Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/iWN6ZD-PgKfQDfelX06qigPwJfo.roa
File: iWN6ZD-PgKfQDfelX06qigPwJfo.roa (raw, json)
Hash identifier: zVmFzm6OPUY9Z6CISJ5RktOgUW5J1DW55VBwksFiI6Q=
Subject key identifier: 89:63:7A:64:3F:8F:80:A7:D0:0D:F7:A5:5F:4E:AA:8A:03:F0:25:FA
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01953EDDDFDA105EE44480C2C1700A1C65C5
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/iWN6ZD-PgKfQDfelX06qigPwJfo.roa
Signing time: Tue 25 Feb 2025 20:48:02 +0000
ROA not before: Tue 25 Feb 2025 20:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 31.56.154.0/24 maxlen: 24
31.56.158.0/24 maxlen: 24
31.56.159.0/24 maxlen: 24
31.56.168.0/24 maxlen: 24
31.56.169.0/24 maxlen: 24
31.56.170.0/24 maxlen: 24
31.56.171.0/24 maxlen: 24
31.56.174.0/24 maxlen: 24
31.56.175.0/24 maxlen: 24
31.57.24.0/22 maxlen: 24
31.57.28.0/22 maxlen: 24
31.57.48.0/22 maxlen: 24
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.92.0/22 maxlen: 24
31.57.96.0/22 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.196.0/22 maxlen: 24
31.58.204.0/22 maxlen: 24
31.58.208.0/23 maxlen: 24
31.58.212.0/22 maxlen: 24
31.58.220.0/22 maxlen: 24
31.58.224.0/22 maxlen: 24
31.58.232.0/23 maxlen: 24
31.58.234.0/24 maxlen: 24
31.58.236.0/24 maxlen: 24
31.59.120.0/22 maxlen: 24
217.60.0.0/18 maxlen: 24
217.60.1.0/24 maxlen: 24
217.60.5.0/24 maxlen: 24
217.60.11.0/24 maxlen: 24
217.60.13.0/24 maxlen: 24
217.60.24.0/24 maxlen: 24
217.60.25.0/24 maxlen: 24
217.60.26.0/24 maxlen: 24
217.60.27.0/24 maxlen: 24
217.60.188.0/22 maxlen: 24
217.60.192.0/22 maxlen: 24
217.60.196.0/23 maxlen: 24
217.60.244.0/23 maxlen: 24
217.60.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Feb 2025 07:48:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3e:dd:df:da:10:5e:e4:44:80:c2:c1:70:0a:1c:65:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 25 20:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89637a643f8f80a7d00df7a55f4eaa8a03f025fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a2:ef:15:ed:85:9b:a1:24:19:47:68:44:31:
1b:d2:a0:fd:42:6a:45:51:65:14:c9:b2:17:0e:72:
75:dd:46:08:e1:bb:9d:bb:b8:b4:94:04:63:40:c7:
1e:8a:d3:d6:94:af:ac:d3:5c:6c:b4:df:26:e0:6b:
18:e9:c2:51:54:82:0c:e5:44:ad:d6:87:a5:73:b1:
f4:93:2f:c6:d5:b7:0d:f9:54:fb:bd:93:91:3e:ca:
e6:ea:c7:c8:c2:e1:d2:8e:05:72:a9:f6:5e:4a:20:
5a:09:15:23:10:1e:4f:8e:b1:b4:43:37:d5:f8:f3:
b9:c4:e3:a0:ab:45:7a:c0:ff:97:b2:bd:42:bb:0c:
f8:64:e1:eb:ac:0a:6e:a6:5f:b6:3f:2d:9f:da:1d:
58:4e:d5:c5:b7:80:fe:c2:18:aa:ab:e5:28:dc:85:
0f:af:35:86:e9:96:72:f2:61:cf:78:be:ea:9c:4c:
ab:fa:85:c5:f2:c5:f7:47:d8:31:7b:dd:05:01:7f:
85:92:60:26:9d:18:f5:95:59:a8:e3:ed:ab:fa:d1:
45:2f:81:20:3e:c4:27:f0:f0:89:86:b8:3c:d3:6a:
9c:b3:f6:f9:0d:b8:a2:9c:48:d6:a7:1d:69:9f:dd:
c2:6a:d7:5d:18:94:6a:b7:d3:30:b1:2f:02:32:27:
98:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:63:7A:64:3F:8F:80:A7:D0:0D:F7:A5:5F:4E:AA:8A:03:F0:25:FA
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/iWN6ZD-PgKfQDfelX06qigPwJfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.154.0/24
31.56.158.0/23
31.56.168.0/22
31.56.174.0/23
31.57.24.0/21
31.57.48.0/20
31.57.92.0-31.57.99.255
31.57.120.0/21
31.58.34.0/23
31.58.196.0/22
31.58.204.0-31.58.209.255
31.58.212.0/22
31.58.220.0-31.58.227.255
31.58.232.0-31.58.234.255
31.58.236.0/24
31.59.120.0/22
217.60.0.0/18
217.60.188.0-217.60.197.255
217.60.244.0/23
217.60.248.0/24
Signature Algorithm: sha256WithRSAEncryption
88:c4:62:ef:c3:bd:63:0f:1a:6f:e2:90:e9:e2:b7:d7:04:0f:
a6:78:64:ba:f8:68:13:ac:b8:cc:5f:c9:f6:96:30:37:c1:35:
e8:00:e4:f5:ca:24:e5:65:64:05:64:89:2b:ca:cf:47:93:7f:
1a:62:08:5c:37:74:c9:82:bb:87:39:64:bf:34:80:9e:ba:69:
c8:a5:1c:aa:e5:e6:ac:63:36:2f:0a:67:97:4f:88:9f:a5:02:
e1:23:69:3f:86:a3:51:d0:7d:20:b7:a1:f6:b2:ce:46:81:4c:
f5:0e:84:c5:c3:88:04:93:8d:48:08:ef:be:02:4c:8a:1e:6b:
66:04:58:d2:a6:08:cd:72:78:b4:9c:ba:d6:a2:8d:9c:f9:2c:
91:ad:ff:34:20:c8:1d:cc:33:39:14:c2:24:05:0c:25:32:c8:
ed:4b:ee:cd:e3:13:69:20:c2:25:cc:9b:69:99:df:fa:5a:0d:
df:92:01:c7:9f:fc:98:b3:b3:cd:43:69:a5:97:d0:7d:3d:c3:
6a:31:f5:cf:36:97:86:82:ff:a8:4e:eb:0b:18:30:e8:7f:f3:
70:f8:89:4d:b0:d5:a8:62:3c:2a:8c:ad:d3:a1:f7:4d:b0:43:
e6:e8:01:06:dc:b8:03:64:a3:91:99:38:6a:c8:76:f3:d8:e2:
c9:20:fa:25
-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgISAZU+3d/aEF7kRIDCwXAKHGXFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMjI1MjA0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTYzN2E2NDNmOGY4MGE3ZDAwZGY3YTU1ZjRlYWE4YTAzZjAyNWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaLvFe2Fm6EkGUdoRDEb0qD9QmpF
UWUUybIXDnJ13UYI4budu7i0lARjQMceitPWlK+s01xstN8m4GsY6cJRVIIM5USt
1oelc7H0ky/G1bcN+VT7vZORPsrm6sfIwuHSjgVyqfZeSiBaCRUjEB5PjrG0QzfV
+PO5xOOgq0V6wP+Xsr1Cuwz4ZOHrrApupl+2Py2f2h1YTtXFt4D+whiqq+Uo3IUP
rzWG6ZZy8mHPeL7qnEyr+oXF8sX3R9gxe90FAX+FkmAmnRj1lVmo4+2r+tFFL4Eg
PsQn8PCJhrg802qcs/b5DbiinEjWpx1pn93CatddGJRqt9MwsS8CMieY+wIDAQAB
o4ICqDCCAqQwHQYDVR0OBBYEFIljemQ/j4Cn0A33pV9OqooD8CX6MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvaVdONlpELVBnS2ZRRGZlbFgwNnFpZ1B3SmZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG9BggrBgEFBQcBBwEB/wSBrTCBqjCBpwQCAAEwgaADBAAf
OJoDBAEfOJ4DBAIfOKgDBAEfOK4DBAMfORgDBAQfOTAwDAMEAh85XAMEAh85YAME
Ax85eAMEAR86IgMEAh86xDAMAwQCHzrMAwQBHzrQAwQCHzrUMAwDBAIfOtwDBAIf
OuAwDAMEAx866AMEAB866gMEAB867AMEAh87eAMEBtk8ADAMAwQC2Ty8AwQB2TzE
AwQB2Tz0AwQA2Tz4MA0GCSqGSIb3DQEBCwUAA4IBAQCIxGLvw71jDxpv4pDp4rfX
BA+meGS6+GgTrLjMX8n2ljA3wTXoAOT1yiTlZWQFZIkrys9Hk38aYghcN3TJgruH
OWS/NICeumnIpRyq5easYzYvCmeXT4ifpQLhI2k/hqNR0H0gt6H2ss5GgUz1DoTF
w4gEk41ICO++AkyKHmtmBFjSpgjNcni0nLrWoo2c+SyRrf80IMgdzDM5FMIkBQwl
MsjtS+7N4xNpIMIlzJtpmd/6Wg3fkgHHn/yYs7PNQ2mll9B9PcNqMfXPNpeGgv+o
TusLGDDof/Nw+IlNsNWoYjwqjK3TofdNsEPm6AEG3LgDZKORmThqyHbz2OLJIPol
-----END CERTIFICATE-----
Generated at Sun Apr 27 17:49:48 2025 by rpki-client