Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XVaht3QnoNV2DpYIng0Tl2lPO3c.roa
File: XVaht3QnoNV2DpYIng0Tl2lPO3c.roa (raw, json)
Hash identifier: YLOy5nvwHvES26bDoB224SH4Jl7NABMKEdqtYLixNyk=
Subject key identifier: 5D:56:A1:B7:74:27:A0:D5:76:0E:96:08:9E:0D:13:97:69:4F:3B:77
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195ECA4FB3AB0F391EF52301FF6304F9CEB
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XVaht3QnoNV2DpYIng0Tl2lPO3c.roa
Signing time: Mon 31 Mar 2025 14:39:49 +0000
ROA not before: Mon 31 Mar 2025 14:39:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.200.0/24 maxlen: 24
31.56.202.0/24 maxlen: 24
31.56.204.0/22 maxlen: 24
31.57.103.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.113.0/24 maxlen: 24
31.57.114.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.143.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.168.0/23 maxlen: 23
31.57.176.0/21 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.182.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.215.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.221.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.57.255.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.76.0/24 maxlen: 24
31.58.77.0/24 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.142.0/23 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.224.0/22 maxlen: 24
31.59.71.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.107.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 01 Apr 2025 08:32:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ec:a4:fb:3a:b0:f3:91:ef:52:30:1f:f6:30:4f:9c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 31 14:39:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d56a1b77427a0d5760e96089e0d1397694f3b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2e:9d:7e:ef:38:23:18:a1:e3:ae:fd:1a:cd:
4a:c8:28:3c:24:8e:1a:af:30:46:bf:6e:bb:15:b2:
49:79:12:66:85:53:d0:f2:74:d9:45:d1:3e:91:f0:
d6:3a:bd:d9:fc:6b:5e:e7:75:ea:ae:78:e8:23:51:
43:a4:03:8c:81:6f:57:f1:36:2a:9d:07:90:15:b0:
e7:1c:5a:61:fd:12:f6:72:db:b3:30:cb:6f:e2:85:
24:6d:f7:7e:c8:11:fc:33:fc:90:79:44:fb:e3:71:
28:4f:a6:64:86:79:2d:ed:b5:66:4c:29:ba:d2:e3:
af:22:d4:1e:e6:66:9c:fd:a0:d2:88:e3:01:7d:cb:
8a:1b:7b:9d:e5:f9:91:d2:28:8d:f5:06:b3:36:fa:
78:da:c6:c5:87:50:ae:09:be:39:9c:38:d8:6a:9a:
df:24:f4:58:22:a5:ef:dd:34:7c:68:4e:9c:ea:98:
be:4b:b8:54:86:8f:aa:2d:c5:d5:fd:f0:05:f0:89:
86:b3:60:60:5a:53:03:82:42:2c:7d:f9:76:b3:78:
a3:ec:76:cd:67:81:a7:5f:df:d6:c2:7c:be:51:87:
f2:39:20:17:43:56:d9:c6:83:cc:3e:9e:28:f8:d8:
1a:21:b1:de:e0:60:20:e4:4f:3e:52:cc:12:ea:ca:
0b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:56:A1:B7:74:27:A0:D5:76:0E:96:08:9E:0D:13:97:69:4F:3B:77
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XVaht3QnoNV2DpYIng0Tl2lPO3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.57.0/24
31.56.71.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/21
31.57.103.0-31.57.111.255
31.57.113.0-31.57.114.255
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0/21
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.76.0/23
31.58.84.0/22
31.58.142.0/23
31.58.152.0/22
31.58.172.0/22
31.58.224.0/22
31.59.71.0/24
31.59.76.0/22
31.59.96.0/22
31.59.107.0/24
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.175.255
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
20:4a:1b:0f:d1:8d:2b:66:37:a8:0f:a5:4d:8d:26:4c:f5:f1:
07:b5:22:d5:87:0e:fb:ac:6a:fb:f7:66:87:df:b9:a6:08:bb:
77:70:86:16:99:82:b9:9f:93:8c:4a:ff:2a:54:44:57:5a:b8:
ee:de:26:36:45:06:18:62:91:04:59:9d:50:42:e3:70:cb:1f:
05:f6:4a:05:da:f5:e9:34:d0:d6:7c:bb:29:36:dc:b0:95:d9:
28:90:c4:dc:57:2d:11:20:c3:66:a7:5b:89:f4:96:55:69:c7:
a8:39:ec:17:e1:fa:63:58:2f:2c:73:ef:8c:67:22:28:61:82:
65:4b:a3:79:99:7b:f2:74:11:45:5e:70:27:5f:d4:bd:c8:da:
26:90:8e:47:77:f6:06:cb:06:d3:1e:c6:90:7b:a9:3a:d9:a0:
4b:f8:a3:d6:81:06:de:41:4c:bd:dd:13:b6:bb:b4:a8:12:f5:
cf:1c:17:58:ac:8f:c1:4f:c5:2f:5f:d0:2b:95:ed:49:5f:ca:
3d:ac:b2:10:4a:25:50:84:8a:dc:40:88:15:75:9d:01:27:3a:
89:bb:7e:2c:13:d6:39:20:fa:21:ba:bc:7a:31:ed:25:e5:a6:
5b:c2:48:de:75:66:44:91:64:fa:fb:1c:8a:c7:b5:7e:41:e1:
72:2a:c0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:06:09 2025 by rpki-client