Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bfkZVB0QgX-9a3i6bne62Ivx1Ik.roa
File: bfkZVB0QgX-9a3i6bne62Ivx1Ik.roa (raw, json)
Hash identifier: qKdQCGnWUC60VAjp/6ivM2qFrPNTh4TJfqJ7fNjCjqk=
Subject key identifier: 6D:F9:19:54:1D:10:81:7F:BD:6B:78:BA:6E:77:BA:D8:8B:F1:D4:89
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01963D2B51E48CEB97B417850951219BF41D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bfkZVB0QgX-9a3i6bne62Ivx1Ik.roa
Signing time: Wed 16 Apr 2025 05:56:11 +0000
ROA not before: Wed 16 Apr 2025 05:56:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.23.0/24 maxlen: 24
31.56.24.0/24 maxlen: 24
31.56.32.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.62.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.200.0/24 maxlen: 24
31.56.202.0/24 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.103.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.113.0/24 maxlen: 24
31.57.114.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.138.0/24 maxlen: 24
31.57.143.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.168.0/23 maxlen: 23
31.57.176.0/21 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.196.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.208.0/22 maxlen: 22
31.57.215.0/24 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.221.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.230.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.238.0/24 maxlen: 24
31.57.249.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.76.0/24 maxlen: 24
31.58.77.0/24 maxlen: 24
31.58.78.0/24 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.92.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 17 Apr 2025 19:34:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3d:2b:51:e4:8c:eb:97:b4:17:85:09:51:21:9b:f4:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 16 05:56:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6df919541d10817fbd6b78ba6e77bad88bf1d489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f2:fa:56:bd:3c:18:d0:54:53:9f:ef:96:3d:
d7:5d:d8:44:e5:7d:52:61:b7:34:d0:15:33:82:c2:
41:30:c2:04:40:ad:57:18:18:5c:05:59:5e:61:5b:
65:35:32:7a:37:c8:3f:6d:ae:5c:69:e5:2d:f4:d8:
8c:e9:f4:84:9c:81:47:e2:c6:1e:fa:bb:41:73:ec:
11:9d:f7:19:5b:49:43:1b:34:4b:08:96:63:0d:ba:
cf:6d:c9:71:d9:07:42:d2:75:0f:00:a4:d2:85:47:
75:dd:f5:ed:93:22:33:fe:04:a5:aa:2d:f5:d0:7f:
2b:4b:e8:76:e4:c8:a0:46:a3:bd:0d:b4:1b:e5:65:
3b:ee:7f:9a:a9:ad:2e:e3:17:16:28:cd:49:6a:03:
33:79:38:ad:93:2a:64:b8:44:c7:b4:43:00:74:fc:
cf:09:de:2e:7b:d5:ca:70:42:a5:fe:b3:91:e3:fd:
62:51:98:4d:11:0c:04:9f:52:19:29:5d:87:e9:6e:
42:5d:fc:0c:a6:1f:94:cb:1f:db:79:07:ee:7d:9e:
ce:e0:4c:63:b3:90:c4:75:25:ef:5b:98:b5:a0:12:
28:97:3c:a3:7e:77:88:12:cf:5b:89:37:3c:fa:a5:
af:bb:55:a2:46:87:b1:47:08:f5:fc:aa:6e:9f:a8:
a9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F9:19:54:1D:10:81:7F:BD:6B:78:BA:6E:77:BA:D8:8B:F1:D4:89
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bfkZVB0QgX-9a3i6bne62Ivx1Ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.23.0-31.56.24.255
31.56.32.0/24
31.56.57.0/24
31.56.62.0/24
31.56.71.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.36.0/23
31.57.103.0-31.57.111.255
31.57.113.0-31.57.114.255
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.188.255
31.57.192.0-31.57.196.255
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.230.0/24
31.57.232.0/22
31.57.238.0/24
31.57.249.0-31.57.255.255
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.76.0-31.58.78.255
31.58.84.0/22
31.58.92.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.175.255
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
59:ea:6b:51:6c:be:82:9a:3a:5d:c4:76:ae:01:99:47:74:e7:
13:a6:b3:eb:ce:57:a3:6a:a4:cc:31:0b:4c:57:cd:a9:bb:e9:
87:36:4a:b0:0f:06:11:4c:ab:7d:ed:88:2c:3f:1f:78:90:96:
9f:3d:49:c4:99:d2:61:57:61:46:e1:59:7a:29:82:69:7d:bd:
21:87:ab:65:bb:7b:7c:d9:df:18:e2:c5:9e:12:7d:7f:f7:e7:
55:b9:4a:d6:ba:57:11:06:07:46:f6:60:43:ab:4d:c8:85:69:
1c:ce:41:f8:10:e2:89:8e:91:bd:5a:47:09:2c:b3:c8:33:95:
8e:a4:68:7a:3f:d5:fe:72:aa:97:f0:39:91:ca:23:69:02:fe:
c2:71:40:22:e0:42:3d:9f:ac:ac:93:d9:c2:54:f8:5a:bd:56:
0f:98:91:ac:1e:ae:c2:0c:90:88:0b:02:70:65:51:52:49:67:
39:b4:2d:1e:ad:0e:f2:17:f5:83:a2:40:bf:19:ed:4a:34:0f:
08:38:0d:a5:02:76:4d:fe:c8:4f:d5:49:07:f1:11:07:49:3b:
16:33:cb:9c:83:a1:fd:16:51:9b:86:d6:ad:9b:ed:16:30:63:
90:9c:cb:60:7d:f8:5a:d3:aa:f5:8b:a6:70:4c:00:f4:b2:11:
2b:14:db:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:59:13 2025 by rpki-client