Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QAbzzCCIgsSxUkdsFnB5a53gWE4.roa
File: QAbzzCCIgsSxUkdsFnB5a53gWE4.roa (raw, json)
Hash identifier: 9qTm+PMtQZpdTZ2QbL6abbO68R7WZJmwPJBMYzMKlm0=
Subject key identifier: 40:06:F3:CC:20:88:82:C4:B1:52:47:6C:16:70:79:6B:9D:E0:58:4E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01960FE93DBEC960B0E7E76E311B83824D46
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QAbzzCCIgsSxUkdsFnB5a53gWE4.roa
Signing time: Mon 07 Apr 2025 11:01:05 +0000
ROA not before: Mon 07 Apr 2025 11:01:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.23.0/24 maxlen: 24
31.56.24.0/24 maxlen: 24
31.56.32.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.69.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.74.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.200.0/24 maxlen: 24
31.56.202.0/24 maxlen: 24
31.56.204.0/22 maxlen: 24
31.56.204.0/23 maxlen: 24
31.56.206.0/23 maxlen: 24
31.57.103.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.113.0/24 maxlen: 24
31.57.114.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.143.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.168.0/23 maxlen: 23
31.57.176.0/21 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.196.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.215.0/24 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.221.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.238.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.57.252.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.76.0/24 maxlen: 24
31.58.77.0/24 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.92.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.71.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 07 Apr 2025 17:39:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:e9:3d:be:c9:60:b0:e7:e7:6e:31:1b:83:82:4d:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 7 11:01:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4006f3cc208882c4b152476c1670796b9de0584e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:2d:17:d5:3a:6d:55:0a:38:0a:71:7a:df:8f:
b3:c0:8e:a5:bf:35:9b:b2:dd:d2:2e:df:4f:ab:50:
fe:5c:06:5e:5f:48:88:ba:a2:16:91:d6:c9:ef:a6:
42:9d:11:a7:e4:51:d4:77:84:01:a0:1e:66:6c:9d:
f3:99:59:28:21:5a:2a:d1:71:9a:34:39:46:94:a1:
e7:73:92:47:7b:27:94:93:70:e9:ac:1c:ab:16:6b:
f1:56:58:f8:cb:bd:88:c9:25:0c:cd:28:db:ed:c3:
1f:c8:00:95:0f:46:ef:ad:84:00:b2:32:65:25:04:
d0:57:4e:28:ef:ee:0b:89:15:82:26:61:d7:7f:d2:
21:0b:80:57:53:e4:f3:0d:ab:bf:c0:4a:72:33:b4:
f2:d3:cf:aa:ec:7e:da:ce:cd:88:01:66:71:49:1c:
a3:63:16:bd:b0:a8:a5:f2:4f:0a:4f:e0:94:71:ca:
a3:79:c7:f7:fe:ba:73:a5:8d:a0:b5:27:73:6a:27:
8d:80:4d:df:2c:53:41:9a:14:f3:29:0b:a2:b1:1c:
de:05:da:99:c8:18:6b:b3:61:a9:83:36:64:0a:f6:
92:47:0a:cf:9a:e5:b0:21:de:3b:e7:6c:df:af:56:
3f:b6:fa:25:cf:7f:ad:1a:2a:e2:bd:e4:a9:94:97:
c3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:06:F3:CC:20:88:82:C4:B1:52:47:6C:16:70:79:6B:9D:E0:58:4E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QAbzzCCIgsSxUkdsFnB5a53gWE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.23.0-31.56.24.255
31.56.32.0/24
31.56.57.0/24
31.56.69.0/24
31.56.71.0/24
31.56.74.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/21
31.57.103.0-31.57.111.255
31.57.113.0-31.57.114.255
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0-31.57.196.255
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.238.0/24
31.57.252.0/22
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.76.0/23
31.58.84.0/22
31.58.92.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.71.0/24
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.175.255
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
71:59:3b:19:9d:4a:08:d0:41:0e:1c:3f:2e:81:2a:1f:34:93:
6d:65:67:65:43:22:3b:32:94:3a:77:ae:c8:31:5b:3d:25:cc:
9f:f1:41:a9:af:9f:04:4c:34:1c:76:bd:e6:e8:16:57:62:40:
1e:60:04:4f:21:78:7c:1c:1a:9d:86:43:c1:4d:15:94:a7:72:
cb:c5:cf:6d:d1:b1:ae:79:3f:16:b3:cc:ba:f0:6f:6e:15:2f:
13:c7:7f:8d:8c:01:3c:41:ec:5d:c6:8a:06:5b:c7:e9:6f:2d:
7b:29:5e:4c:4b:0d:22:eb:4d:63:ba:6e:42:78:82:d3:f9:3f:
f0:f4:c8:4c:5d:34:72:89:30:84:e5:87:2b:4e:ae:b8:00:cd:
90:34:4c:a3:1a:1c:08:bd:2b:77:91:1e:24:c1:76:5d:da:22:
bd:f3:73:12:3c:70:bf:e4:f7:89:8c:2d:c2:cb:27:ab:41:ba:
15:8c:fc:0d:fe:8d:4e:85:26:88:d0:23:6e:45:30:5d:4d:4e:
88:2e:d3:b3:c7:66:71:1e:b8:49:df:99:77:36:39:91:1d:65:
d8:a6:45:cf:3a:ce:f6:4c:1d:fb:bd:a2:e8:e4:82:0f:35:2c:
5f:2f:bf:7d:3a:7a:a0:b6:69:d4:fe:16:17:48:11:d0:60:3a:
bd:ae:1c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:31:34 2025 by rpki-client