Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vn2bT_sXICYf1EWB80zDuewhNzM.roa
File: vn2bT_sXICYf1EWB80zDuewhNzM.roa (raw, json)
Hash identifier: wySItjp/XpaX6odY5qY/gEx3Ez3ebevGgmv93E+0D5k=
Subject key identifier: BE:7D:9B:4F:FB:17:20:26:1F:D4:45:81:F3:4C:C3:B9:EC:21:37:33
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194DB1C37AF4225182509BD2A656AC1B9E1
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vn2bT_sXICYf1EWB80zDuewhNzM.roa
Signing time: Thu 06 Feb 2025 11:54:06 +0000
ROA not before: Thu 06 Feb 2025 11:54:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.129.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.151.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.191.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.197.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.33.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.163.0/24 maxlen: 24
31.58.230.0/23 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.42.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.108.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
31.59.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Feb 2025 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:db:1c:37:af:42:25:18:25:09:bd:2a:65:6a:c1:b9:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 6 11:54:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be7d9b4ffb1720261fd44581f34cc3b9ec213733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3d:c3:c0:d3:2c:57:58:a1:68:89:e7:7f:ed:
33:80:c7:53:32:32:2e:7f:5a:cb:44:84:3b:9d:b5:
80:ed:e4:8a:41:02:0f:2d:f3:1d:a8:fd:34:9e:02:
25:52:6f:4f:3d:1c:36:61:3c:3b:5e:79:b0:51:29:
a4:0d:23:37:9a:91:a9:90:6d:e7:29:5b:d2:1d:fa:
9d:c6:a1:da:db:64:a4:55:df:54:65:eb:1f:8c:34:
0a:8f:f9:2a:81:20:f9:a6:76:3d:6b:38:55:0a:e2:
8e:36:c4:1e:0b:ab:44:a0:0c:ad:9e:85:95:cf:f0:
08:7f:b4:1e:f5:b0:df:f9:8d:4a:c8:fa:49:5b:79:
f6:77:97:95:0a:fa:e7:84:f1:f4:48:88:47:b2:c5:
41:49:bd:e9:e9:24:5a:ac:7d:cd:54:a0:6e:c4:ea:
b8:55:5e:56:82:84:c7:0b:b7:53:13:06:04:46:4d:
42:5f:67:ec:a3:a9:c1:a1:39:81:ad:67:28:b3:52:
f3:b4:19:17:fd:6f:08:9c:85:0c:1f:77:d6:51:e3:
56:ce:63:28:0b:6b:b3:b6:66:39:28:21:55:ea:70:
f0:96:ec:38:ef:3d:da:6b:3d:2d:ee:db:97:1f:6f:
81:be:7d:42:6f:ea:1c:43:7f:c0:e7:cc:1b:2f:76:
2e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:7D:9B:4F:FB:17:20:26:1F:D4:45:81:F3:4C:C3:B9:EC:21:37:33
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vn2bT_sXICYf1EWB80zDuewhNzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.104.0/21
31.57.129.0/24
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.151.0/24
31.57.176.0/21
31.57.191.0-31.57.195.255
31.57.197.0/24
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.33.0-31.58.35.255
31.58.152.0/22
31.58.163.0/24
31.58.230.0/23
31.59.41.0-31.59.42.255
31.59.57.0/24
31.59.96.0/22
31.59.108.0/24
31.59.112.0/22
31.59.184.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:31:fb:52:d0:52:9a:08:27:03:ea:a1:22:40:8b:2b:ce:95:
82:6f:82:2b:aa:72:a1:98:ec:fc:b4:0d:43:16:62:2f:fd:3b:
b3:a0:47:b6:92:80:d2:29:bf:a0:04:d2:ae:49:2a:99:11:75:
1d:82:f8:60:94:47:8f:cd:c9:06:84:74:af:81:04:41:e0:1f:
2e:f6:b9:e4:04:5a:3e:6a:4a:56:cd:d1:c3:65:dc:16:f5:d2:
01:fa:57:35:f9:25:18:b4:52:27:13:1e:86:7d:8f:0f:d6:c9:
60:fc:d9:63:39:8a:e0:fe:3b:c8:16:73:82:08:8e:6a:00:28:
16:0c:f8:9d:a1:0e:92:62:0c:c8:65:ba:9d:2b:86:3d:41:02:
b5:d2:d4:a4:53:73:9c:3a:61:d8:1b:2a:ba:e1:b9:00:7f:8e:
01:ca:73:50:2a:ff:c8:6d:94:69:41:18:76:18:8b:4e:69:bd:
c7:c4:14:6a:82:8b:13:01:e7:75:3b:2e:92:c2:90:75:54:86:
01:de:c9:d6:8e:c6:cf:53:ce:b2:1b:c4:b5:fe:54:8a:02:c6:
a6:f3:73:7f:70:15:94:63:31:b2:f8:ce:10:22:19:5b:aa:e1:
f3:5d:8e:8e:bb:30:b8:14:b3:57:a6:a8:a9:44:90:b1:3e:4b:
67:a3:da:21
-----BEGIN CERTIFICATE-----
MIIF5TCCBM2gAwIBAgISAZTbHDevQiUYJQm9KmVqwbnhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMjA2MTE1NDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTdkOWI0ZmZiMTcyMDI2MWZkNDQ1ODFmMzRjYzNiOWVjMjEzNzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjD3DwNMsV1ihaInnf+0zgMdTMjIu
f1rLRIQ7nbWA7eSKQQIPLfMdqP00ngIlUm9PPRw2YTw7XnmwUSmkDSM3mpGpkG3n
KVvSHfqdxqHa22SkVd9UZesfjDQKj/kqgSD5pnY9azhVCuKONsQeC6tEoAytnoWV
z/AIf7Qe9bDf+Y1KyPpJW3n2d5eVCvrnhPH0SIhHssVBSb3p6SRarH3NVKBuxOq4
VV5WgoTHC7dTEwYERk1CX2fso6nBoTmBrWcos1LztBkX/W8InIUMH3fWUeNWzmMo
C2uztmY5KCFV6nDwluw47z3aaz0t7tuXH2+Bvn1Cb+ocQ3/A58wbL3YuJwIDAQAB
o4IC8TCCAu0wHQYDVR0OBBYEFL59m0/7FyAmH9RFgfNMw7nsITczMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvdm4yYlRfc1hJQ1lmMUVXQjgwekR1ZXdoTnpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBBQYIKwYBBQUHAQcBAf8EgfUwgfIwge8EAgABMIHoAwQB
HzgEAwQAHzgYAwQBHzgqAwQAHzg5AwQBHzhaAwQDHzhoAwQBHzhyMAwDBAEfOHYD
BAIfOHgDBAIfOMgDBAMfOWgDBAAfOYEDBAEfOYQDBAMfOYgDBAEfOZIDBAAfOZcD
BAMfObAwDAMEAB85vwMEAh85wAMEAB85xQMEAR85yDAMAwQEHznQAwQCHzngAwQC
HznoAwQCHzn8MAwDBAAfOiEDBAIfOiADBAIfOpgDBAAfOqMDBAEfOuYwDAMEAB87
KQMEAB87KgMEAB87OQMEAh87YAMEAB87bAMEAh87cAMEAh87uDANBgkqhkiG9w0B
AQsFAAOCAQEAWjH7UtBSmggnA+qhIkCLK86Vgm+CK6pyoZjs/LQNQxZiL/07s6BH
tpKA0im/oATSrkkqmRF1HYL4YJRHj83JBoR0r4EEQeAfLva55ARaPmpKVs3Rw2Xc
FvXSAfpXNfklGLRSJxMehn2PD9bJYPzZYzmK4P47yBZzggiOagAoFgz4naEOkmIM
yGW6nSuGPUECtdLUpFNznDph2BsquuG5AH+OAcpzUCr/yG2UaUEYdhiLTmm9x8QU
aoKLEwHndTsuksKQdVSGAd7J1o7Gz1POshvEtf5UigLGpvNzf3AVlGMxsvjOECIZ
W6rh812OjrswuBSzV6aoqUSQsT5LZ6PaIQ==
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:51:07 2025 by rpki-client