Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/T1jp21_L5jBYdtkzmPFfxeolXEE.roa
File: T1jp21_L5jBYdtkzmPFfxeolXEE.roa (raw, json)
Hash identifier: 1inj8xZHwFoFPXvkMr1vWgvqk/cPlVvXIr6otzRn+WA=
Subject key identifier: 4F:58:E9:DB:5F:CB:E6:30:58:76:D9:33:98:F1:5F:C5:EA:25:5C:41
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01942169A597248A421A5D3FD0C935C9F59A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/T1jp21_L5jBYdtkzmPFfxeolXEE.roa
Signing time: Wed 01 Jan 2025 10:29:19 +0000
ROA not before: Wed 01 Jan 2025 10:29:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.74.0/24 maxlen: 24
31.56.75.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.146.0/23 maxlen: 24
31.57.147.0/24 maxlen: 24
31.57.151.0/24 maxlen: 24
31.57.152.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.178.0/24 maxlen: 24
31.57.179.0/24 maxlen: 24
31.57.182.0/24 maxlen: 24
31.57.189.0/24 maxlen: 24
31.57.191.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.210.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.136.0/24 maxlen: 24
31.58.142.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.230.0/23 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.42.0/24 maxlen: 24
31.59.43.0/24 maxlen: 24
31.59.56.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.58.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.130.0/24 maxlen: 24
31.59.184.0/22 maxlen: 24
31.59.228.0/24 maxlen: 24
31.59.229.0/24 maxlen: 24
31.59.231.0/24 maxlen: 24
31.59.244.0/24 maxlen: 24
31.59.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:05:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:69:a5:97:24:8a:42:1a:5d:3f:d0:c9:35:c9:f5:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 1 10:29:19 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f58e9db5fcbe6305876d93398f15fc5ea255c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:64:f0:c4:ee:76:df:58:31:8e:98:c6:6a:82:
91:e2:c1:12:e0:70:4c:77:40:e8:0d:69:a4:1a:7a:
d7:8f:d1:9d:79:52:b0:ce:42:08:a8:4a:d8:2d:74:
a9:98:13:96:26:79:af:fe:0a:60:ab:4c:eb:dd:86:
5d:28:f6:6d:66:14:0b:8a:f4:5b:be:c6:e5:a8:93:
07:27:ea:ae:83:f8:6a:f5:f6:4e:b1:bf:72:cd:f2:
95:ca:0f:99:99:55:bc:08:85:d7:8c:78:56:f8:7b:
58:de:0b:e1:78:57:18:f6:3c:d4:e1:49:7c:f8:b0:
72:fc:48:bb:8e:73:30:2e:fb:e7:2d:53:c5:5d:d3:
b5:53:75:ec:de:73:4e:d2:7a:18:ea:f6:27:c0:67:
36:bd:1e:1c:56:9c:3f:3f:02:4c:5c:a8:d7:c1:14:
54:e5:92:6e:3c:09:f6:d4:a2:1f:32:b1:ef:e0:55:
7e:48:89:a7:19:1a:08:92:e5:b4:fc:77:fd:ad:9d:
51:c4:59:20:a7:4b:f2:05:dc:63:73:31:ac:97:0b:
fb:b9:d3:63:3d:17:c5:da:68:84:a5:fa:63:78:e5:
b5:74:64:00:df:c1:c8:ca:20:f9:1a:34:50:41:b7:
42:8a:2f:d0:c1:d7:0c:a3:0a:53:95:4d:24:e4:f9:
5a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:58:E9:DB:5F:CB:E6:30:58:76:D9:33:98:F1:5F:C5:EA:25:5C:41
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/T1jp21_L5jBYdtkzmPFfxeolXEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.71.0/24
31.56.74.0/23
31.56.89.0/24
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.132.0/23
31.57.146.0/23
31.57.151.0-31.57.152.255
31.57.176.0/21
31.57.189.0/24
31.57.191.0-31.57.195.255
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.34.0/23
31.58.136.0/24
31.58.142.0/24
31.58.152.0/22
31.58.230.0/23
31.59.41.0-31.59.43.255
31.59.56.0-31.59.58.255
31.59.96.0/22
31.59.112.0/22
31.59.130.0/24
31.59.184.0/22
31.59.228.0/23
31.59.231.0/24
31.59.244.0/23
Signature Algorithm: sha256WithRSAEncryption
29:67:a2:05:6d:05:47:ff:80:68:f8:ef:1f:d8:57:7b:45:f3:
ca:d3:43:09:bb:d2:a8:9e:87:1d:d5:0e:b3:a9:a7:c6:c7:10:
1a:24:71:d9:6a:40:1d:31:db:d4:3d:37:fc:6e:48:62:27:a8:
2d:b7:f3:9e:c0:a4:75:81:66:68:e1:54:68:9f:4c:7c:c3:ef:
dd:8e:84:22:6e:4a:c4:2c:96:3e:e3:8a:b4:e2:c6:44:d9:81:
b6:cf:f2:d0:f5:d5:61:eb:57:5d:63:e1:d1:94:b3:28:87:b5:
0a:03:9b:11:ca:55:f7:38:4c:f9:9b:87:7c:b1:6b:1a:9d:ce:
4c:5b:23:01:05:a9:58:78:80:6a:8f:89:d7:be:0c:90:c0:6e:
b4:e4:15:db:76:cb:a1:d3:0d:37:01:dc:39:84:a5:5c:f0:bd:
6c:bc:63:06:c8:1e:ee:74:d2:18:b9:dd:37:db:84:c4:b3:d2:
e7:2d:ef:2b:e3:ff:0c:b4:49:b4:ec:a4:cd:85:dd:34:2d:44:
67:98:03:0a:0b:5c:5e:20:3e:79:b4:b0:c2:f8:97:53:e5:90:
1a:d0:38:97:d4:71:a4:11:1b:df:d6:b6:a5:eb:07:36:75:1f:
ba:94:2c:6e:4c:b3:00:11:e2:cd:a7:82:4d:77:58:01:7f:c9:
20:bf:41:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 06:49:22 2025 by rpki-client