Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/aNqxQIOAF6larNa1sGAo7jRqdnQ.roa
File: aNqxQIOAF6larNa1sGAo7jRqdnQ.roa (raw, json)
Hash identifier: m4FaQw5B+y/pKIBNXtdGxM6+n4rratOp0adB8OiuUAE=
Subject key identifier: 68:DA:B1:40:83:80:17:A9:5A:AC:D6:B5:B0:60:28:EE:34:6A:76:74
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195FF6084AA471F2F318DF45948822A8EE7
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/aNqxQIOAF6larNa1sGAo7jRqdnQ.roa
Signing time: Fri 04 Apr 2025 05:57:49 +0000
ROA not before: Fri 04 Apr 2025 05:57:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.23.0/24 maxlen: 24
31.56.24.0/24 maxlen: 24
31.56.32.0/24 maxlen: 24
31.56.34.0/24 maxlen: 24
31.56.36.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.200.0/24 maxlen: 24
31.56.202.0/24 maxlen: 24
31.56.204.0/22 maxlen: 24
31.56.204.0/23 maxlen: 24
31.56.206.0/23 maxlen: 24
31.57.103.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.113.0/24 maxlen: 24
31.57.114.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.143.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.168.0/23 maxlen: 23
31.57.176.0/21 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.196.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.215.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.221.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.57.252.0/24 maxlen: 24
31.57.253.0/24 maxlen: 24
31.57.255.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.76.0/24 maxlen: 24
31.58.77.0/24 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.92.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.71.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 04 Apr 2025 07:33:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ff:60:84:aa:47:1f:2f:31:8d:f4:59:48:82:2a:8e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 4 05:57:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68dab140838017a95aacd6b5b06028ee346a7674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d3:f5:96:3d:ec:8a:75:6c:76:e5:56:19:27:
06:f0:c1:69:36:d1:76:f3:53:8c:a1:0f:d0:15:b1:
11:0b:fa:09:3a:9b:06:d4:97:28:76:eb:3d:b0:93:
16:14:a9:9c:88:d4:0c:3d:24:e5:8c:77:50:d4:0c:
d0:51:29:be:0a:ab:03:69:e8:ce:07:d7:0c:85:c1:
14:b0:ff:d7:58:a8:fc:47:ad:4a:19:64:f4:36:27:
c4:af:58:b9:36:82:d3:06:d1:bd:7d:48:b9:0d:37:
34:04:2b:0f:c2:d6:2b:11:8d:5b:d7:39:32:7d:e1:
31:fc:51:6f:dd:9d:79:ae:dc:88:a1:50:f9:cc:9e:
62:a0:5e:9b:df:e0:cc:7e:0f:c4:92:8d:c6:30:72:
65:f5:a1:52:b0:db:9b:ed:d4:64:10:2e:62:c9:9e:
7b:f5:01:06:ae:72:b5:4a:90:ef:cb:39:d2:17:10:
4c:ab:2c:6e:d8:11:70:16:c9:27:b3:fa:e1:49:80:
3c:7e:32:51:07:8c:2e:65:83:cf:11:0a:d7:b4:89:
b2:66:ae:a0:90:22:6d:4c:00:2c:06:c1:99:a4:1f:
48:5d:09:ea:d6:81:68:51:0a:d4:38:36:68:85:b1:
a6:bc:ec:73:8c:73:16:14:30:52:40:9e:e3:dd:8b:
c2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:DA:B1:40:83:80:17:A9:5A:AC:D6:B5:B0:60:28:EE:34:6A:76:74
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/aNqxQIOAF6larNa1sGAo7jRqdnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.23.0-31.56.24.255
31.56.32.0/24
31.56.34.0/24
31.56.36.0/24
31.56.57.0/24
31.56.71.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/21
31.57.103.0-31.57.111.255
31.57.113.0-31.57.114.255
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0-31.57.196.255
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.76.0/23
31.58.84.0/22
31.58.92.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.71.0/24
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.175.255
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:0a:43:1b:a3:29:ea:af:9f:de:2b:73:af:c9:7b:5e:4d:c8:
be:a2:ce:d6:a3:9c:42:a5:d7:27:c7:4f:e7:2d:0c:41:2c:b2:
d3:6d:4e:31:26:66:aa:d1:86:c6:a0:3d:e5:9d:8a:bc:aa:a0:
80:0e:dd:84:70:26:45:0b:61:b8:52:1e:c4:e1:be:0d:b7:ad:
d7:79:ba:19:8c:81:08:86:ad:bb:11:5a:c0:9e:ae:dc:bc:af:
a6:93:b0:98:ff:a1:9b:d6:24:e6:25:12:9f:1b:88:60:27:d3:
7a:11:0f:f5:f4:ab:1a:e7:d0:bd:b2:01:52:38:40:45:fa:6e:
1e:56:32:27:90:a0:69:bd:cf:59:8a:2a:f6:6b:5d:80:58:32:
e6:d8:d0:9d:af:ef:7f:1e:19:c5:4d:91:2c:98:9a:a6:bf:3d:
f0:93:a7:e2:55:02:fc:d2:96:d1:7c:5c:ce:8d:6f:f2:27:ee:
82:35:3e:f7:ca:f2:5d:bf:59:6f:38:ee:2a:79:bc:bc:1a:6c:
1f:38:0d:16:fe:43:3e:1b:4c:31:86:7b:01:c0:c4:fc:20:c1:
6c:b1:b2:56:59:de:25:99:fa:07:31:4c:15:e1:b8:30:c4:23:
94:ad:90:be:fb:c8:fa:fd:c1:14:28:d2:dd:8d:62:31:b8:03:
9a:b6:af:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:08:44 2025 by rpki-client