57.179.0/24 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.182.0/24 maxlen: 24
31.57.183.0/24 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.204.0/24 maxlen: 24
31.57.207.0/24 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.232.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.131.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.167.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Dec 2024 20:03:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:de:3e:e5:60:19:c4:57:aa:56:dd:50:48:3a:ff:0f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 19 09:28:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd1527e5a2c39f3f5a2b21e2314d3603f44c5cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b1:26:91:5f:ff:06:01:5d:60:a4:a5:69:3a:
a2:6d:68:5c:3a:eb:9e:5b:5e:32:4f:83:f9:41:ba:
52:c1:36:1a:78:38:a1:b7:eb:fa:9e:b0:ba:22:97:
c9:4f:74:53:b1:47:d4:53:bd:07:15:2d:73:d3:07:
9a:0f:d2:a5:8e:03:c6:9b:d5:ba:59:37:42:10:4e:
9a:7c:e4:f6:d0:0d:e0:23:7d:e0:a2:bc:8e:1c:e3:
1c:a4:43:91:27:90:e0:d9:66:b9:37:8c:f4:fc:3b:
41:56:2d:d4:04:47:7e:1c:93:bd:cd:57:31:20:1b:
03:ad:a7:a8:b0:24:75:7e:97:65:be:0e:7b:da:e6:
8f:e9:7d:e2:14:58:6d:7c:a5:36:e5:3b:a6:a9:40:
79:2b:6d:3b:51:2f:30:44:42:de:66:da:08:fa:73:
55:b9:10:64:e7:15:2e:d6:4b:77:09:88:10:e1:9c:
9a:29:b0:ea:1d:02:d5:2c:79:67:dd:16:a3:4e:01:
23:0a:a8:d7:ac:46:79:e1:6c:e4:7f:54:58:88:cf:
8d:5c:89:a1:f4:e9:bd:fa:7a:be:f4:99:ae:24:09:
ba:4f:b0:07:6e:e1:93:81:61:9e:91:c8:4a:c8:5a:
fc:97:ed:52:7c:b4:99:65:23:b6:ae:0e:35:5b:89:
11:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:15:27:E5:A2:C3:9F:3F:5A:2B:21:E2:31:4D:36:03:F4:4C:5C:B0
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vRUn5aLDnz9aKyHiMU02A_RMXLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.71.0/24
31.56.74.0/23
31.56.89.0/24
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.156.0/24
31.57.44.0/23
31.57.65.0/24
31.57.132.0/23
31.57.145.0-31.57.147.255
31.57.176.0/21
31.57.188.0/24
31.57.192.0/22
31.57.200.0/23
31.57.204.0/24
31.57.207.0-31.57.223.255
31.57.232.0/22
31.58.34.0/23
31.58.131.0/24
31.58.152.0/22
31.58.167.0/24
31.59.96.0/22
31.59.112.0/22
31.59.184.0/22
Signature Algorithm: sha256WithRSAEncryption
66:cd:f0:22:5c:0c:69:1a:d6:dd:9f:4a:ea:97:4a:fd:ef:8a:
53:1a:ae:84:bd:98:dd:f5:80:dc:47:72:ce:37:81:d4:a7:ac:
ca:60:96:30:d4:bd:46:be:ba:99:51:d5:34:16:b0:d3:1f:8a:
f8:f1:4e:7c:ec:bf:92:74:a3:0d:49:28:6d:db:65:90:13:af:
00:22:8b:30:bc:e4:d0:49:41:70:53:e6:24:f4:a3:0a:59:37:
72:75:5c:31:08:3d:44:98:0e:ef:7b:c6:5e:6a:7b:93:31:6c:
0c:28:05:cd:61:27:f8:d6:6e:44:f6:d4:02:0a:17:f6:f9:ef:
88:36:8d:7f:7c:53:83:a9:7b:de:db:77:a3:fe:5e:ad:61:a4:
2d:28:b3:4f:60:c8:dc:6d:70:16:27:40:03:38:6f:fe:0e:10:
09:f6:7b:4c:e0:c3:bc:26:64:94:ae:24:ca:64:cf:ff:dc:a2:
f4:70:cd:a1:d4:9a:a9:94:fb:7a:d7:e6:d4:99:b2:c8:21:8c:
3e:cd:40:58:2c:76:44:96:2a:d4:82:51:82:c7:71:0c:87:4b:
25:82:d8:81:7b:06:79:a3:03:23:b3:d6:43:54:e3:4b:8d:20:
d7:30:26:f3:ff:65:9c:9d:7f:33:60:c9:ac:e8:c6:6c:61:97:
be:8a:70:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:45:40 2025 by rpki-client