Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-N5Lm_xMpciFAiZhYPtgg08DQGQ.roa
File: 1-N5Lm_xMpciFAiZhYPtgg08DQGQ.roa (raw, json)
Hash identifier: kiJib2g3I6QyvSGdZQPTPJhHvqER6c1rzPBb7L5kNyg=
Subject key identifier: F8:DE:4B:9B:FC:4C:A5:C8:85:02:26:61:60:FB:60:83:4F:03:40:64
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01965DF308F75D1626751901246F46A5031F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-N5Lm_xMpciFAiZhYPtgg08DQGQ.roa
Signing time: Tue 22 Apr 2025 14:42:10 +0000
ROA not before: Tue 22 Apr 2025 14:42:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.32.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.125.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.200.0/24 maxlen: 24
31.56.202.0/24 maxlen: 24
31.57.32.0/24 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.103.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.113.0/24 maxlen: 24
31.57.118.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.138.0/24 maxlen: 24
31.57.143.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.171.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.196.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.215.0/24 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.230.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.238.0/24 maxlen: 24
31.57.249.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.50.0/24 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.86.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 24 Apr 2025 17:54:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:f3:08:f7:5d:16:26:75:19:01:24:6f:46:a5:03:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 22 14:42:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8de4b9bfc4ca5c88502266160fb60834f034064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a7:36:d0:3e:6e:b3:bd:92:81:cb:fd:42:76:
31:96:30:c3:0f:94:34:15:11:42:10:6b:7d:7c:dd:
15:01:50:b4:85:79:a4:12:a2:e3:d5:f2:39:a9:7e:
3e:00:b8:14:c2:28:77:51:9b:f2:f4:16:1e:95:e1:
10:c1:51:30:81:6c:f1:ba:b6:48:67:22:d4:f1:93:
0f:f1:a4:95:fc:6a:61:52:7e:48:52:94:d1:a0:e4:
80:69:83:60:94:40:d1:e9:a0:14:24:57:29:95:08:
a4:af:be:b0:43:21:4d:e1:28:f8:7d:03:77:f2:d9:
03:e5:6e:2b:ae:03:a3:e0:32:10:10:d8:51:9b:0e:
9d:c9:ee:91:05:f4:d8:91:02:18:2e:c4:0a:64:d1:
ff:8f:76:d3:74:2a:f2:5a:c8:6f:a1:51:4e:33:3c:
d6:95:4e:a7:19:b7:86:56:96:f9:d0:0a:4e:12:d6:
db:bc:53:e2:2f:e1:97:39:24:29:5c:13:e5:92:e6:
30:7c:ea:b3:91:08:c0:3c:6e:a3:68:67:ac:7a:34:
15:8b:cd:c7:1d:ed:dd:f4:20:1b:00:bd:59:bb:bc:
5e:ed:fb:62:f4:32:63:bc:cf:3a:55:1c:f0:4f:ec:
2b:8e:08:cb:39:65:81:6d:e1:e0:65:46:7e:3c:d4:
4b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:DE:4B:9B:FC:4C:A5:C8:85:02:26:61:60:FB:60:83:4F:03:40:64
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-N5Lm_xMpciFAiZhYPtgg08DQGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.32.0/24
31.56.57.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.125.0/24
31.56.200.0/22
31.57.32.0/24
31.57.36.0/23
31.57.103.0-31.57.111.255
31.57.113.0/24
31.57.118.0/24
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.188.255
31.57.192.0-31.57.196.255
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.230.0/24
31.57.232.0/22
31.57.238.0/24
31.57.249.0-31.57.255.255
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.151.255
31.59.160.0/20
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:3f:bd:9f:68:04:ab:ee:72:a5:e5:52:a4:87:20:07:35:5b:
f0:c0:7a:20:04:62:c2:4a:37:c4:34:4b:bf:75:f6:8d:65:5c:
97:f4:cd:2b:6d:9c:72:f2:5b:dd:6c:71:1b:72:1a:12:df:38:
a9:55:ab:64:2c:5f:96:de:7e:cf:26:40:ce:72:cf:2b:d2:f2:
cf:c0:a5:56:f7:4c:8d:ab:47:61:1b:f2:ff:86:a8:8b:68:14:
93:ee:f5:0d:f5:76:68:71:4a:14:a6:81:2f:ef:b1:da:a4:7f:
d4:93:42:e6:4a:91:20:46:d6:5e:f7:8f:cb:30:bf:66:cc:74:
19:89:f6:fb:b8:5d:44:1f:35:42:f2:e7:40:85:49:6d:e9:6b:
f4:58:01:6d:89:41:ec:b1:84:ca:6f:5a:ab:04:bd:68:3d:c1:
12:ee:9b:b0:ad:1a:c7:f5:ab:29:10:09:52:50:c9:6e:00:b0:
67:19:96:a7:b2:a3:ea:98:36:af:37:97:e6:fc:89:cc:7d:ce:
e6:e8:e8:39:61:9d:1a:2b:01:4b:12:26:c3:2e:76:a6:d4:b9:
bf:ee:76:b5:7f:a9:84:6f:fc:0a:95:02:a1:cb:30:16:59:1d:
f0:f2:e9:3d:4e:53:e9:26:77:fd:54:dd:06:1d:97:f1:07:aa:
3f:89:02:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:31:09 2025 by rpki-client