Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PDynFtTu_zkvN1WLzt2CopUu0gE.roa
File: PDynFtTu_zkvN1WLzt2CopUu0gE.roa (raw, json)
Hash identifier: VfTC3ZZH9cmNkaQoESdFg5LMSB+hUPFgjvu//S1EYI4=
Subject key identifier: 3C:3C:A7:16:D4:EE:FF:39:2F:37:55:8B:CE:DD:82:A2:95:2E:D2:01
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194E1ED1DA93E46E2A44895F5EA35362F28
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PDynFtTu_zkvN1WLzt2CopUu0gE.roa
Signing time: Fri 07 Feb 2025 19:40:00 +0000
ROA not before: Fri 07 Feb 2025 19:40:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.129.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.151.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.191.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.33.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.163.0/24 maxlen: 24
31.58.230.0/23 maxlen: 24
31.59.42.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.108.0/24 maxlen: 24
31.59.109.0/24 maxlen: 24
31.59.110.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
31.59.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 08 Feb 2025 19:27:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e1:ed:1d:a9:3e:46:e2:a4:48:95:f5:ea:35:36:2f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 7 19:40:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c3ca716d4eeff392f37558bcedd82a2952ed201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:84:52:bd:a7:a8:3f:a4:ec:cb:35:3c:3e:01:
54:51:1e:b3:5a:f6:56:8d:b0:1b:d4:ec:95:37:87:
41:15:46:b5:80:03:11:a2:13:b6:f7:e3:4e:2c:32:
57:c3:07:0d:98:0b:68:c2:e7:f9:19:89:23:d1:d4:
d5:a5:28:4c:51:ee:33:c3:cf:f0:b2:7b:22:94:5f:
f4:04:c8:dc:a3:6b:9f:5e:25:d0:7b:b4:9e:52:cd:
52:75:de:c1:6d:25:e8:a3:56:86:c7:c8:b9:69:8e:
bb:2e:fb:35:c1:c8:9b:70:ea:74:fc:4c:49:bd:45:
87:4b:59:34:65:00:c8:f8:2a:35:df:13:a1:b9:22:
10:9f:91:9d:6e:d2:89:a6:2b:25:69:84:98:15:0b:
b8:c4:ec:e5:95:f9:b0:bc:91:26:6f:05:3a:a5:3f:
f9:91:9a:31:46:ab:cc:1f:8a:5f:3c:2b:df:4c:0f:
78:30:35:d8:9d:94:65:61:e8:7c:f6:3f:a2:f8:df:
fd:0e:5e:8b:9d:fd:81:fb:2e:55:0e:b3:96:a1:77:
39:b9:f7:6b:08:76:a9:0a:af:61:67:16:d2:cd:1f:
77:56:73:88:f9:e5:56:99:48:78:8b:11:09:b2:b3:
ba:12:47:ad:67:23:2c:b1:c3:c4:8d:f2:fc:7a:fa:
4d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3C:A7:16:D4:EE:FF:39:2F:37:55:8B:CE:DD:82:A2:95:2E:D2:01
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PDynFtTu_zkvN1WLzt2CopUu0gE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.104.0/21
31.57.129.0/24
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.151.0/24
31.57.176.0/21
31.57.191.0-31.57.195.255
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.33.0-31.58.35.255
31.58.152.0/22
31.58.163.0/24
31.58.230.0/23
31.59.42.0/24
31.59.57.0/24
31.59.96.0/22
31.59.108.0-31.59.110.255
31.59.112.0/22
31.59.184.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:47:eb:50:85:81:43:4f:38:09:a8:40:b7:5e:ef:57:8e:0c:
d6:17:48:ea:d3:3f:08:4b:14:79:87:2d:b8:1c:f9:57:bb:0b:
32:42:97:18:4a:6f:69:8e:ad:63:99:86:6a:b1:a9:30:b6:ee:
81:57:dc:5b:72:ab:12:22:a7:05:2b:3b:2e:ea:62:7a:b8:2e:
88:3a:78:b2:2b:82:5e:6e:31:4e:10:2c:84:b5:1b:ca:f4:8f:
99:d2:51:0f:e9:01:c0:81:e6:a2:29:98:1c:0e:93:b9:ab:db:
14:d4:c4:18:45:2d:e5:13:78:17:2b:fc:9a:13:4c:ab:66:70:
d7:7f:95:58:8a:52:ec:fe:a5:32:81:e2:0e:df:51:57:58:b3:
2e:60:08:fa:6a:c0:92:cd:a1:64:ed:5c:72:85:29:55:15:e8:
01:09:47:d2:a0:ef:cc:25:66:03:7e:90:45:03:cc:33:d3:84:
8b:0c:58:ca:f9:4b:6a:b8:d7:eb:ab:8a:f7:0a:1d:d4:f4:83:
e8:fe:77:df:5c:5c:6d:4e:ac:d5:a1:69:8e:5b:10:43:43:0e:
f7:7b:d9:ef:77:8d:c7:69:c1:ef:48:1a:39:35:42:60:76:83:
b3:0b:82:1b:52:11:c6:5e:a1:52:47:ec:17:96:ed:4c:c6:cd:
d9:75:fd:73
-----BEGIN CERTIFICATE-----
MIIF3jCCBMagAwIBAgISAZTh7R2pPkbipEiV9eo1Ni8oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMjA3MTk0MDAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzNjYTcxNmQ0ZWVmZjM5MmYzNzU1OGJjZWRkODJhMjk1MmVkMjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoRSvaeoP6TsyzU8PgFUUR6zWvZW
jbAb1OyVN4dBFUa1gAMRohO29+NOLDJXwwcNmAtowuf5GYkj0dTVpShMUe4zw8/w
snsilF/0BMjco2ufXiXQe7SeUs1Sdd7BbSXoo1aGx8i5aY67Lvs1wcibcOp0/ExJ
vUWHS1k0ZQDI+Co13xOhuSIQn5GdbtKJpislaYSYFQu4xOzllfmwvJEmbwU6pT/5
kZoxRqvMH4pfPCvfTA94MDXYnZRlYeh89j+i+N/9Dl6Lnf2B+y5VDrOWoXc5ufdr
CHapCq9hZxbSzR93VnOI+eVWmUh4ixEJsrO6EketZyMsscPEjfL8evpNbwIDAQAB
o4IC6jCCAuYwHQYDVR0OBBYEFDw8pxbU7v85LzdVi87dgqKVLtIBMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvUER5bkZ0VHVfemt2TjFXTHp0MkNvcFV1MGdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIH/BggrBgEFBQcBBwEB/wSB7zCB7DCB6QQCAAEwgeIDBAEf
OAQDBAAfOBgDBAEfOCoDBAAfODkDBAEfOFoDBAMfOGgDBAEfOHIwDAMEAR84dgME
Ah84eAMEAh84yAMEAx85aAMEAB85gQMEAR85hAMEAx85iAMEAR85kgMEAB85lwME
Ax85sDAMAwQAHzm/AwQCHznAAwQBHznIMAwDBAQfOdADBAIfOeADBAIfOegDBAIf
OfwwDAMEAB86IQMEAh86IAMEAh86mAMEAB86owMEAR865gMEAB87KgMEAB87OQME
Ah87YDAMAwQCHztsAwQAHztuAwQCHztwAwQCHzu4MA0GCSqGSIb3DQEBCwUAA4IB
AQCoR+tQhYFDTzgJqEC3Xu9XjgzWF0jq0z8ISxR5hy24HPlXuwsyQpcYSm9pjq1j
mYZqsakwtu6BV9xbcqsSIqcFKzsu6mJ6uC6IOniyK4JebjFOECyEtRvK9I+Z0lEP
6QHAgeaiKZgcDpO5q9sU1MQYRS3lE3gXK/yaE0yrZnDXf5VYilLs/qUygeIO31FX
WLMuYAj6asCSzaFk7VxyhSlVFegBCUfSoO/MJWYDfpBFA8wz04SLDFjK+UtquNfr
q4r3Ch3U9IPo/nffXFxtTqzVoWmOWxBDQw73e9nvd43HacHvSBo5NUJgdoOzC4Ib
UhHGXqFSR+wXlu1Mxs3Zdf1z
-----END CERTIFICATE-----
Generated at Wed Apr 30 02:51:06 2025 by rpki-client