Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lUNy5z9FwuEZM8SeJNcFCAbfDTY.roa
File: lUNy5z9FwuEZM8SeJNcFCAbfDTY.roa (raw, json)
Hash identifier: 20SWx4uoDeOqxFY5qCEF2HnK5vc83MItIM53PG93OX0=
Subject key identifier: 95:43:72:E7:3F:45:C2:E1:19:33:C4:9E:24:D7:05:08:06:DF:0D:36
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019609831FA2A363B3BC0BF388B9A1878443
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lUNy5z9FwuEZM8SeJNcFCAbfDTY.roa
Signing time: Sun 06 Apr 2025 05:11:50 +0000
ROA not before: Sun 06 Apr 2025 05:11:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.23.0/24 maxlen: 24
31.56.24.0/24 maxlen: 24
31.56.32.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.74.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.200.0/24 maxlen: 24
31.56.202.0/24 maxlen: 24
31.56.204.0/22 maxlen: 24
31.56.204.0/23 maxlen: 24
31.56.206.0/23 maxlen: 24
31.57.103.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.113.0/24 maxlen: 24
31.57.114.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.143.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.168.0/23 maxlen: 23
31.57.176.0/21 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.196.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.215.0/24 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.221.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.238.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.57.252.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.76.0/24 maxlen: 24
31.58.77.0/24 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.92.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.71.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 07 Apr 2025 10:59:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:09:83:1f:a2:a3:63:b3:bc:0b:f3:88:b9:a1:87:84:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 6 05:11:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=954372e73f45c2e11933c49e24d7050806df0d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9f:2d:bc:c9:fa:f3:1d:5d:15:d6:11:c0:ae:
ec:e4:c8:cf:c7:d4:87:ba:e7:64:dc:e7:30:7b:81:
d0:35:7e:2b:57:e3:85:2f:7c:f6:b0:f3:9a:71:c0:
cf:a3:3c:4b:f6:b7:58:f3:89:93:8c:98:64:0c:98:
0c:31:21:a8:9f:58:2f:b5:11:5d:eb:36:d4:2f:d1:
79:bc:e9:12:f2:0c:80:ab:f8:aa:14:74:a3:8d:15:
71:7b:1e:99:b1:9c:25:12:4c:7e:99:c8:f1:a5:19:
27:0f:c3:c1:a3:46:15:75:16:13:45:56:ec:d6:2f:
8a:d0:18:2c:16:f6:d5:e9:38:36:c7:01:38:4b:53:
e6:7c:c3:92:f2:3f:a1:b4:ee:dc:bb:c1:72:3f:59:
58:23:ea:6d:6a:60:4e:70:bb:b6:9d:3d:b7:3b:68:
1e:b6:6e:b6:29:2d:1a:c0:d1:0b:3d:6a:3c:ea:0b:
79:51:d0:5d:e2:e7:98:b0:d5:b4:ef:1b:9d:54:24:
cf:ea:3d:d4:5c:33:3a:e7:b6:fd:37:8e:a1:4c:77:
03:d8:5a:66:db:45:a4:f0:57:1e:ba:14:9f:e5:3e:
f7:a3:6d:77:89:99:3c:e4:75:36:7a:c5:c9:14:72:
ad:7d:36:6e:be:ba:e5:97:5d:cd:47:b1:c3:b3:09:
86:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:43:72:E7:3F:45:C2:E1:19:33:C4:9E:24:D7:05:08:06:DF:0D:36
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lUNy5z9FwuEZM8SeJNcFCAbfDTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.23.0-31.56.24.255
31.56.32.0/24
31.56.57.0/24
31.56.71.0/24
31.56.74.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/21
31.57.103.0-31.57.111.255
31.57.113.0-31.57.114.255
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0-31.57.196.255
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.238.0/24
31.57.252.0/22
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.76.0/23
31.58.84.0/22
31.58.92.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.71.0/24
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.175.255
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:0b:db:a2:fa:9b:de:ab:21:33:15:81:df:ae:ee:b2:b2:19:
c8:5d:55:ba:9e:4b:c4:19:39:81:44:60:b7:41:64:47:b0:4d:
7a:6f:f4:90:e4:5c:dc:40:dd:b0:c3:3d:30:e0:94:b1:4f:93:
a9:09:c4:2b:45:f7:40:85:79:78:8c:22:fa:1d:b2:18:c5:c0:
9e:28:af:8f:65:7a:36:d5:a0:59:ba:28:f9:8a:0c:83:2d:63:
82:64:c2:6a:46:65:68:3c:c3:57:e2:01:9f:d8:1f:a1:1a:70:
15:3e:bc:93:d4:ae:88:be:09:bd:86:a7:a8:9b:6f:47:7d:85:
e7:c5:c2:22:60:34:25:10:fa:09:a1:44:3d:e0:7c:76:93:ae:
97:3a:b7:2e:7e:1b:d4:1a:c2:44:88:ea:75:3f:3d:e5:dd:2a:
cb:15:c6:76:99:97:d4:55:12:49:49:43:ae:37:ad:b0:4b:5d:
0e:68:8a:0b:fa:16:90:a8:2a:c8:f7:19:ec:6e:ab:96:f3:29:
24:ff:f5:16:7c:69:73:bf:bb:d3:06:47:9e:89:8f:19:c6:a4:
5c:7c:86:e0:c1:35:73:16:86:01:b5:b4:8d:5f:69:58:ef:a6:
ea:7d:e2:cd:14:da:6c:68:dd:60:be:54:a0:52:55:0e:03:92:
14:b5:42:0c
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgISAZYJgx+io2OzvAvziLmhh4RDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNDA2MDUxMTUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTQzNzJlNzNmNDVjMmUxMTkzM2M0OWUyNGQ3MDUwODA2ZGYwZDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp58tvMn68x1dFdYRwK7s5MjPx9SH
uudk3Ocwe4HQNX4rV+OFL3z2sPOaccDPozxL9rdY84mTjJhkDJgMMSGon1gvtRFd
6zbUL9F5vOkS8gyAq/iqFHSjjRVxex6ZsZwlEkx+mcjxpRknD8PBo0YVdRYTRVbs
1i+K0BgsFvbV6Tg2xwE4S1PmfMOS8j+htO7cu8FyP1lYI+ptamBOcLu2nT23O2ge
tm62KS0awNELPWo86gt5UdBd4ueYsNW07xudVCTP6j3UXDM657b9N46hTHcD2Fpm
20Wk8FceuhSf5T73o213iZk85HU2esXJFHKtfTZuvrrll13NR7HDswmGCQIDAQAB
o4IDVzCCA1MwHQYDVR0OBBYEFJVDcuc/RcLhGTPEniTXBQgG3w02MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvbFVOeTV6OUZ3dUVaTThTZUpOY0ZDQWJmRFRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBawYIKwYBBQUHAQcBAf8EggFaMIIBVjCCAVIEAgABMIIB
SgMEAR84BDAMAwQAHzgXAwQAHzgYAwQAHzggAwQAHzg5AwQAHzhHAwQAHzhKAwQB
HzhaAwQDHzhoAwQBHzhyMAwDBAEfOHYDBAIfOHgDBAMfOMgwDAMEAB85ZwMEBB85
YDAMAwQAHzlxAwQAHzlyAwQDHzl4AwQBHzmEAwQDHzmIAwQBHzmSAwQCHzmoMAwD
BAQfObADBAIfObgwDAMEBh85wAMEAB85xAMEAR85yDAMAwQEHznQAwQCHzngAwQC
HznoAwQAHznuAwQCHzn8AwQBHzoiAwQAHzooAwQBHzoyAwQCHzpEAwQBHzpMAwQC
HzpUAwQCHzpcAwQCHzqYAwQCHzqsMAwDBAIfOtwDBAIfOuADBAAfO0cDBAIfO0wD
BAIfO2ADBAIfO3ADBAIfO3gwDAMEAx87iAMEBB87oAMEAh874AMEAh876DANBgkq
hkiG9w0BAQsFAAOCAQEAHwvbovqb3qshMxWB367usrIZyF1Vup5LxBk5gURgt0Fk
R7BNem/0kORc3EDdsMM9MOCUsU+TqQnEK0X3QIV5eIwi+h2yGMXAniivj2V6NtWg
Wboo+YoMgy1jgmTCakZlaDzDV+IBn9gfoRpwFT68k9SuiL4JvYanqJtvR32F58XC
ImA0JRD6CaFEPeB8dpOulzq3Ln4b1BrCRIjqdT895d0qyxXGdpmX1FUSSUlDrjet
sEtdDmiKC/oWkKgqyPcZ7G6rlvMpJP/1Fnxpc7+70wZHnomPGcakXHyG4ME1cxaG
AbW0jV9pWO+m6n3izRTabGjdYL5UoFJVDgOSFLVCDA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 01:12:47 2025 by rpki-client