Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MzvdBu9-kI07JZhhmJ4o7Ffv7IQ.roa
File: MzvdBu9-kI07JZhhmJ4o7Ffv7IQ.roa (raw, json)
Hash identifier: 91cGfRHqd/kAIK7S8y1D8IL9MluLCqCf7adN6heIf7w=
Subject key identifier: 33:3B:DD:06:EF:7E:90:8D:3B:25:98:61:98:9E:28:EC:57:EF:EC:84
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01945700B4BF070F03D36767F1CFFBFD6EA4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MzvdBu9-kI07JZhhmJ4o7Ffv7IQ.roa
Signing time: Sat 11 Jan 2025 20:14:11 +0000
ROA not before: Sat 11 Jan 2025 20:14:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.44.0/24 maxlen: 24
31.56.49.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.74.0/24 maxlen: 24
31.56.75.0/24 maxlen: 24
31.56.88.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.112.0/24 maxlen: 24
31.56.113.0/24 maxlen: 24
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.126.0/24 maxlen: 24
31.56.157.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.133.0/24 maxlen: 24
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.142.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.163.0/24 maxlen: 24
31.58.230.0/23 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.42.0/24 maxlen: 24
31.59.43.0/24 maxlen: 24
31.59.56.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.97.0/24 maxlen: 24
31.59.108.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.112.0/24 maxlen: 24
31.59.113.0/24 maxlen: 24
31.59.130.0/24 maxlen: 24
31.59.184.0/22 maxlen: 24
31.59.228.0/24 maxlen: 24
31.59.229.0/24 maxlen: 24
31.59.231.0/24 maxlen: 24
31.59.244.0/24 maxlen: 24
31.59.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 12 Jan 2025 10:57:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:57:00:b4:bf:07:0f:03:d3:67:67:f1:cf:fb:fd:6e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 11 20:14:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=333bdd06ef7e908d3b259861989e28ec57efec84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:da:5b:00:cc:01:05:21:99:a4:25:3f:43:75:
9c:ab:d0:a3:ec:82:bf:4c:eb:98:bc:e8:fa:ac:5b:
31:e2:98:d6:dd:da:a4:d5:f0:1e:47:c4:3d:f7:9b:
fe:12:a4:a9:11:d8:95:15:00:9f:08:aa:73:7e:7b:
9d:e5:93:d7:b6:04:8d:2c:53:3e:a7:ec:42:6c:f4:
fc:b9:47:57:47:be:a5:db:e0:78:0c:c8:2c:62:ec:
e7:f7:87:3f:2d:e4:16:21:93:5c:4d:7b:6c:7c:02:
b9:ce:1c:97:22:e8:85:55:7d:dc:fc:6d:c3:d1:eb:
65:0e:c4:fc:ee:3d:d8:fb:46:1d:ba:38:e1:b0:15:
eb:d7:60:e9:19:54:cb:e9:f4:ad:17:72:9b:40:d6:
97:d7:74:11:7f:a2:ca:31:d3:66:84:93:0a:87:0c:
c2:6b:ff:38:b0:be:73:2c:2c:bd:05:4c:42:b5:3d:
81:24:61:a6:fa:a0:21:f4:cf:7b:6b:37:00:fe:88:
80:73:4d:97:5e:c3:d4:47:2e:e0:29:ee:b7:14:52:
eb:64:28:d6:d8:79:ae:f6:ca:0c:c7:c1:17:2f:87:
b7:1a:4c:51:05:ba:ca:62:f3:94:37:12:ae:b1:17:
ca:d0:e1:76:40:89:62:8d:fe:a1:c4:0c:34:6d:d1:
fa:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3B:DD:06:EF:7E:90:8D:3B:25:98:61:98:9E:28:EC:57:EF:EC:84
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MzvdBu9-kI07JZhhmJ4o7Ffv7IQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0-31.56.44.255
31.56.49.0/24
31.56.57.0/24
31.56.74.0/23
31.56.88.0/23
31.56.104.0-31.56.115.255
31.56.118.0-31.56.123.255
31.56.126.0/24
31.56.157.0/24
31.56.200.0/22
31.57.104.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.176.0/21
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.34.0/23
31.58.142.0/24
31.58.152.0/22
31.58.163.0/24
31.58.230.0/23
31.59.41.0-31.59.43.255
31.59.56.0/23
31.59.96.0/22
31.59.108.0/24
31.59.112.0/22
31.59.130.0/24
31.59.184.0/22
31.59.228.0/23
31.59.231.0/24
31.59.244.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:5c:6e:51:bb:cc:a5:39:2d:1d:32:59:3a:b7:c8:b0:2f:a6:
bd:ae:53:9f:fa:8b:1f:d5:cb:9a:15:e3:7e:74:fa:e5:31:ab:
21:0f:f6:e2:bd:db:e2:d2:f7:56:ba:d6:f7:6c:35:8a:d3:20:
41:c0:ac:a6:5f:37:fd:a9:dd:a5:4a:c7:81:e3:b6:95:19:7d:
a6:66:a9:bf:16:81:53:af:81:98:8e:a2:e8:59:ad:01:fc:8f:
30:74:c6:d9:64:29:89:fb:9d:a6:ff:36:88:dc:86:e4:2b:12:
76:fd:ec:d7:55:58:f5:ee:e5:b8:0f:7a:98:57:ac:e7:e4:24:
87:95:f8:96:64:c9:f5:f0:3e:9d:d7:66:e2:47:e3:23:1b:d0:
5d:a8:57:a9:79:1b:1d:f0:cf:7e:48:01:3a:a2:00:e9:86:7e:
db:61:bc:1f:a4:ae:b8:11:40:7e:10:35:ff:c6:80:d2:d6:4c:
b0:83:82:f4:0d:71:c0:1a:a6:81:dd:3b:f4:75:a0:1a:08:90:
87:8e:6d:f4:01:fb:cf:44:c4:d1:dd:e6:5e:b0:9c:76:99:04:
e1:4d:c2:3a:87:8b:67:33:c4:45:11:c5:1a:a7:6d:58:e8:29:
3e:57:23:af:98:31:5d:a4:d5:8e:da:03:36:27:09:4e:04:e9:
9c:71:17:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:22:00 2025 by rpki-client