Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8VEA0u8xVkzGDUlblu1RVD106GY.roa
File: 8VEA0u8xVkzGDUlblu1RVD106GY.roa (raw, json)
Hash identifier: YRThsipO5mQ2T80XwlhoSIUb0PTy85QNVPy7M7nuojQ=
Subject key identifier: F1:51:00:D2:EF:31:56:4C:C6:0D:49:5B:96:ED:51:54:3D:74:E8:66
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019590C6015736178F5CD61EC4F9392551B2
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8VEA0u8xVkzGDUlblu1RVD106GY.roa
Signing time: Thu 13 Mar 2025 18:30:50 +0000
ROA not before: Thu 13 Mar 2025 18:30:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.96.0/22 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.200.0/24 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.212.0/24 maxlen: 24
31.57.213.0/24 maxlen: 24
31.57.214.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.57.254.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.76.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.91.0/24 maxlen: 24
31.58.100.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.224.0/22 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.184.0/22 maxlen: 24
31.59.186.0/24 maxlen: 24
31.59.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Mar 2025 10:31:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:c6:01:57:36:17:8f:5c:d6:1e:c4:f9:39:25:51:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 13 18:30:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f15100d2ef31564cc60d495b96ed51543d74e866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5c:72:f6:cf:55:fa:f2:01:e3:50:a5:b6:78:
d4:82:9f:f8:b4:8d:bd:0a:09:92:ef:e5:74:fb:8f:
1f:08:c1:08:a3:aa:6c:46:82:1d:a4:82:87:0a:99:
07:7c:03:12:b3:f0:d4:ea:bd:c5:38:16:c0:b0:7b:
8a:c0:ef:a8:4b:e4:b5:df:00:e0:9d:c3:ea:58:b5:
7b:b5:cc:a8:7c:9b:41:f0:93:28:0d:29:19:ab:48:
31:2a:86:7f:57:75:05:be:77:b7:61:0e:37:02:38:
f1:05:a2:ef:b4:87:0d:05:3e:34:33:fa:ba:cb:bb:
63:e7:e5:a3:eb:6b:55:8a:88:10:9e:fc:26:d7:8f:
56:c8:f7:eb:ff:1c:3b:2a:d8:e6:f7:d8:55:83:d3:
1d:86:cc:86:71:d7:51:aa:97:16:80:28:eb:df:bc:
c5:d0:3e:1c:8d:81:38:11:84:9b:c8:3f:44:8d:81:
b9:12:69:81:cc:8c:8e:28:b7:6a:7e:1a:26:03:25:
40:52:10:62:4f:60:2e:56:49:ec:6e:79:dd:b4:be:
6c:2c:e1:23:01:0f:26:23:f4:2c:f3:ec:38:3c:0c:
ef:df:22:14:ef:39:d3:01:9d:d3:9a:a8:b5:ee:d8:
22:5f:38:11:4d:9b:20:78:72:ae:70:4c:51:86:4e:
97:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:51:00:D2:EF:31:56:4C:C6:0D:49:5B:96:ED:51:54:3D:74:E8:66
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8VEA0u8xVkzGDUlblu1RVD106GY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.71.0/24
31.56.89.0-31.56.91.255
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.96.0/22
31.57.104.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.176.0/21
31.57.188.0/24
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.34.0/23
31.58.50.0/23
31.58.68.0/22
31.58.76.0/22
31.58.84.0/22
31.58.91.0/24
31.58.100.0/22
31.58.152.0/22
31.58.224.0/22
31.59.41.0/24
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.184.0/22
31.59.230.0/24
Signature Algorithm: sha256WithRSAEncryption
68:56:cd:39:07:f9:9c:80:06:b9:b8:9e:a7:be:2f:8f:4c:66:
b1:a6:5e:f0:a4:cf:01:be:c9:da:fa:1f:0f:03:33:e7:70:5d:
a2:5b:be:e3:f0:02:6b:d5:89:83:93:93:08:a9:91:33:7d:8e:
7d:c2:11:16:35:ab:b3:4a:71:c9:89:45:7d:e8:cc:7a:ce:1f:
d4:70:13:bc:76:90:e1:5b:a6:d8:5d:db:78:3d:c5:a2:dc:f5:
9a:63:cf:da:b1:5c:51:d0:f7:76:f9:67:e9:71:c8:26:92:bb:
42:56:9e:e9:27:2d:a5:d5:f3:23:8d:61:14:b6:f5:37:d0:d4:
21:9d:83:1d:d5:30:ed:b2:7a:3c:de:c6:a6:03:9b:1c:f5:3a:
f3:cb:64:60:c0:4b:07:f6:6b:65:c9:f5:f8:56:4d:19:51:4d:
02:12:46:5b:59:df:00:0b:1d:4c:f5:7e:c3:97:7f:b7:8b:47:
88:51:db:0f:c9:25:9a:14:e7:e3:37:d3:b7:c7:60:1f:c5:7b:
2a:7a:41:64:1e:91:78:b2:4f:30:6a:27:e7:40:e3:b3:c1:ad:
43:11:b3:28:81:16:6c:66:b9:98:5d:16:8b:8d:2d:c7:6b:6f:
19:51:32:8e:2a:d0:46:c0:f9:51:be:6a:20:eb:21:6c:73:8e:
52:09:c5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:34:41 2025 by rpki-client