Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VMZde74fUbZWzJXD5HLMSprbYvE.roa
File: VMZde74fUbZWzJXD5HLMSprbYvE.roa (raw, json)
Hash identifier: a45aM/Sbl+fn4y2Usg5uJCKLO2F6qGYIfE1nqzBjDIc=
Subject key identifier: 54:C6:5D:7B:BE:1F:51:B6:56:CC:95:C3:E4:72:CC:4A:9A:DB:62:F1
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194F459F406B7B0F3A5EA5B6BA58F5C9B33
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VMZde74fUbZWzJXD5HLMSprbYvE.roa
Signing time: Tue 11 Feb 2025 09:32:03 +0000
ROA not before: Tue 11 Feb 2025 09:32:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.67.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.129.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.132.0/24 maxlen: 24
31.57.136.0/21 maxlen: 24
31.57.142.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.151.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.191.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.244.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.33.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.157.0/24 maxlen: 24
31.58.163.0/24 maxlen: 24
31.58.230.0/23 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.108.0/24 maxlen: 24
31.59.109.0/24 maxlen: 24
31.59.110.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
31.59.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 17:08:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f4:59:f4:06:b7:b0:f3:a5:ea:5b:6b:a5:8f:5c:9b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 11 09:32:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54c65d7bbe1f51b656cc95c3e472cc4a9adb62f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9f:d9:42:95:c4:4c:ec:48:02:3e:10:ec:d6:
47:f2:1d:59:75:1a:ff:49:70:0d:97:19:8a:bd:c2:
96:8f:6d:3e:13:49:60:49:b7:03:33:d4:23:f8:0b:
be:c9:65:43:12:40:4b:9c:3e:e0:92:2d:ce:1e:d8:
d3:43:c9:a8:1e:51:ad:91:6b:d9:96:97:1a:19:9d:
d3:0f:1c:d6:95:d7:13:50:fe:bf:14:a3:5b:23:7e:
1e:46:85:43:fa:9a:6f:7e:e4:09:16:4f:da:18:99:
3c:87:0d:18:50:3e:05:a1:59:04:28:4f:61:85:20:
28:a4:b4:b6:61:16:5c:7e:57:c3:2b:7c:52:9d:91:
e3:e4:e7:3d:ce:06:fe:b9:2e:0a:21:5f:af:a7:52:
f9:7c:7d:1f:fc:ec:e7:1d:68:57:a3:ca:94:c4:0b:
7d:ba:ed:17:89:34:03:ae:0d:91:ba:91:a9:bc:f4:
3f:e7:72:7c:95:24:b8:9a:f7:4a:9a:27:a2:d8:df:
7a:24:e2:93:bb:c9:2d:cb:50:0a:1c:2d:52:9c:ed:
6b:e4:67:7a:3a:f7:77:16:9e:2c:89:76:64:f7:c1:
7e:c0:e7:8c:1b:ab:6b:3f:de:7e:40:47:ef:53:67:
b2:d2:96:ec:e5:f8:04:16:d3:16:ea:16:f8:39:bb:
d1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C6:5D:7B:BE:1F:51:B6:56:CC:95:C3:E4:72:CC:4A:9A:DB:62:F1
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VMZde74fUbZWzJXD5HLMSprbYvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.67.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.104.0/21
31.57.129.0/24
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.151.0/24
31.57.176.0/21
31.57.191.0-31.57.195.255
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.244.0/24
31.57.252.0/22
31.58.33.0-31.58.35.255
31.58.152.0/22
31.58.157.0/24
31.58.163.0/24
31.58.230.0/23
31.59.57.0/24
31.59.96.0/22
31.59.108.0-31.59.110.255
31.59.112.0/22
31.59.184.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:0e:44:f6:68:da:ae:ab:fe:e0:e6:93:a7:36:4a:6a:af:08:
a9:fb:b0:ca:fa:29:19:66:74:48:a3:1b:5f:3d:4b:e3:57:3f:
bc:6e:9b:b6:27:03:16:7b:51:a3:fc:91:19:1f:ff:05:28:dc:
d6:75:2f:8e:90:b9:3a:cd:90:25:2c:a7:c5:31:bb:92:9b:24:
25:5c:69:55:31:37:9f:b6:55:98:2a:d3:98:7b:5c:72:01:2f:
e5:4e:7b:49:62:1c:a6:cd:4e:d2:dc:de:b3:e5:b2:34:e7:0a:
d8:03:4b:6c:04:73:3a:c2:cb:00:b7:2f:8c:ab:bf:ea:83:76:
34:50:8b:c1:a3:46:9e:f0:5c:4a:0a:0e:a9:ed:2a:a1:db:51:
6f:25:49:a5:98:6e:c2:64:8c:2a:5d:ba:64:35:c5:4f:d1:01:
3c:6b:0c:e4:35:90:5f:0f:38:d1:08:00:16:9b:82:46:d1:da:
29:b1:87:3f:b4:ac:a8:eb:1f:36:06:6f:7f:7c:ab:ca:3c:e9:
12:e0:bb:0e:96:b0:9e:7c:7e:b4:06:42:25:04:50:35:ab:17:
ef:dc:3f:8f:d0:61:40:b6:ca:d3:f9:27:bd:31:3c:38:2b:c0:
ef:f1:bc:5e:a1:6a:a5:f6:d1:b5:9c:e8:b7:4a:da:77:c3:b3:
f4:f1:34:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:12:55 2025 by rpki-client