Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Mi1G0PoOA2UhwnV0f2Y-IpAxRhU.roa
File: Mi1G0PoOA2UhwnV0f2Y-IpAxRhU.roa (raw, json)
Hash identifier: c0x7Inb00vGwyAvCFxN2Bqw2bZ6t4M4t6EPXsvlB/u4=
Subject key identifier: 32:2D:46:D0:FA:0E:03:65:21:C2:75:74:7F:66:3E:22:90:31:46:15
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01956730F0A2C71E35BFAE5F9E4AF909B4BF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Mi1G0PoOA2UhwnV0f2Y-IpAxRhU.roa
Signing time: Wed 05 Mar 2025 16:43:35 +0000
ROA not before: Wed 05 Mar 2025 16:43:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.85.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.92.0/22 maxlen: 24
31.57.96.0/22 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.200.0/24 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.208.0/24 maxlen: 24
31.57.209.0/24 maxlen: 24
31.57.210.0/24 maxlen: 24
31.57.211.0/24 maxlen: 24
31.57.212.0/24 maxlen: 24
31.57.213.0/24 maxlen: 24
31.57.214.0/24 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.57.254.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.76.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.91.0/24 maxlen: 24
31.58.100.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.224.0/22 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.184.0/22 maxlen: 24
31.59.186.0/24 maxlen: 24
31.59.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Mar 2025 11:50:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:67:30:f0:a2:c7:1e:35:bf:ae:5f:9e:4a:f9:09:b4:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 5 16:43:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=322d46d0fa0e036521c275747f663e2290314615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3b:82:c2:fe:37:9d:3b:fa:c2:bd:e3:84:49:
7d:32:cc:d0:f6:cb:4a:81:28:a5:2d:5a:61:c4:2d:
d4:71:ba:38:04:09:6f:0c:84:c4:3b:51:fd:c6:64:
6f:07:48:2f:36:6d:65:b9:cd:b2:15:19:8e:37:13:
68:bb:7e:2a:60:d6:0f:fc:3e:5b:63:7a:a1:b1:73:
22:61:fb:9e:02:8c:8b:ce:26:bf:e1:4b:9b:a0:89:
56:91:0c:b9:5e:f2:f1:1a:dc:7a:0f:62:2d:be:ee:
77:a7:a7:33:6c:c5:8e:2d:62:4c:16:b9:b1:a7:08:
f3:c6:95:3d:63:9c:af:54:1a:c0:66:af:19:09:41:
1b:90:c6:55:d9:51:c9:51:46:dd:22:9a:c9:19:df:
11:7e:58:00:02:9d:3d:9d:c2:5b:62:2d:5e:de:40:
18:8f:25:17:14:58:8e:23:aa:28:25:63:de:b0:a0:
99:14:3b:68:7a:46:04:c6:cb:cb:8d:db:04:14:4f:
7b:1f:a9:1a:da:94:d5:58:bc:61:b2:cd:9e:42:87:
5c:a5:f6:df:ee:38:47:c6:51:2e:da:98:1b:a3:44:
8f:47:6c:27:5d:b1:07:e1:cd:b5:eb:34:cc:a6:f0:
20:d7:58:10:82:7a:f9:2b:b2:5e:84:a3:dd:bd:59:
93:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2D:46:D0:FA:0E:03:65:21:C2:75:74:7F:66:3E:22:90:31:46:15
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Mi1G0PoOA2UhwnV0f2Y-IpAxRhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.71.0/24
31.56.85.0/24
31.56.89.0-31.56.91.255
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.92.0-31.57.99.255
31.57.104.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.176.0/21
31.57.188.0/24
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.34.0/23
31.58.50.0/23
31.58.68.0/22
31.58.76.0/22
31.58.84.0/22
31.58.91.0/24
31.58.100.0/22
31.58.152.0/22
31.58.224.0/22
31.59.41.0/24
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.184.0/22
31.59.230.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:ad:3a:00:0d:49:b1:04:dd:7b:dd:d2:ca:c2:f0:e9:f4:10:
41:56:6b:dc:56:83:dd:20:d6:77:3d:99:e7:45:bd:8d:2f:03:
b9:d7:f5:89:0e:74:35:eb:12:90:60:bc:c1:3e:90:6d:90:97:
a1:80:04:8b:f1:61:e4:31:3e:eb:ac:88:7e:6f:3b:b2:6e:a9:
ca:a3:48:b2:9d:79:17:2a:5a:28:3c:11:47:db:14:66:64:9d:
82:7b:e4:29:2b:3a:45:a1:7b:f3:c1:35:d4:2b:00:fb:f4:91:
c5:b6:cc:8b:1d:09:6b:30:c0:be:e0:d5:17:c9:3b:68:b1:f0:
d9:fd:f6:61:45:1f:4d:24:cf:e6:83:fa:83:f0:dd:37:9b:d3:
f5:bd:c6:76:e5:f7:bb:ad:ac:5f:61:42:0d:5d:e1:95:9d:47:
fd:11:95:98:68:c0:2c:07:d9:f3:e9:ef:3f:96:1f:27:a5:2d:
ff:d9:63:11:d8:e1:0b:1e:44:34:b5:02:7f:f6:24:41:f3:ff:
48:2a:bc:2c:69:87:af:33:86:52:17:71:a5:8a:9f:2f:e0:3a:
2d:f4:fa:16:8b:e6:9e:d3:5c:88:7c:89:35:56:c3:2c:9d:7d:
2e:e2:c3:17:03:b6:3d:d3:fe:85:40:43:46:46:df:45:39:28:
11:bf:8a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:10:24 2025 by rpki-client