Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JuFq12TWnSSuCddOKgDKbIaMjo8.roa
File: JuFq12TWnSSuCddOKgDKbIaMjo8.roa (raw, json)
Hash identifier: rRUy0Rtvta7qnORwbiS01R5LV9rYaug2Lp2GI+43PC4=
Subject key identifier: 26:E1:6A:D7:64:D6:9D:24:AE:09:D7:4E:2A:00:CA:6C:86:8C:8E:8F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019632B7FAD30EC03F2895DD07F7B2F894B8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JuFq12TWnSSuCddOKgDKbIaMjo8.roa
Signing time: Mon 14 Apr 2025 05:14:00 +0000
ROA not before: Mon 14 Apr 2025 05:14:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.23.0/24 maxlen: 24
31.56.24.0/24 maxlen: 24
31.56.32.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.67.0/24 maxlen: 24
31.56.68.0/24 maxlen: 24
31.56.70.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.200.0/24 maxlen: 24
31.56.202.0/24 maxlen: 24
31.57.103.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.113.0/24 maxlen: 24
31.57.114.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.138.0/24 maxlen: 24
31.57.143.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.168.0/23 maxlen: 23
31.57.176.0/21 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.196.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.208.0/22 maxlen: 22
31.57.215.0/24 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.221.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.230.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.238.0/24 maxlen: 24
31.57.249.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.76.0/24 maxlen: 24
31.58.77.0/24 maxlen: 24
31.58.78.0/24 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.92.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 14 Apr 2025 17:04:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:32:b7:fa:d3:0e:c0:3f:28:95:dd:07:f7:b2:f8:94:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 14 05:14:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26e16ad764d69d24ae09d74e2a00ca6c868c8e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:51:e9:ac:a7:4c:76:8e:da:a8:0c:3e:5b:da:
78:4d:22:a8:31:e8:bc:d3:9d:54:5f:a1:de:a4:1e:
8d:26:d8:4d:10:17:2b:0a:90:68:3a:61:68:1e:9f:
57:e6:7a:11:5b:bf:51:47:8c:bb:ea:6d:77:37:16:
1f:22:f3:c5:52:25:4b:1f:08:84:c3:13:d3:71:bf:
58:bb:46:55:85:d3:c9:5a:bb:4e:66:b7:f0:ad:24:
58:c0:8b:62:f3:6b:1b:5a:55:2b:47:53:0d:b8:6f:
76:5f:4e:d4:56:33:81:f1:20:3a:40:f4:d6:ed:c7:
ea:90:74:24:ee:24:71:9b:a2:16:8a:23:6f:0b:17:
52:b6:49:63:ec:50:9b:60:4d:c0:3e:be:95:70:72:
66:78:b0:86:87:ee:f8:84:f9:19:70:1f:6c:78:e7:
f9:1f:cb:37:91:62:fe:da:65:cd:b4:96:b9:53:ef:
5f:98:fb:3e:6d:ef:fa:70:1e:21:6d:0a:b0:35:f1:
5b:dd:69:b3:cb:75:da:e1:d3:be:e7:25:63:79:ad:
3e:86:07:eb:e0:77:ee:8b:50:7a:5b:d9:fa:42:dc:
8e:1e:82:2d:34:13:d2:0f:bb:4e:68:ba:f7:79:ab:
44:53:5f:3e:c9:6e:01:e6:cd:53:ab:cb:f2:1f:85:
41:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E1:6A:D7:64:D6:9D:24:AE:09:D7:4E:2A:00:CA:6C:86:8C:8E:8F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JuFq12TWnSSuCddOKgDKbIaMjo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.23.0-31.56.24.255
31.56.32.0/24
31.56.57.0/24
31.56.67.0-31.56.68.255
31.56.70.0/23
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.103.0-31.57.111.255
31.57.113.0-31.57.114.255
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.188.255
31.57.192.0-31.57.196.255
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.230.0/24
31.57.232.0/22
31.57.238.0/24
31.57.249.0-31.57.255.255
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.76.0-31.58.78.255
31.58.84.0/22
31.58.92.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.175.255
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:eb:29:d4:e0:32:b8:e0:2f:ab:e4:40:20:63:c5:4b:0a:17:
0a:e4:4d:ea:e7:bc:b5:05:3c:77:61:e8:85:f9:8e:f3:5d:23:
9f:f9:8d:18:a5:9a:8d:57:88:28:05:d0:ec:83:85:16:b9:9e:
62:ff:84:ea:7e:37:aa:f2:1f:78:b7:8e:75:72:f6:75:a5:7b:
d5:5c:ee:78:a1:4c:5e:6a:90:0b:43:38:7c:5f:15:a2:13:d9:
41:17:57:23:79:a7:87:17:bd:cc:0c:12:98:bb:56:18:f4:0e:
43:1d:b9:13:e3:8b:1f:72:24:c7:b7:e0:2b:b6:2c:3d:69:3f:
30:fd:01:c2:6a:8f:65:8c:5e:ee:73:61:28:6d:8d:af:f5:d3:
3c:2f:84:52:19:2d:a1:21:31:12:89:71:8b:bd:d5:8a:dd:86:
02:08:cb:6a:e3:20:e7:5e:b1:63:f6:63:87:cf:95:56:07:ab:
99:1e:27:3c:13:5d:05:10:50:11:94:37:73:a9:00:36:51:59:
35:9c:a9:09:5e:20:04:24:40:b7:49:7e:d5:bf:33:bf:03:c4:
c9:14:d3:89:89:2c:21:4c:ff:0f:1c:68:00:28:dd:5f:43:f7:
22:23:75:d7:2b:30:3c:a4:00:f1:57:58:c7:5f:e7:50:f0:3b:
6a:3d:6b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:44:42 2025 by rpki-client