Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dc1ce-QLcdchuxVkoYxLsg0EfYs.roa
File: dc1ce-QLcdchuxVkoYxLsg0EfYs.roa (raw, json)
Hash identifier: C2RtUHbSMTPBNkaoDpZujzZkTZCq1OOw2d1UikCj9xE=
Subject key identifier: 75:CD:5C:7B:E4:0B:71:D7:21:BB:15:64:A1:8C:4B:B2:0D:04:7D:8B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019616C1F5E79D229E96F2B18ECFA237366B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dc1ce-QLcdchuxVkoYxLsg0EfYs.roa
Signing time: Tue 08 Apr 2025 18:55:32 +0000
ROA not before: Tue 08 Apr 2025 18:55:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.23.0/24 maxlen: 24
31.56.24.0/24 maxlen: 24
31.56.32.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.59.0/24 maxlen: 24
31.56.69.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.200.0/24 maxlen: 24
31.56.202.0/24 maxlen: 24
31.56.204.0/22 maxlen: 24
31.56.204.0/23 maxlen: 24
31.56.206.0/23 maxlen: 24
31.57.103.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.113.0/24 maxlen: 24
31.57.114.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.143.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.168.0/23 maxlen: 23
31.57.176.0/21 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.196.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.215.0/24 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.221.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.238.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.76.0/24 maxlen: 24
31.58.77.0/24 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.92.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.71.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 10 Apr 2025 14:14:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:16:c1:f5:e7:9d:22:9e:96:f2:b1:8e:cf:a2:37:36:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 8 18:55:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75cd5c7be40b71d721bb1564a18c4bb20d047d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:38:4c:87:8f:38:fb:48:e8:98:b3:80:0b:8d:
3e:4a:a1:8c:bd:80:ba:55:d2:cf:c7:ef:a0:9a:a0:
7e:b3:42:b5:0e:28:4f:5b:3e:03:b9:b0:31:13:57:
72:41:9e:57:52:7a:b0:cd:11:e5:28:e5:ce:b5:27:
19:08:b5:60:8c:bb:3a:8d:d6:3d:73:8e:fa:8e:fd:
74:9b:f0:8b:5e:5b:4c:14:a9:bd:d8:b6:75:0a:05:
04:e3:ce:48:bf:7c:4c:d6:73:2b:1f:79:1b:38:15:
19:ca:7f:6a:45:f5:a6:5b:03:3a:b9:aa:3e:1c:97:
ba:d4:17:2d:07:a6:9d:2e:b7:17:fd:9b:3b:c9:90:
97:84:8c:85:c3:55:de:b1:74:a2:31:8c:d2:ae:d2:
e0:7d:41:78:97:94:7a:aa:93:9d:a4:63:f2:39:71:
99:c9:85:fe:01:29:38:b3:3b:20:fb:58:05:38:9e:
1c:71:b6:56:ce:d0:02:55:62:b9:9c:73:49:b3:ed:
24:64:2e:11:a1:c2:fc:c6:1a:03:31:93:84:9e:00:
04:4a:20:04:1e:77:1e:1a:51:3d:d9:2a:a0:7a:4c:
bc:81:ba:35:c9:c0:0a:49:d6:f4:77:a3:cb:58:bf:
e8:69:6d:f6:21:34:5d:43:0e:51:f8:d1:97:1c:a9:
3d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:CD:5C:7B:E4:0B:71:D7:21:BB:15:64:A1:8C:4B:B2:0D:04:7D:8B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dc1ce-QLcdchuxVkoYxLsg0EfYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.23.0-31.56.24.255
31.56.32.0/24
31.56.57.0/24
31.56.59.0/24
31.56.69.0/24
31.56.71.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/21
31.57.103.0-31.57.111.255
31.57.113.0-31.57.114.255
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0-31.57.196.255
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.238.0/24
31.57.252.0/22
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.76.0/23
31.58.84.0/22
31.58.92.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.71.0/24
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.175.255
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
88:87:b6:2b:b7:f1:e9:e0:7c:65:08:67:d9:ce:a3:d2:2c:b7:
a1:88:4a:f0:cc:43:b4:e1:4d:ec:bf:f7:45:79:2e:5b:ab:f8:
34:08:58:6f:08:46:17:03:c0:9d:5a:d6:a6:65:08:6d:fa:7f:
7c:2f:6f:1d:0f:20:6d:62:cd:55:2e:c5:c0:b3:c2:83:c8:e4:
56:1d:1a:de:75:db:0f:5f:49:6b:44:ec:bd:71:87:42:32:43:
78:c6:26:44:e0:42:42:f4:6c:c3:4f:82:f8:4a:35:23:c8:84:
99:e0:12:d3:63:f7:27:fa:83:06:02:e9:d0:41:11:d4:2e:24:
1a:72:18:ed:65:98:60:f1:e6:c8:e9:f5:c3:67:b7:22:85:b3:
4f:81:e7:41:37:c3:7d:bd:27:50:a3:8b:21:f5:a7:29:2e:0d:
98:7b:e2:b5:5a:68:2d:1b:da:7e:22:6e:55:5f:f9:a2:21:de:
76:d2:4b:39:7b:51:35:e4:b8:00:2a:c1:d4:75:e9:00:9c:1f:
58:a2:b0:62:ce:3f:82:51:8c:21:b9:ad:4e:9e:d4:ce:e1:af:
c0:2f:64:d4:76:0c:cf:5a:49:94:72:a9:67:57:31:3a:f0:a1:
8f:a4:15:9b:d9:25:61:66:eb:68:1d:26:8a:a8:62:64:a5:41:
1e:6a:d0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:23 2025 by rpki-client