Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zFUh4v5OK37bpqhgzFnR2aAYWek.roa
File: zFUh4v5OK37bpqhgzFnR2aAYWek.roa (raw, json)
Hash identifier: yOxalLRzph3wpA5HtX3GI+8LoVh6udlqTC1OAS2h9uM=
Subject key identifier: CC:55:21:E2:FE:4E:2B:7E:DB:A6:A8:60:CC:59:D1:D9:A0:18:59:E9
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01953E339574AD644B7C40F5DAAFBB47BDD3
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zFUh4v5OK37bpqhgzFnR2aAYWek.roa
Signing time: Tue 25 Feb 2025 17:42:02 +0000
ROA not before: Tue 25 Feb 2025 17:42:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.85.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.152.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
31.59.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Feb 2025 14:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3e:33:95:74:ad:64:4b:7c:40:f5:da:af:bb:47:bd:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 25 17:42:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc5521e2fe4e2b7edba6a860cc59d1d9a01859e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:77:63:0c:b5:ea:80:f0:ea:50:cf:3c:9b:85:
3b:4c:19:1b:17:3e:44:22:6e:b4:9f:2d:f6:b0:7c:
e8:82:76:c4:83:46:cc:8d:1e:44:70:67:5e:4b:0d:
af:e5:75:a0:6d:cc:1c:14:62:74:f4:3c:7f:7f:9c:
7b:48:99:f4:d8:28:a7:07:2d:4b:dd:17:0a:bf:30:
dc:c7:c3:46:31:bd:4e:ff:36:33:6c:13:e7:65:ee:
20:10:8c:b6:e4:6e:5e:df:f6:ed:ad:f4:68:20:df:
e1:b5:f3:33:a1:b7:1a:3e:4b:6f:dd:84:70:8b:31:
f9:e4:f9:32:78:dd:1e:28:ca:c0:2d:de:c9:63:be:
6e:72:98:28:69:57:9d:c5:fc:a4:ce:15:48:e4:3f:
72:39:da:97:84:9b:44:ae:77:65:1d:ec:1d:92:03:
06:ed:71:ad:ae:65:a2:3d:4d:a6:82:8b:50:ce:1b:
36:34:d0:56:d8:f5:72:ba:9a:55:44:cb:0d:77:a4:
d4:be:f3:1c:94:b5:4d:49:a1:8c:01:a6:43:34:45:
04:87:b0:f1:25:b4:71:a3:6d:78:36:1d:cd:63:a1:
56:bf:4b:ba:78:2d:24:52:e6:0e:59:71:14:ca:7d:
75:e1:79:57:0e:dc:16:9d:f3:37:85:55:4c:18:83:
1e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:55:21:E2:FE:4E:2B:7E:DB:A6:A8:60:CC:59:D1:D9:A0:18:59:E9
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zFUh4v5OK37bpqhgzFnR2aAYWek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.71.0/24
31.56.85.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.104.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.176.0/21
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.34.0/23
31.58.50.0/23
31.58.152.0/22
31.59.96.0/22
31.59.112.0/22
31.59.184.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:23:b7:89:6c:8b:ef:52:5c:99:06:97:cb:69:84:b4:b3:9e:
55:e7:7e:ed:9f:7a:35:27:a8:a7:e4:ab:bf:f5:24:f8:ff:ff:
f3:e2:01:cf:30:7b:8f:ac:cb:e9:3e:5f:58:c2:ac:61:bc:d3:
a7:7c:ae:b9:9b:3d:84:02:70:28:b6:a8:16:4b:49:c1:87:46:
c0:00:0e:40:6d:ea:d0:d1:8c:17:9c:36:06:33:7f:a8:0b:13:
64:e9:70:29:1b:38:f0:f4:70:57:18:50:f0:6d:59:07:4e:aa:
cf:c2:d2:c4:44:7e:e1:c9:05:8d:34:77:3a:e1:9e:3d:87:01:
f5:2f:06:4b:c8:f8:89:62:a2:26:c8:a6:8c:4d:d4:af:00:17:
de:99:63:c9:0e:95:dc:ab:80:58:fa:8c:76:f6:97:01:32:fd:
cf:52:d4:06:97:1a:a0:72:69:84:09:67:e7:b4:2b:1a:2b:63:
ea:15:b9:7a:10:a5:8b:a7:6c:6f:83:33:12:7e:95:ef:75:bd:
a2:71:1c:17:a4:32:28:18:a5:64:52:9d:a0:d6:d3:e9:11:6a:
3c:8b:e8:3c:86:f6:c5:13:9f:0b:2c:0f:00:49:ee:52:3a:04:
53:32:38:7f:4f:7d:1d:bf:8a:a2:18:4f:b8:68:fd:75:33:c6:
ab:33:4e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:58:15 2025 by rpki-client