Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/K-bU3Mh90_K1JVtW6qmNyKgwm-E.roa
File: K-bU3Mh90_K1JVtW6qmNyKgwm-E.roa (raw, json)
Hash identifier: qb0qX06j7wKjNOY9si2a7w7M4VtMOSW2Mq1MLC7mZag=
Subject key identifier: 2B:E6:D4:DC:C8:7D:D3:F2:B5:25:5B:56:EA:A9:8D:C8:A8:30:9B:E1
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019607870019D6A48B271CBA9B2722BCF5A1
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/K-bU3Mh90_K1JVtW6qmNyKgwm-E.roa
Signing time: Sat 05 Apr 2025 19:56:50 +0000
ROA not before: Sat 05 Apr 2025 19:56:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.23.0/24 maxlen: 24
31.56.24.0/24 maxlen: 24
31.56.32.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.74.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.200.0/24 maxlen: 24
31.56.202.0/24 maxlen: 24
31.56.204.0/22 maxlen: 24
31.56.204.0/23 maxlen: 24
31.56.206.0/23 maxlen: 24
31.57.103.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.113.0/24 maxlen: 24
31.57.114.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.143.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.168.0/23 maxlen: 23
31.57.176.0/21 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.196.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.215.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.221.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.238.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.57.252.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.76.0/24 maxlen: 24
31.58.77.0/24 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.92.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.71.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 06 Apr 2025 05:11:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:07:87:00:19:d6:a4:8b:27:1c:ba:9b:27:22:bc:f5:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 5 19:56:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2be6d4dcc87dd3f2b5255b56eaa98dc8a8309be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:20:76:21:4b:bf:89:67:0d:c1:c7:f2:03:3b:
a5:eb:55:2f:78:c2:df:ea:e9:43:5f:2b:bb:a8:8e:
dc:ea:ac:da:09:45:00:88:b5:e1:ba:62:b1:98:c0:
0e:e5:64:5a:dd:aa:a2:1a:83:f4:a2:41:18:54:09:
97:c1:a3:1c:c6:28:ee:d9:bb:9d:0e:72:84:cd:88:
64:73:9f:e4:37:bb:da:e3:34:0d:9c:9c:b1:47:88:
07:c9:84:37:70:77:76:6b:60:f5:2e:37:cf:b8:a5:
91:8a:b2:49:e8:19:3e:0b:ef:7f:af:37:e6:6a:51:
80:e0:72:37:59:eb:3c:91:79:8d:80:6d:75:36:16:
a2:c7:e3:11:bb:1c:63:ab:5b:bf:97:3d:25:25:c8:
b4:7e:12:06:2d:7b:20:ed:92:66:f0:c7:42:15:a3:
44:50:6a:08:2e:85:a9:da:3a:29:89:e4:18:72:ad:
d5:97:a2:9b:19:51:9e:80:b1:d8:88:e2:a1:b4:01:
6f:93:d5:5d:68:2b:80:03:06:2d:91:01:f3:3f:c0:
93:e8:7e:96:7c:7a:37:26:95:bc:cf:60:bf:98:c7:
e8:90:01:94:cc:4e:57:ef:f1:83:91:80:ef:89:19:
ae:13:d5:f7:1c:18:04:da:88:7b:d0:9e:0c:06:8b:
76:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E6:D4:DC:C8:7D:D3:F2:B5:25:5B:56:EA:A9:8D:C8:A8:30:9B:E1
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/K-bU3Mh90_K1JVtW6qmNyKgwm-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.23.0-31.56.24.255
31.56.32.0/24
31.56.57.0/24
31.56.71.0/24
31.56.74.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/21
31.57.103.0-31.57.111.255
31.57.113.0-31.57.114.255
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0-31.57.196.255
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.238.0/24
31.57.252.0/22
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.76.0/23
31.58.84.0/22
31.58.92.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.71.0/24
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.175.255
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:36:23:21:90:51:db:46:4f:aa:ae:16:d3:ec:b0:24:bf:f1:
92:d2:8a:65:34:e3:1d:c7:9d:3d:58:c5:70:80:54:1f:7e:3b:
0c:52:42:e5:95:83:73:a5:69:88:05:08:ee:ba:18:85:15:3c:
4d:ce:cd:71:e6:1a:c2:69:a8:b9:8a:c8:bc:e6:b5:11:88:da:
7d:91:5f:66:56:30:fa:ec:ce:59:fd:ed:2a:89:b1:0f:0b:e6:
9d:76:cf:e4:b4:0a:5f:66:28:6c:f4:13:33:6c:d7:d2:f9:f3:
15:99:a7:45:c2:b6:bc:f0:ba:c3:a6:44:2f:3f:c4:67:94:b0:
b2:97:61:4e:df:88:fc:95:9b:24:24:70:f6:75:23:64:8c:ec:
cf:eb:84:43:3a:3d:bc:00:a0:12:08:4e:65:01:1f:b7:4f:6f:
3d:1e:ab:29:da:b0:43:22:c1:e6:61:cd:86:58:dc:09:7f:93:
4b:7a:22:ed:cf:65:fe:73:05:66:62:fb:e6:6e:cf:6c:9b:0a:
a5:5d:40:10:31:17:6a:88:79:b7:bc:6f:16:54:73:d7:fa:7e:
3f:75:0c:a0:5c:6b:f4:a3:8b:92:c5:fb:d9:78:00:6a:93:94:
91:92:a8:f3:75:fc:ae:6c:64:c6:fe:1f:70:2d:25:09:9c:cb:
21:15:fe:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:44:56 2025 by rpki-client