Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/iWqYpzdLEu-wLKUsxPQSvWmnB0M.roa
File: iWqYpzdLEu-wLKUsxPQSvWmnB0M.roa (raw, json)
Hash identifier: XYeOWEdONBxFkM2+W/+q1YW9lEghFENf2Il0bgV0vTw=
Subject key identifier: 89:6A:98:A7:37:4B:12:EF:B0:2C:A5:2C:C4:F4:12:BD:69:A7:07:43
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194F5FB6CC356D5D3543912047F37C74807
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/iWqYpzdLEu-wLKUsxPQSvWmnB0M.roa
Signing time: Tue 11 Feb 2025 17:08:02 +0000
ROA not before: Tue 11 Feb 2025 17:08:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.129.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.132.0/24 maxlen: 24
31.57.136.0/21 maxlen: 24
31.57.142.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.151.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.191.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.244.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.33.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.157.0/24 maxlen: 24
31.58.163.0/24 maxlen: 24
31.58.230.0/23 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.108.0/24 maxlen: 24
31.59.109.0/24 maxlen: 24
31.59.110.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
31.59.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 05:32:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f5:fb:6c:c3:56:d5:d3:54:39:12:04:7f:37:c7:48:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 11 17:08:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=896a98a7374b12efb02ca52cc4f412bd69a70743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d1:1e:75:ee:ca:7b:eb:ad:5f:ea:be:9d:e4:
dc:47:8b:79:91:f3:1c:84:a1:3e:67:95:03:d7:84:
c7:ed:0c:2d:7d:29:72:a4:b3:35:54:34:dd:95:77:
86:eb:1d:06:f9:f2:4e:54:7e:f0:ce:6e:e4:23:4c:
8a:c4:7d:4c:80:da:e3:74:92:7c:37:3c:73:5d:0a:
bc:ec:8a:7f:82:f7:d5:b2:37:90:a4:d4:73:c3:18:
6e:8c:a0:13:80:d5:a0:fd:83:ac:43:19:b5:37:63:
92:39:60:39:b4:97:78:71:83:7b:87:79:8a:7c:6a:
16:82:6d:8f:2e:ff:8d:73:36:26:bd:93:f0:6c:f2:
71:97:34:fe:b2:84:39:ab:23:37:4c:02:6c:10:7e:
19:7e:40:b5:5b:f1:fe:f2:cd:b9:3a:17:f1:50:0e:
ee:24:21:c7:0c:00:68:ec:a7:e6:f7:71:b7:4b:52:
bb:83:f3:94:1e:32:e7:8a:41:7a:04:c0:98:0b:08:
03:f7:09:73:df:f4:96:0f:aa:6f:4f:ec:36:37:51:
7f:42:f7:63:9c:30:09:87:7a:ae:6e:4b:79:2d:4e:
d6:b3:a8:c6:dd:39:75:e3:de:85:ff:a1:d9:d1:74:
d1:e8:d4:40:e1:1d:87:38:a1:2d:9a:c3:6e:51:24:
67:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6A:98:A7:37:4B:12:EF:B0:2C:A5:2C:C4:F4:12:BD:69:A7:07:43
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/iWqYpzdLEu-wLKUsxPQSvWmnB0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.104.0/21
31.57.129.0/24
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.151.0/24
31.57.176.0/21
31.57.191.0-31.57.195.255
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.244.0/24
31.57.252.0/22
31.58.33.0-31.58.35.255
31.58.152.0/22
31.58.157.0/24
31.58.163.0/24
31.58.230.0/23
31.59.57.0/24
31.59.96.0/22
31.59.108.0-31.59.110.255
31.59.112.0/22
31.59.184.0/22
Signature Algorithm: sha256WithRSAEncryption
66:a0:10:64:cb:85:9a:d4:b0:01:64:0f:63:be:64:4c:92:7f:
de:3c:12:ac:12:66:3f:21:8d:f0:4f:c5:3f:08:32:5d:c7:5c:
24:7a:8c:61:98:d2:84:0f:db:75:af:c4:ea:b8:bb:4d:fc:ae:
a3:26:7e:fd:91:ab:eb:11:ae:14:4e:d2:82:e2:dd:90:f8:6b:
50:d5:07:15:c6:36:fd:24:13:0c:f8:97:b3:a7:01:1b:9c:39:
bf:16:24:75:50:38:9f:0c:ca:15:f4:9b:11:33:be:56:e6:23:
c0:c7:f3:c0:01:9e:6f:33:85:f4:4d:c0:ae:33:26:c6:2e:af:
2f:19:1a:d1:7c:30:5e:60:09:08:53:ff:09:97:5a:cf:33:9f:
ef:34:93:11:7b:59:70:43:a7:33:ad:60:40:65:2b:62:e6:78:
4b:12:99:29:8d:80:61:37:9f:0d:c1:f8:a7:e0:05:1b:6f:94:
23:81:03:0c:c7:84:44:77:23:a8:c0:ba:a9:cd:88:03:e3:67:
74:42:f8:70:09:94:32:f0:97:02:bd:d5:80:d5:f8:d6:d5:d0:
ec:f9:46:b7:33:d1:b0:54:92:b2:7d:02:d0:8a:08:70:e1:8b:
5c:b2:f8:5d:30:40:d9:c7:f5:f0:7c:33:46:c0:ad:b0:ce:63:
f1:87:f6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:34:13 2025 by rpki-client