Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9TTcLrfU0MZ2IjAWS4OOY6QBp1E.roa
File: 9TTcLrfU0MZ2IjAWS4OOY6QBp1E.roa (raw, json)
Hash identifier: GthwXAXop10jmbr20+tZhyxo9ojV3AM249OUBsO+fKI=
Subject key identifier: F5:34:DC:2E:B7:D4:D0:C6:76:22:30:16:4B:83:8E:63:A4:01:A7:51
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01965742FEF6084E216F4EADE67CECA703A6
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9TTcLrfU0MZ2IjAWS4OOY6QBp1E.roa
Signing time: Mon 21 Apr 2025 07:32:10 +0000
ROA not before: Mon 21 Apr 2025 07:32:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.23.0/24 maxlen: 24
31.56.24.0/24 maxlen: 24
31.56.32.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.125.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.200.0/24 maxlen: 24
31.56.202.0/24 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.103.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.113.0/24 maxlen: 24
31.57.118.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.138.0/24 maxlen: 24
31.57.143.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.168.0/23 maxlen: 23
31.57.171.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.196.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.208.0/22 maxlen: 22
31.57.215.0/24 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.230.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.238.0/24 maxlen: 24
31.57.249.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.50.0/24 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.76.0/24 maxlen: 24
31.58.77.0/24 maxlen: 24
31.58.78.0/24 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.92.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 21 Apr 2025 13:44:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:42:fe:f6:08:4e:21:6f:4e:ad:e6:7c:ec:a7:03:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 21 07:32:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f534dc2eb7d4d0c6762230164b838e63a401a751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:86:94:93:df:82:c4:93:7a:70:83:1c:f8:e3:
6b:33:21:7d:19:dc:e6:c4:95:b8:2f:d5:df:bc:68:
e2:28:6b:d9:8e:af:7c:14:0b:bf:cb:d0:60:8c:db:
47:29:b2:7c:30:5f:75:4c:b4:67:00:71:84:08:b1:
37:bb:4c:8e:70:40:3c:0f:11:b8:6f:19:22:98:58:
76:b7:4b:f4:2b:4d:00:ec:6a:c2:98:86:26:37:a8:
97:f3:74:6c:51:ef:1f:bc:68:e3:7e:ca:98:89:8a:
ac:95:6d:f9:3d:11:1b:80:83:73:6d:e9:45:d9:b3:
be:9c:d0:c0:37:af:ec:c0:52:aa:a7:1b:cb:68:7e:
b4:bb:51:44:6e:02:9c:8a:dc:4f:28:28:be:9a:5b:
9e:c1:1e:dc:a6:68:b7:da:a8:f5:62:f6:a7:6e:1e:
95:63:15:17:c3:f8:3a:b8:8c:16:a2:31:c0:5c:5f:
29:c9:60:24:14:26:b0:6b:2c:4b:0d:19:16:7e:6b:
98:5a:ac:a0:60:08:68:df:c6:7e:45:06:10:ff:16:
28:eb:66:2e:3d:f3:14:4a:33:55:35:1d:85:03:6f:
7d:05:b7:63:85:b5:e7:1b:8c:b9:40:2e:a8:8a:74:
4b:44:af:54:7a:37:36:6d:69:ba:f3:c2:2e:73:d2:
b0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:34:DC:2E:B7:D4:D0:C6:76:22:30:16:4B:83:8E:63:A4:01:A7:51
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9TTcLrfU0MZ2IjAWS4OOY6QBp1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.23.0-31.56.24.255
31.56.32.0/24
31.56.57.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.125.0/24
31.56.200.0/22
31.57.36.0/23
31.57.103.0-31.57.111.255
31.57.113.0/24
31.57.118.0/24
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.188.255
31.57.192.0-31.57.196.255
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.230.0/24
31.57.232.0/22
31.57.238.0/24
31.57.249.0-31.57.255.255
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.76.0-31.58.78.255
31.58.84.0/22
31.58.92.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.175.255
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
11:b8:48:33:6c:36:df:b7:70:44:4b:69:9e:d4:7b:d1:11:df:
c6:77:b0:59:ec:34:6d:31:cc:5e:6e:d7:41:f5:1c:de:3b:51:
78:7c:ce:c8:a7:aa:df:5b:af:aa:77:fd:16:5a:a2:64:8e:64:
ac:ef:02:eb:48:1f:f0:4e:8d:cb:00:8e:54:4f:e1:7d:99:83:
2e:b1:dd:02:e9:3a:42:f4:75:32:59:46:6e:25:0b:37:e3:f3:
36:d9:38:29:a1:11:c4:9a:06:18:2d:5b:5f:4f:4c:57:72:c7:
08:90:64:4b:71:4b:53:4d:4c:d8:09:08:d3:80:e0:46:97:1a:
1d:da:c3:6f:eb:bd:ac:13:35:fe:97:1d:86:50:43:91:f9:21:
f8:69:08:f2:e4:76:0c:a4:ea:ca:fc:e9:dd:10:4f:86:8a:fb:
ad:9f:1b:dc:a3:f2:ed:60:3f:8f:6c:d1:71:2e:0e:2c:48:47:
78:1f:71:0d:a5:0a:1d:99:ff:af:99:f6:c5:77:21:e1:88:89:
79:71:0f:1f:6f:ea:e1:8a:d2:52:50:ab:e1:16:dc:a4:29:13:
63:96:cd:98:af:f0:81:96:20:41:16:94:b9:24:18:59:af:86:
a2:a0:eb:1a:89:57:dd:34:0a:dd:c8:a6:85:17:d5:73:0a:00:
f8:03:f0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:42:24 2025 by rpki-client