Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lkNUysO89lnGCWqJRwN2vPPz4ts.roa
File: lkNUysO89lnGCWqJRwN2vPPz4ts.roa (raw, json)
Hash identifier: /NI1PtFhKeOoAg8u268dDfhoUfenG0dXRwOHRVjv+WQ=
Subject key identifier: 96:43:54:CA:C3:BC:F6:59:C6:09:6A:89:47:03:76:BC:F3:F3:E2:DB
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194E94107BD0CC72FA715476310412B64CE
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lkNUysO89lnGCWqJRwN2vPPz4ts.roa
Signing time: Sun 09 Feb 2025 05:49:00 +0000
ROA not before: Sun 09 Feb 2025 05:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.67.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.129.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.142.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.151.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.191.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.244.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.33.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.163.0/24 maxlen: 24
31.58.230.0/23 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.108.0/24 maxlen: 24
31.59.109.0/24 maxlen: 24
31.59.110.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
31.59.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 16:50:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e9:41:07:bd:0c:c7:2f:a7:15:47:63:10:41:2b:64:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 9 05:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=964354cac3bcf659c6096a89470376bcf3f3e2db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:df:5c:f3:17:fe:e4:29:95:b0:09:24:e6:48:
62:b0:d3:da:8f:60:00:04:0b:d3:e0:60:6e:95:b2:
4e:ac:47:c1:6a:b6:9c:a2:f3:a4:c5:e9:98:24:33:
90:a4:9d:12:da:12:68:4a:31:50:60:a3:b1:d8:e4:
50:c8:a8:e5:19:bb:dc:02:3e:db:e7:56:aa:c0:5d:
01:27:d7:ee:f4:56:c0:df:6d:e2:de:2f:59:98:6a:
90:2d:cc:63:67:ec:4a:d0:90:9c:a3:ea:f1:ea:b5:
76:33:88:0d:25:ea:df:cc:65:43:ad:ec:af:40:3b:
a9:a3:99:56:8e:ae:02:62:70:ba:69:81:64:66:97:
13:c2:ee:5d:11:62:bb:05:91:ef:a6:b0:88:0a:21:
b7:86:25:41:b7:1e:be:af:d7:27:e9:e7:43:10:5e:
34:f9:d7:e3:0c:63:e8:5e:25:bb:bd:d2:99:99:9b:
fa:b3:d2:4b:b9:6d:c5:b5:85:a0:c4:6d:73:7b:3e:
33:05:ac:f4:36:b5:9a:08:08:1b:67:9a:61:28:d9:
c7:72:f2:b9:14:d2:bc:02:f4:04:3b:c4:64:58:1f:
5c:a4:85:8f:fd:2a:a0:f7:55:fa:ee:60:16:13:be:
96:0e:5e:4f:f6:2e:f3:6f:e2:a5:11:b4:c9:38:f1:
64:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:43:54:CA:C3:BC:F6:59:C6:09:6A:89:47:03:76:BC:F3:F3:E2:DB
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lkNUysO89lnGCWqJRwN2vPPz4ts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.67.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.104.0/21
31.57.129.0/24
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.151.0/24
31.57.176.0/21
31.57.191.0-31.57.195.255
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.244.0/24
31.57.252.0/22
31.58.33.0-31.58.35.255
31.58.152.0/22
31.58.163.0/24
31.58.230.0/23
31.59.57.0/24
31.59.96.0/22
31.59.108.0-31.59.110.255
31.59.112.0/22
31.59.184.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:7f:cb:f6:a5:de:90:57:95:db:f7:c2:74:23:02:89:70:b8:
91:50:59:10:59:0f:30:4d:92:40:0b:da:33:f9:91:ec:82:d3:
83:f4:4a:28:d3:c7:9c:18:1a:9e:0d:dd:07:a4:41:18:ec:e3:
75:5a:a3:db:a9:08:17:51:70:5b:89:e8:72:04:67:ac:f9:aa:
9a:c3:3b:00:ba:d7:7b:35:a0:f3:2c:7b:e2:a6:17:f2:d3:99:
45:16:14:36:c0:2a:24:2a:73:98:ff:b1:76:d6:25:d2:60:6f:
a2:3c:94:0c:ac:ea:73:22:36:5a:95:c4:51:af:8f:92:c5:aa:
48:e5:d6:1c:7a:75:ec:5b:fc:ea:4b:78:3d:e3:1f:4e:26:6b:
e7:5d:d6:cb:15:7f:42:78:61:75:97:e8:3f:7c:a4:90:d9:36:
bf:7f:86:de:9f:53:56:3e:e7:0d:1a:89:2e:11:96:b6:82:73:
a3:c4:5b:4e:3d:1d:75:be:fe:27:50:76:83:70:24:b6:b1:05:
c1:43:e1:1a:40:e7:74:9c:06:b5:a2:b9:c2:32:17:5c:76:d7:
ae:d1:f0:3b:f2:f1:8f:fb:d2:e9:85:36:43:2d:a1:b4:f7:4b:
07:7b:27:32:3e:f4:7e:61:70:89:61:b9:60:63:f5:aa:57:ce:
e1:18:1b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:00:08 2025 by rpki-client