Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bezb7TQK_vnp8M5Wi3UKL2SHRUA.roa
File: bezb7TQK_vnp8M5Wi3UKL2SHRUA.roa (raw, json)
Hash identifier: ROw6ET1t5xGuGsHp1s1lR38eOott2mFO0palVrXNx8M=
Subject key identifier: 6D:EC:DB:ED:34:0A:FE:F9:E9:F0:CE:56:8B:75:0A:2F:64:87:45:40
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019628FDBE9847D92D54EE08A9B7DA0CFABC
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bezb7TQK_vnp8M5Wi3UKL2SHRUA.roa
Signing time: Sat 12 Apr 2025 07:53:59 +0000
ROA not before: Sat 12 Apr 2025 07:53:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.23.0/24 maxlen: 24
31.56.24.0/24 maxlen: 24
31.56.32.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.67.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.200.0/24 maxlen: 24
31.56.202.0/24 maxlen: 24
31.57.103.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.113.0/24 maxlen: 24
31.57.114.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.143.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.168.0/23 maxlen: 23
31.57.176.0/21 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.196.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.208.0/22 maxlen: 22
31.57.215.0/24 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.221.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.230.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.238.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.76.0/24 maxlen: 24
31.58.77.0/24 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.92.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.71.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 12 Apr 2025 15:17:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:28:fd:be:98:47:d9:2d:54:ee:08:a9:b7:da:0c:fa:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 12 07:53:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6decdbed340afef9e9f0ce568b750a2f64874540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:eb:c8:32:91:98:d1:a5:2a:ea:e9:2b:d2:af:
d4:40:8d:3f:d9:23:33:bd:7d:41:21:9c:3a:1d:0b:
04:c3:36:a8:86:11:75:46:ca:dc:8a:5e:74:bd:6d:
9c:52:eb:65:4b:d5:0c:98:9b:1e:c8:92:66:29:74:
90:fb:53:dd:02:52:90:f1:da:45:25:f4:62:2a:e5:
dd:59:3a:66:39:f4:34:62:36:20:1a:34:4f:1a:76:
44:89:a5:54:74:22:85:c0:57:5d:51:bb:78:71:cd:
3f:15:1d:14:8e:ae:07:c4:0d:0c:3b:b0:23:5d:bb:
d7:f6:0b:bb:e7:2a:54:03:60:d7:63:76:0a:cf:ae:
ef:f8:69:6c:a1:0b:52:af:b4:53:48:7f:b7:38:09:
2a:63:bd:9a:da:06:d0:dc:00:03:90:8d:89:8a:5f:
70:4d:b2:f5:60:06:9c:6a:02:08:a5:76:38:0e:8e:
a1:fd:cc:52:4f:42:28:bf:30:8f:aa:bd:18:f5:ae:
dd:08:d7:94:f5:90:d7:9d:4e:ca:78:c1:a8:4a:4c:
38:bc:b6:07:4d:24:29:6f:2c:e2:06:f6:b4:2c:f1:
24:3f:9f:e2:f9:0e:64:0c:e3:61:7e:f2:79:03:98:
8b:68:20:11:c2:9a:90:2c:6a:8e:95:54:f9:60:2a:
a9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:EC:DB:ED:34:0A:FE:F9:E9:F0:CE:56:8B:75:0A:2F:64:87:45:40
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bezb7TQK_vnp8M5Wi3UKL2SHRUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.23.0-31.56.24.255
31.56.32.0/24
31.56.57.0/24
31.56.67.0/24
31.56.71.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.103.0-31.57.111.255
31.57.113.0-31.57.114.255
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0-31.57.196.255
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.230.0/24
31.57.232.0/22
31.57.238.0/24
31.57.252.0/22
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.76.0/23
31.58.84.0/22
31.58.92.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.71.0/24
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.175.255
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:f1:e4:7d:1b:b3:c1:5f:a5:49:2f:28:60:c0:33:fe:2f:02:
d5:c2:3c:18:71:17:ea:30:f8:51:41:df:73:3c:46:02:3e:3b:
b4:6c:e6:22:90:b6:4f:ef:92:28:e0:ac:25:01:a9:c7:a6:b5:
a2:9d:46:7a:32:e3:5b:77:08:4b:c0:f8:d8:2d:68:26:6d:fb:
dd:54:ea:98:90:45:97:c6:cf:a6:47:d2:8c:12:60:40:ff:c1:
11:2e:46:ef:82:24:05:16:1c:eb:32:a1:47:9b:ed:e9:02:81:
f2:95:33:e1:6e:6d:a3:c3:db:79:ff:44:b3:3c:3d:8a:92:56:
8b:08:2d:55:10:03:ad:c7:5b:69:9f:4d:35:a0:cd:0e:a1:30:
22:e6:b0:ea:20:d8:0c:7a:0c:16:41:9b:86:e8:db:1f:08:ab:
bf:b3:0c:b1:43:c3:16:aa:cf:3f:5c:47:40:df:28:f2:fd:c1:
4f:1c:f8:15:3d:c9:52:ad:b6:15:e5:e7:11:69:71:f9:bf:66:
b6:3d:d1:0b:71:f6:4a:0c:a6:a9:c9:b2:38:7b:10:5e:52:b8:
54:5b:f5:79:24:01:8f:29:18:fe:cd:56:12:36:43:99:72:9f:
aa:70:a9:7e:6c:09:09:42:45:55:47:8f:e0:1a:74:9f:1c:15:
5e:52:43:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:07:11 2025 by rpki-client