Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/eulKS_S6ZdeFsgcviQLb9_yGikA.roa
File: eulKS_S6ZdeFsgcviQLb9_yGikA.roa (raw, json)
Hash identifier: Hb0VyeaAfVRUjVMsAeHgVc6CyTfNOE5fGonjM7uiopY=
Subject key identifier: 7A:E9:4A:4B:F4:BA:65:D7:85:B2:07:2F:89:02:DB:F7:FC:86:8A:40
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194F8A49397268C5798C630CC3F10DA2E4C
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/eulKS_S6ZdeFsgcviQLb9_yGikA.roa
Signing time: Wed 12 Feb 2025 05:32:02 +0000
ROA not before: Wed 12 Feb 2025 05:32:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.132.0/24 maxlen: 24
31.57.136.0/21 maxlen: 24
31.57.142.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.151.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.191.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.244.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.33.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.157.0/24 maxlen: 24
31.58.163.0/24 maxlen: 24
31.58.230.0/23 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.108.0/24 maxlen: 24
31.59.109.0/24 maxlen: 24
31.59.110.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
31.59.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 14:19:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f8:a4:93:97:26:8c:57:98:c6:30:cc:3f:10:da:2e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 12 05:32:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ae94a4bf4ba65d785b2072f8902dbf7fc868a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c5:40:07:09:95:20:66:18:ee:55:76:53:ca:
f0:8a:2f:dc:ef:bf:49:2c:e0:fb:d6:d8:1c:22:16:
4e:89:99:57:fc:74:1a:35:7a:05:3f:2c:ad:dd:52:
31:04:40:91:1c:53:b9:6f:db:4d:14:2d:39:57:4f:
85:72:de:47:25:31:f3:e6:3a:75:5f:a4:4f:34:40:
4e:13:be:e7:2c:b8:84:00:2f:f0:b2:fb:e5:ad:7d:
f6:69:52:eb:44:4b:96:fa:88:9e:bd:4d:f1:aa:2c:
c8:26:08:05:3a:8c:30:9c:4a:49:dd:41:dd:4e:ff:
aa:49:b1:83:26:30:f4:00:ba:db:16:f7:f7:19:0a:
19:f9:b4:28:c6:42:c7:54:58:c3:bc:4b:9b:df:2b:
e4:25:0f:43:4e:11:4a:fe:7f:67:44:ca:04:96:da:
c8:80:39:6e:f1:44:ad:2b:b5:a0:64:31:d8:47:67:
be:f5:6b:ba:15:13:a7:ec:e9:f9:e7:16:fc:84:4e:
05:33:5d:e5:ba:3e:fd:b6:26:0f:ee:09:de:7e:0d:
a3:c4:51:a2:a9:fd:22:c1:71:4f:90:9e:dd:02:c3:
ad:57:17:69:d5:92:04:20:87:d2:15:b9:dd:56:a1:
33:68:56:af:8d:e3:6f:e0:0c:5d:4d:1f:b8:70:b6:
c5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E9:4A:4B:F4:BA:65:D7:85:B2:07:2F:89:02:DB:F7:FC:86:8A:40
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/eulKS_S6ZdeFsgcviQLb9_yGikA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.104.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.151.0/24
31.57.176.0/21
31.57.191.0-31.57.195.255
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.244.0/24
31.57.252.0/22
31.58.33.0-31.58.35.255
31.58.152.0/22
31.58.157.0/24
31.58.163.0/24
31.58.230.0/23
31.59.57.0/24
31.59.96.0/22
31.59.108.0-31.59.110.255
31.59.112.0/22
31.59.184.0/22
Signature Algorithm: sha256WithRSAEncryption
51:26:e6:13:e3:38:5b:b5:80:a6:d4:cf:eb:59:62:e7:dc:72:
f8:1c:b0:0f:29:52:4d:0e:ff:2d:8e:28:85:36:0e:cc:f6:99:
89:de:b7:73:c4:5b:a6:e0:90:d5:4b:46:c6:21:4f:67:a6:da:
74:52:9d:9f:e0:b6:b9:1e:f9:e6:a0:e2:f3:32:28:8a:66:00:
13:82:60:b5:f4:f2:bc:b8:b7:4b:6d:a6:db:c1:e1:e1:16:5f:
57:d6:21:93:62:dc:de:4e:b6:88:51:cf:c3:26:a4:ec:bd:a8:
47:f9:72:13:c3:9f:91:c3:8b:80:2e:6f:e7:44:89:8e:05:b8:
11:1c:8f:84:6c:82:42:dc:7b:82:ee:e4:c9:ce:74:3b:17:f4:
d4:8c:84:28:d2:cd:73:08:bd:20:7b:e0:de:f7:b1:c3:7f:a4:
82:52:25:56:bd:1c:29:6c:1d:93:d8:34:7d:5f:08:c3:c5:0c:
d7:ed:f9:da:d3:24:96:4d:1e:ef:87:f5:3d:3d:5a:34:64:e3:
5a:11:4f:68:3d:b2:56:2e:6f:94:2e:ec:7c:fa:9f:92:a6:01:
c3:7a:7b:e3:99:3d:25:a1:78:6c:c4:74:78:56:a4:49:40:87:
7b:65:94:53:d8:a1:95:f1:bd:2e:cb:23:97:e8:08:0a:1d:dc:
b1:36:32:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:59:51 2025 by rpki-client