Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/G68j_f9FzYFxrbGTXoqwpLGaLXU.roa
File: G68j_f9FzYFxrbGTXoqwpLGaLXU.roa (raw, json)
Hash identifier: A8S2Z38y2r2Lqqa4t5Bzfamo8Fz5AzBsF+mGgUcKlQk=
Subject key identifier: 1B:AF:23:FD:FF:45:CD:81:71:AD:B1:93:5E:8A:B0:A4:B1:9A:2D:75
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019649B0926DCF876A3C43D90DA797182FE5
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/G68j_f9FzYFxrbGTXoqwpLGaLXU.roa
Signing time: Fri 18 Apr 2025 16:17:10 +0000
ROA not before: Fri 18 Apr 2025 16:17:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.23.0/24 maxlen: 24
31.56.24.0/24 maxlen: 24
31.56.32.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.200.0/24 maxlen: 24
31.56.202.0/24 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.103.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.113.0/24 maxlen: 24
31.57.118.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.138.0/24 maxlen: 24
31.57.143.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.168.0/23 maxlen: 23
31.57.176.0/21 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.196.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.208.0/22 maxlen: 22
31.57.215.0/24 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.221.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.230.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.238.0/24 maxlen: 24
31.57.249.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.50.0/24 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.76.0/24 maxlen: 24
31.58.77.0/24 maxlen: 24
31.58.78.0/24 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.92.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 18 Apr 2025 18:23:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:b0:92:6d:cf:87:6a:3c:43:d9:0d:a7:97:18:2f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 18 16:17:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1baf23fdff45cd8171adb1935e8ab0a4b19a2d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ee:02:65:01:d5:fa:b3:96:b4:21:df:7f:90:
a1:25:95:db:80:f9:db:ce:90:65:3e:9d:80:95:bd:
81:ff:c4:94:88:ba:10:ca:c3:9e:5a:e7:88:5c:fe:
e6:aa:2f:29:2f:64:4f:76:65:c4:b8:54:15:db:c8:
c1:f2:19:7e:9b:52:99:58:be:12:9f:fe:5b:d9:6e:
a6:e7:12:9e:bd:54:d0:5f:96:3a:24:cc:83:dc:ee:
4b:49:60:eb:69:13:b4:2c:a4:4e:3b:f0:41:46:e3:
4a:f9:e9:2b:13:84:0a:22:e1:bd:20:01:8d:5d:fc:
84:1f:95:46:2b:f1:f0:19:45:bc:7a:3b:61:95:ee:
38:9f:6b:53:5f:31:2e:68:1b:fd:61:3c:7c:31:fe:
52:a6:bc:1f:22:89:70:b0:5d:57:a2:95:08:db:d6:
b2:3c:61:6d:de:c4:35:41:6e:ac:83:76:c0:6b:8f:
2b:87:a8:5b:f2:ec:65:f6:d1:dd:bb:af:c0:68:c5:
88:39:f6:d3:92:78:33:33:8d:59:16:e4:04:1b:af:
b4:9f:af:23:d9:5a:92:9b:52:dc:bc:24:15:2a:f9:
89:8a:92:ab:c9:5d:2c:77:48:bd:1d:34:e1:6c:53:
f9:f4:34:ae:23:c1:e7:50:eb:2e:81:01:85:8f:33:
2c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AF:23:FD:FF:45:CD:81:71:AD:B1:93:5E:8A:B0:A4:B1:9A:2D:75
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/G68j_f9FzYFxrbGTXoqwpLGaLXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.23.0-31.56.24.255
31.56.32.0/24
31.56.57.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.36.0/23
31.57.103.0-31.57.111.255
31.57.113.0/24
31.57.118.0/24
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.188.255
31.57.192.0-31.57.196.255
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.230.0/24
31.57.232.0/22
31.57.238.0/24
31.57.249.0-31.57.255.255
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.76.0-31.58.78.255
31.58.84.0/22
31.58.92.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.175.255
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
c2:f6:86:71:de:e5:b0:8b:42:52:68:97:36:5f:c1:d5:23:f2:
03:64:48:a9:63:df:4b:b0:85:ac:38:32:5d:a9:d1:3d:47:ce:
69:db:9c:df:64:ae:82:37:98:2f:61:ba:a5:17:70:22:de:73:
73:11:f2:e7:cd:9c:e9:15:38:29:69:8b:3b:e0:38:bc:52:86:
f7:6b:ec:01:80:ba:74:80:7e:ee:b6:d8:1b:7a:64:95:f6:74:
99:4b:a2:41:fd:82:dc:f9:89:13:04:57:e6:32:b4:b8:2b:d9:
d7:a6:33:93:a7:dc:85:5b:b5:cf:1d:d7:a7:5a:3e:88:3d:1c:
3c:cd:b3:cf:0d:a5:63:47:f2:d9:7a:f2:bd:5c:0e:20:f9:cc:
2d:75:ca:52:f7:e0:e9:08:c0:c4:12:3f:ff:38:4a:ed:dd:58:
56:0f:b6:54:2e:8a:22:e1:e9:75:b1:70:fc:8e:47:d8:0c:c7:
de:b8:8b:d0:4c:03:f8:b7:53:8d:46:37:0d:20:3d:25:7b:b9:
9c:c8:ef:da:16:1e:44:d6:0b:fd:f4:03:71:c8:b5:6f:fa:a1:
d7:e3:13:dd:b4:6e:ed:5d:a8:29:00:dd:0b:20:4a:36:5d:b4:
07:9b:57:53:02:1c:95:da:4d:52:56:0d:22:ce:4e:91:c4:89:
44:53:8c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:08:12 2025 by rpki-client