Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZwjaOdjJ73P7WghdBzUZCCUFrsc.roa
File: ZwjaOdjJ73P7WghdBzUZCCUFrsc.roa (raw, json)
Hash identifier: L0fRrw4t29pE7sgnbL5ahWshkegAC1JFA8YjRdLV3Fk=
Subject key identifier: 67:08:DA:39:D8:C9:EF:73:FB:5A:08:5D:07:35:19:08:25:05:AE:C7
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195F6F0C8E08A6E65B257A208E3670ECD89
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZwjaOdjJ73P7WghdBzUZCCUFrsc.roa
Signing time: Wed 02 Apr 2025 14:38:49 +0000
ROA not before: Wed 02 Apr 2025 14:38:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.23.0/24 maxlen: 24
31.56.24.0/24 maxlen: 24
31.56.32.0/24 maxlen: 24
31.56.34.0/24 maxlen: 24
31.56.36.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.200.0/24 maxlen: 24
31.56.202.0/24 maxlen: 24
31.56.204.0/22 maxlen: 24
31.56.204.0/23 maxlen: 24
31.56.206.0/23 maxlen: 24
31.57.103.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.113.0/24 maxlen: 24
31.57.114.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.143.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.168.0/23 maxlen: 23
31.57.176.0/21 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.196.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.215.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.221.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.57.255.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.76.0/24 maxlen: 24
31.58.77.0/24 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.92.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.71.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 04 Apr 2025 05:56:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f6:f0:c8:e0:8a:6e:65:b2:57:a2:08:e3:67:0e:cd:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 2 14:38:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6708da39d8c9ef73fb5a085d073519082505aec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a1:4f:80:73:9e:9e:87:99:22:80:b0:1f:ae:
dc:7d:49:84:e9:7c:02:bb:f7:a7:e1:c3:53:ce:6c:
fc:51:51:fa:e2:a5:de:36:f4:79:3e:ab:9c:d7:94:
b3:30:db:bd:40:3c:bc:1b:1f:fa:60:04:bb:b6:7c:
ab:d4:66:5f:54:02:88:f4:e5:fe:43:e7:ba:7a:55:
89:9a:4b:77:c2:e9:84:07:6e:0a:dd:85:62:a4:32:
70:9a:26:bb:0e:ca:d1:e9:8b:1c:6c:4b:3a:11:d1:
7c:06:52:f8:fc:74:fb:bb:47:49:fe:4e:fe:ba:dd:
b0:cf:26:ca:02:39:72:36:fa:2f:e6:d1:2a:2d:0f:
23:b2:fd:c9:d4:98:27:70:6f:ec:90:19:15:b0:3c:
7b:ac:9c:25:49:88:01:97:1f:94:77:c1:95:a0:b6:
d3:6b:12:73:c1:79:b6:b7:fa:fb:74:2a:8a:d9:7c:
2d:35:04:e7:b2:c5:e0:ce:06:4e:4b:14:50:d1:45:
59:2a:ee:02:3d:1a:ac:e5:27:76:b9:73:82:70:4b:
26:68:37:95:9b:24:3a:5f:20:e8:33:39:86:bc:59:
d1:14:ca:de:c4:14:b7:5f:77:a8:03:2f:a2:0f:e8:
57:17:e7:ca:6b:ec:09:e6:ca:97:2a:31:75:89:e0:
9d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:08:DA:39:D8:C9:EF:73:FB:5A:08:5D:07:35:19:08:25:05:AE:C7
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZwjaOdjJ73P7WghdBzUZCCUFrsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.23.0-31.56.24.255
31.56.32.0/24
31.56.34.0/24
31.56.36.0/24
31.56.57.0/24
31.56.71.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/21
31.57.103.0-31.57.111.255
31.57.113.0-31.57.114.255
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0-31.57.196.255
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.76.0/23
31.58.84.0/22
31.58.92.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.71.0/24
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.175.255
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:7a:0a:88:68:88:ef:6b:c0:10:da:cc:28:2e:1b:5b:1e:a0:
1e:6b:9b:27:63:1e:ce:d4:01:f4:f8:55:bd:c3:ef:c7:a2:d2:
6a:3b:19:07:fd:e6:b0:0f:4b:76:22:21:15:c1:82:3f:10:78:
18:3d:e3:54:9b:80:8b:eb:db:be:aa:c7:fa:b9:c5:37:94:ba:
2d:b9:88:53:76:3f:59:29:52:a6:74:a2:68:20:52:19:f3:a1:
08:5c:7c:d7:8b:ac:82:92:3f:59:4e:83:6f:f8:9d:8f:a6:23:
73:1e:36:e5:a4:c9:09:40:be:05:a9:59:ce:6b:a2:e1:20:d0:
06:84:60:5e:43:e7:c0:05:18:8e:c3:c3:5b:38:af:78:5c:f8:
7c:c1:c3:65:1f:2b:92:3d:99:eb:4f:b6:50:70:d2:a4:7d:64:
07:6d:27:ec:0c:c1:72:ae:e1:d4:98:35:0b:81:5c:e4:9f:2a:
8c:62:00:b3:77:ef:0a:9f:3e:5c:0b:60:94:66:1e:2d:8d:58:
55:33:41:57:0d:98:cf:d7:42:ae:55:26:43:31:88:1c:d9:bc:
f1:05:25:b5:d6:98:b7:55:b2:32:c2:de:8d:64:be:a0:55:a0:
21:47:ec:7c:38:73:a8:14:62:2f:08:a2:0b:8a:f7:53:df:04:
c1:14:0f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:44:27 2025 by rpki-client