Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0sgBdTRg5sqSx_qupWx8u4SsQao.roa
File: 0sgBdTRg5sqSx_qupWx8u4SsQao.roa (raw, json)
Hash identifier: Ill0+guyOECWJTqw7+I/lbwK75Hpdm0UmQgZdU+I3RY=
Subject key identifier: D2:C8:01:75:34:60:E6:CA:92:C7:FA:AE:A5:6C:7C:BB:84:AC:41:AA
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196453F7C73FE823F778C735E7DB58AD9F6
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0sgBdTRg5sqSx_qupWx8u4SsQao.roa
Signing time: Thu 17 Apr 2025 19:35:10 +0000
ROA not before: Thu 17 Apr 2025 19:35:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.23.0/24 maxlen: 24
31.56.24.0/24 maxlen: 24
31.56.32.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.62.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.200.0/24 maxlen: 24
31.56.202.0/24 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.103.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.113.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.138.0/24 maxlen: 24
31.57.143.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.168.0/23 maxlen: 23
31.57.176.0/21 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.196.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.208.0/22 maxlen: 22
31.57.215.0/24 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.221.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.230.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.238.0/24 maxlen: 24
31.57.249.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.50.0/24 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.76.0/24 maxlen: 24
31.58.77.0/24 maxlen: 24
31.58.78.0/24 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.92.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 18 Apr 2025 07:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:3f:7c:73:fe:82:3f:77:8c:73:5e:7d:b5:8a:d9:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 17 19:35:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2c801753460e6ca92c7faaea56c7cbb84ac41aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:16:85:8c:dd:31:b0:80:2a:b8:f8:13:7b:99:
f6:07:3e:7e:b1:4a:35:f1:47:ff:a2:29:9b:50:18:
d7:a3:57:40:08:8b:97:97:cd:6e:f4:8a:4c:a2:ba:
42:e9:10:6d:e3:38:31:28:ba:aa:6c:3e:b0:37:3d:
94:10:a6:20:60:df:4c:30:6d:8e:a1:a5:c7:ac:03:
2c:d4:2b:75:45:07:86:1b:65:a6:ba:cc:59:e6:ea:
43:af:ce:1e:cf:81:fa:96:4c:e4:d0:4e:5c:78:4b:
df:2f:f3:a4:e9:a3:83:d5:96:b0:f7:7a:2c:ed:b1:
89:a4:12:d4:0c:a5:4b:3f:44:36:ac:38:ac:b9:ef:
43:d3:66:e5:d3:e6:ab:45:ba:36:b3:d8:44:9f:db:
52:82:ad:73:88:56:0e:2b:2d:76:32:ad:40:2a:2e:
12:34:9a:71:77:ca:6d:33:21:25:6b:41:37:32:70:
00:28:e8:06:76:8f:d4:f9:a7:da:ee:a3:2a:13:de:
8b:30:97:c5:af:ee:7f:0c:36:07:73:63:38:c6:47:
89:4a:77:a7:11:dd:2f:73:ee:cf:31:9e:26:62:b5:
fb:b5:7d:fb:57:c1:5f:13:e4:19:d2:1d:44:5c:8c:
0a:1f:f3:41:e3:c2:7f:5a:a2:8d:5a:02:e5:77:c9:
5c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C8:01:75:34:60:E6:CA:92:C7:FA:AE:A5:6C:7C:BB:84:AC:41:AA
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0sgBdTRg5sqSx_qupWx8u4SsQao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.23.0-31.56.24.255
31.56.32.0/24
31.56.57.0/24
31.56.62.0/24
31.56.71.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.36.0/23
31.57.103.0-31.57.111.255
31.57.113.0/24
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.188.255
31.57.192.0-31.57.196.255
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.230.0/24
31.57.232.0/22
31.57.238.0/24
31.57.249.0-31.57.255.255
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.76.0-31.58.78.255
31.58.84.0/22
31.58.92.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.175.255
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
08:27:50:ec:43:7c:62:29:12:36:05:c6:5a:74:55:9d:21:77:
5a:a5:6d:f2:73:e8:86:fa:9d:aa:30:87:97:0f:03:d5:18:b0:
44:7a:83:e6:61:1d:e2:94:5c:26:05:18:7a:4f:40:a2:d6:f2:
72:a5:5d:b0:62:3f:aa:cb:0c:2c:4a:42:b5:9a:b7:fc:db:ed:
00:ea:71:4e:20:c7:cd:d2:b9:fd:33:09:b6:1b:f9:e7:74:f4:
c7:0e:f9:73:73:1d:2f:30:c6:84:b9:ba:41:21:bb:8e:a0:78:
83:9f:7d:28:f6:b5:23:56:c1:73:09:d7:83:7f:08:04:cc:90:
dc:ae:50:0f:06:59:44:df:d0:11:e2:d1:92:08:37:60:a1:12:
8d:4a:81:b1:14:45:f9:6a:05:ee:c3:ba:b1:6e:54:77:90:e1:
8b:58:68:67:75:04:90:6b:f1:28:0a:16:08:a0:6b:cf:93:40:
9d:14:5f:4d:20:bf:61:fc:6f:d1:3a:fc:0b:6c:bb:3b:3f:0a:
ed:e2:44:b6:62:ec:97:4d:12:c0:dd:3e:28:2e:7c:06:6a:39:
39:f8:c5:82:e2:af:a3:02:f0:0e:65:b0:ed:be:b7:fa:96:2c:
4c:e2:38:ee:93:9c:de:25:1e:f2:16:e4:3d:f3:63:15:9c:b6:
b0:21:d0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:36:10 2025 by rpki-client