Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fYni-6jc_0oAqa8D04oOQaBWDEs.roa
File: fYni-6jc_0oAqa8D04oOQaBWDEs.roa (raw, json)
Hash identifier: N7IJHcYYjHq2ftNKDj8CyV2T7+QdVlbVC5OA/34yV+4=
Subject key identifier: 7D:89:E2:FB:A8:DC:FF:4A:00:A9:AF:03:D3:8A:0E:41:A0:56:0C:4B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01964A23EE080314851A4758D403046467C9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fYni-6jc_0oAqa8D04oOQaBWDEs.roa
Signing time: Fri 18 Apr 2025 18:23:10 +0000
ROA not before: Fri 18 Apr 2025 18:23:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.23.0/24 maxlen: 24
31.56.24.0/24 maxlen: 24
31.56.32.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.200.0/24 maxlen: 24
31.56.202.0/24 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.103.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.113.0/24 maxlen: 24
31.57.118.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.138.0/24 maxlen: 24
31.57.143.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.168.0/23 maxlen: 23
31.57.176.0/21 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.196.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.208.0/22 maxlen: 22
31.57.215.0/24 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.230.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.238.0/24 maxlen: 24
31.57.249.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.50.0/24 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.76.0/24 maxlen: 24
31.58.77.0/24 maxlen: 24
31.58.78.0/24 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.92.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 19 Apr 2025 19:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:23:ee:08:03:14:85:1a:47:58:d4:03:04:64:67:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 18 18:23:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d89e2fba8dcff4a00a9af03d38a0e41a0560c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b2:d2:58:86:89:92:90:eb:ef:a9:b9:cc:fc:
05:d0:ef:d4:41:cf:2a:07:63:01:4a:ea:8d:a3:c7:
38:c7:cb:86:c1:33:f2:6c:bc:a8:68:57:8e:f7:4a:
37:a9:71:bb:5d:20:b7:92:7b:35:c4:67:f7:6e:48:
58:d6:0f:11:c0:b0:4d:a1:c7:18:c1:e3:3e:84:1e:
8f:b3:4d:5a:42:b8:02:65:06:f1:b4:51:0c:fa:96:
dd:88:0b:28:24:7a:a6:eb:fc:0a:87:8e:5a:3a:af:
69:2d:e2:3b:f5:b7:5c:4d:6f:0e:9c:22:3e:3e:0e:
28:f5:dd:0e:57:1e:17:eb:17:07:3f:3c:25:d9:a2:
40:f5:c1:3d:94:40:76:f3:7c:1e:7b:91:97:55:51:
e3:3f:8d:78:09:da:d4:8b:df:d5:b3:03:e2:49:3c:
d2:df:a9:8f:06:11:b0:05:71:1e:3a:4a:e7:d1:77:
bd:1f:8c:cd:15:b3:d5:b2:c3:8f:71:53:d2:4d:6f:
18:36:8b:aa:94:d7:f0:51:5e:de:e0:e5:86:01:a5:
aa:20:08:d7:44:4e:43:70:d6:27:db:f6:80:17:64:
62:bb:a6:9e:4f:3f:57:5f:0c:a2:a3:9e:50:5b:c1:
b2:81:37:15:b7:62:0d:c3:28:49:9e:e7:43:b8:5d:
70:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:89:E2:FB:A8:DC:FF:4A:00:A9:AF:03:D3:8A:0E:41:A0:56:0C:4B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fYni-6jc_0oAqa8D04oOQaBWDEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.23.0-31.56.24.255
31.56.32.0/24
31.56.57.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.36.0/23
31.57.103.0-31.57.111.255
31.57.113.0/24
31.57.118.0/24
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.188.255
31.57.192.0-31.57.196.255
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.230.0/24
31.57.232.0/22
31.57.238.0/24
31.57.249.0-31.57.255.255
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.76.0-31.58.78.255
31.58.84.0/22
31.58.92.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.175.255
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
62:4f:e2:02:b4:9f:ea:2e:48:86:f4:cd:b8:cc:60:1f:19:13:
63:00:79:8f:b8:05:b9:ea:33:32:90:c4:00:79:bb:85:05:8f:
8d:87:e2:34:5b:ac:4a:28:34:a6:b5:42:39:0a:04:d0:8b:00:
4c:1a:3f:9d:42:a9:89:30:f9:6e:a8:ba:33:e9:86:99:c1:94:
b8:66:c7:74:48:73:b1:d1:ef:ea:bd:47:27:85:08:91:fc:ee:
54:50:27:eb:93:f1:eb:29:72:f6:94:ef:9a:0a:fa:c1:b0:48:
a9:f5:1b:b4:a0:9b:92:e8:a4:75:8f:26:00:6f:e0:87:ed:7c:
bb:1d:dc:4c:a5:98:f6:d8:46:98:ce:62:2e:ae:83:4c:84:55:
ba:9a:06:6f:4a:e6:0b:3f:60:67:44:5f:86:5d:d6:90:7a:59:
d3:67:25:45:c3:63:01:ae:de:bf:ca:47:c6:15:58:29:19:97:
a5:94:27:ea:8e:61:a8:71:ae:e4:1b:7d:eb:8d:8c:8c:01:e4:
c0:fd:0c:9a:7b:1e:cf:95:f0:ba:cf:d8:1a:87:02:53:6f:a2:
d2:ab:38:d8:86:72:7f:50:3b:60:65:03:df:fa:fe:6e:2d:56:
4e:e2:37:28:f4:e2:a8:29:61:ed:37:84:ea:61:9a:64:77:ec:
b0:7f:ef:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:11:40 2025 by rpki-client