Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wWffrOWdUSOxDmLKb3LtZWOQi-8.roa
File: wWffrOWdUSOxDmLKb3LtZWOQi-8.roa (raw, json)
Hash identifier: OwjYgQ0azhx4nxzZePP2GwRJQDJ4CHWStB+xQDoGZ2w=
Subject key identifier: C1:67:DF:AC:E5:9D:51:23:B1:0E:62:CA:6F:72:ED:65:63:90:8B:EF
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019536B679D1077F05433F6C4A60746BD8C0
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wWffrOWdUSOxDmLKb3LtZWOQi-8.roa
Signing time: Mon 24 Feb 2025 06:48:03 +0000
ROA not before: Mon 24 Feb 2025 06:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.85.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.141.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.66.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
31.59.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Feb 2025 17:38:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:36:b6:79:d1:07:7f:05:43:3f:6c:4a:60:74:6b:d8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 24 06:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c167dface59d5123b10e62ca6f72ed6563908bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9d:68:37:ad:0a:b6:32:03:70:cb:9d:a6:48:
2c:15:a5:41:f8:62:fe:a8:90:14:a4:90:04:92:59:
dc:4a:6a:93:87:2d:47:03:35:75:c8:df:1b:16:bb:
3d:4c:56:83:43:2e:ff:70:96:92:7e:32:13:cb:f7:
a7:18:32:42:f9:3b:4c:64:1a:34:af:78:3d:22:89:
fe:e8:b7:43:fe:bf:bc:10:79:7c:18:53:0e:4d:b4:
a8:2c:7a:83:72:b4:93:4c:57:57:55:63:10:20:f2:
79:9d:db:4d:c7:d5:5a:80:0f:04:a4:ff:d9:d6:a6:
bf:5f:be:6c:c7:d6:4f:bb:d7:a3:c1:91:3e:e4:29:
22:1b:a1:69:ce:9e:73:bf:9f:11:e2:19:20:8d:6b:
e0:87:05:2c:86:70:00:48:74:fe:cd:be:53:04:7d:
59:c1:06:6e:a1:bd:91:80:4e:12:08:9a:7e:05:3b:
fc:6e:af:a3:d2:57:d7:9e:83:98:dc:9d:6f:ec:19:
d8:3b:8c:fb:34:7b:6d:36:ba:b1:c4:23:6e:7b:58:
73:5f:4e:6f:f3:03:b7:4e:31:94:d5:59:a6:b4:86:
a3:77:46:c1:c4:b2:90:49:70:0c:92:b2:de:c9:e3:
13:25:f0:30:a7:64:44:2a:a9:df:fd:d7:33:01:18:
3f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:67:DF:AC:E5:9D:51:23:B1:0E:62:CA:6F:72:ED:65:63:90:8B:EF
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wWffrOWdUSOxDmLKb3LtZWOQi-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.71.0/24
31.56.77.0/24
31.56.85.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.104.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.176.0/21
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.34.0/23
31.58.50.0/23
31.58.66.0/24
31.58.152.0/22
31.59.96.0/22
31.59.112.0/22
31.59.184.0/22
Signature Algorithm: sha256WithRSAEncryption
95:23:5f:6d:d9:9f:0a:9e:f0:36:87:49:ec:49:25:44:78:92:
07:ef:8d:ed:f4:f2:7e:31:1a:05:87:6f:a0:de:16:22:66:b8:
2b:cc:80:cd:03:ab:e7:ce:e9:33:9e:0c:dd:54:b8:4c:28:5c:
90:68:c2:8e:52:a0:4e:4b:7a:f1:24:ad:d9:e0:82:e6:01:df:
10:ae:8a:f2:16:00:30:5b:6e:4a:49:00:90:b8:ab:ee:5c:8e:
8b:fd:a4:ce:37:93:5a:ef:d0:7c:49:59:a7:bd:87:bf:8b:d5:
b9:3a:27:33:b1:da:b7:3b:88:68:93:52:96:35:e0:81:ea:c1:
78:13:5e:45:b6:6e:f0:e5:b0:5a:a5:34:83:6f:51:55:65:59:
f9:1f:70:86:17:f2:4b:4f:20:0d:ef:ee:e8:76:cd:8b:3f:5f:
b3:c7:e2:ec:87:d2:21:c0:99:82:f5:e7:ee:0c:5d:3f:18:37:
40:d2:c6:52:c4:7f:95:fa:29:7f:d9:ba:bd:d3:24:b4:46:1f:
f8:a1:1b:38:91:07:c9:09:c0:a1:12:98:27:a9:00:05:c5:f9:
bb:43:dc:a6:29:e0:62:c4:a3:7d:0e:98:c6:8e:13:3e:68:fb:
95:de:87:be:f0:02:ef:32:c7:7f:a2:fe:ee:11:ef:b3:f5:7b:
5c:77:42:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:50:46 2025 by rpki-client