Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PLePSEE77y4FHLupp20DHZRQA3o.roa
File: PLePSEE77y4FHLupp20DHZRQA3o.roa (raw, json)
Hash identifier: fZDgRS/DGPUrM/St2i3xXaV48RhkDINBFs3lD1UpLu8=
Subject key identifier: 3C:B7:8F:48:41:3B:EF:2E:05:1C:BB:A9:A7:6D:03:1D:94:50:03:7A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194C61094C4ECEEE46473FFE760893AB6E1
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PLePSEE77y4FHLupp20DHZRQA3o.roa
Signing time: Sun 02 Feb 2025 09:49:22 +0000
ROA not before: Sun 02 Feb 2025 09:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.74.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.156.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.129.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.191.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.197.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.238.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.33.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.163.0/24 maxlen: 24
31.58.230.0/23 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.42.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.108.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
31.59.228.0/24 maxlen: 24
31.59.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 02 Feb 2025 18:25:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c6:10:94:c4:ec:ee:e4:64:73:ff:e7:60:89:3a:b6:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 2 09:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3cb78f48413bef2e051cbba9a76d031d9450037a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:94:69:f2:b8:d2:5c:b3:fe:6c:52:01:85:fb:
42:bf:25:9b:dc:4e:68:f5:65:bd:da:d9:26:b3:1f:
15:a8:a4:79:37:19:58:f3:82:b5:b3:95:38:2a:d3:
8e:e4:89:a5:bb:62:20:fb:d6:ce:56:1d:b2:27:78:
f1:fe:a2:cd:ed:cb:16:43:5c:63:e0:f3:44:e9:ab:
48:3b:38:b4:95:34:d9:33:4a:32:fe:db:16:a4:3a:
ca:d0:f0:33:c7:75:d2:c6:c1:dc:58:aa:fa:6f:85:
3b:b9:ea:7f:78:10:2f:c1:51:1a:5b:65:fb:93:3e:
34:9c:43:6c:48:84:39:fe:65:e6:84:50:13:39:61:
a7:f6:2e:d9:2e:39:3d:d7:e4:85:d1:61:d8:80:be:
14:0d:3f:5c:ae:02:e2:2c:11:09:80:ca:8f:eb:1b:
c8:c5:1c:a1:d7:7f:8e:5d:ed:66:dd:1f:ea:7f:e3:
8c:1f:98:68:21:2e:12:d2:4f:96:87:af:07:87:ab:
60:36:5e:e9:70:91:08:25:59:74:f2:af:a1:ac:0d:
2e:1b:81:dd:a1:4b:85:9a:91:0a:9d:34:75:41:c1:
0b:50:89:62:b3:2c:48:1d:83:49:e3:42:3a:da:ed:
a0:d4:11:ad:0f:98:61:0b:cb:01:c7:c2:48:4e:ee:
1f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B7:8F:48:41:3B:EF:2E:05:1C:BB:A9:A7:6D:03:1D:94:50:03:7A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PLePSEE77y4FHLupp20DHZRQA3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.74.0/24
31.56.89.0-31.56.91.255
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.156.0/24
31.56.200.0/22
31.57.104.0/21
31.57.129.0/24
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.176.0/21
31.57.191.0-31.57.195.255
31.57.197.0/24
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.238.0/24
31.57.252.0/22
31.58.33.0-31.58.35.255
31.58.152.0/22
31.58.163.0/24
31.58.230.0/23
31.59.41.0-31.59.42.255
31.59.57.0/24
31.59.96.0/22
31.59.108.0/24
31.59.112.0/22
31.59.184.0/22
31.59.228.0/24
31.59.230.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:aa:32:53:d3:7b:4d:1a:99:8b:f3:d7:86:4b:ca:da:5f:03:
f4:62:23:0d:19:a3:6d:58:c8:67:1c:2a:a3:08:34:bb:86:89:
7c:f9:b0:1b:ae:a1:b2:cc:50:29:41:3e:35:60:2b:52:a3:db:
d0:1e:3a:47:e6:4a:3b:e3:d7:5f:bf:ba:25:e3:86:ac:3c:4b:
9e:f1:ae:06:13:ff:04:d4:93:fc:4b:48:79:8f:9f:36:2e:a5:
1c:e0:77:34:8c:e3:b3:a0:7c:82:00:61:60:00:2e:87:6d:2c:
fe:4d:ef:3b:d7:18:d1:84:e7:4e:66:c0:62:a4:92:da:2e:1e:
71:e2:8a:56:fc:77:c4:ba:42:ce:03:ed:32:01:69:ca:ae:40:
5a:d1:cd:29:b1:49:9d:c2:c9:65:f0:de:26:a5:9c:ef:46:e5:
10:37:09:d8:5b:c7:9c:37:e8:cd:9b:4c:80:55:69:4e:d1:fc:
6f:c6:5c:1b:c5:68:ef:71:9d:83:14:65:3e:8c:be:4d:24:b6:
e3:f3:4d:ef:17:b0:81:15:71:cd:aa:5e:d7:78:70:7f:87:16:
af:97:3b:20:3a:70:e1:f2:7b:14:b5:b3:15:1d:a0:81:ae:f7:
f2:33:39:85:5d:85:66:d3:78:62:59:17:3e:34:06:c2:0e:93:
42:65:2f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:06:21 2025 by rpki-client