Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/oCiJKyfj7hP0eQWoO41RPvpw5Rc.roa
File: oCiJKyfj7hP0eQWoO41RPvpw5Rc.roa (raw, json)
Hash identifier: jztNHdXRBWLCF84+PGC9+ghkpcAHYD41W8qeM5Ll21E=
Subject key identifier: A0:28:89:2B:27:E3:EE:13:F4:79:05:A8:3B:8D:51:3E:FA:70:E5:17
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196C818CCF4F7C11C100B5315E8332C2F32
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/oCiJKyfj7hP0eQWoO41RPvpw5Rc.roa
Signing time: Tue 13 May 2025 05:23:10 +0000
ROA not before: Tue 13 May 2025 05:23:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/22 maxlen: 24
31.56.224.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.92.0/22 maxlen: 22
31.57.104.0/21 maxlen: 24
31.57.118.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.171.0/24 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.230.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.249.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.50.0/24 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.86.0/24 maxlen: 24
31.58.141.0/24 maxlen: 24
31.58.144.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.120.0/24 maxlen: 24
31.59.121.0/24 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 13 May 2025 13:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:18:cc:f4:f7:c1:1c:10:0b:53:15:e8:33:2c:2f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 13 05:23:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a028892b27e3ee13f47905a83b8d513efa70e517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3c:f1:55:f0:72:b1:cf:54:b2:5e:57:d2:d1:
5d:1f:f1:66:3a:e6:83:98:e4:14:61:bc:38:e8:92:
0d:74:88:20:29:be:03:d4:36:fd:89:a2:0e:28:e3:
3d:4e:dd:76:42:4a:0a:d6:c4:31:0b:3e:1d:a4:2c:
53:36:07:e2:c0:61:92:a8:d8:07:0a:47:18:69:79:
4c:18:92:08:80:cb:d7:e5:cd:26:8c:03:91:fb:72:
40:5f:f8:82:5a:d3:51:73:d1:f1:5c:34:f0:cb:1c:
98:92:df:99:c9:84:ec:8e:31:49:f7:6a:16:3e:59:
03:ac:07:3f:e3:9d:19:c7:71:c9:7b:68:27:39:26:
70:15:d8:5e:fb:9e:29:b9:8e:a6:79:23:d1:b6:a1:
c1:ef:28:cd:f7:f5:b7:a0:2d:01:fb:a5:24:1a:ee:
4f:c3:72:35:c3:f9:cc:e2:a6:53:10:b0:3c:92:78:
b3:ac:29:e3:8c:ab:e1:5d:0b:2d:24:3f:40:df:ce:
f7:62:8c:06:0b:f1:0d:68:86:5e:12:54:d5:5f:4d:
00:58:ca:1d:90:0f:1c:7f:a4:12:db:4c:5b:fa:02:
3b:28:2d:24:15:75:9e:78:fe:1e:6a:f5:2c:8e:11:
78:5a:ad:d2:de:3e:1e:2d:7e:03:6a:59:43:8c:7c:
64:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:28:89:2B:27:E3:EE:13:F4:79:05:A8:3B:8D:51:3E:FA:70:E5:17
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/oCiJKyfj7hP0eQWoO41RPvpw5Rc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.57.0/24
31.56.71.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0/22
31.56.200.0/22
31.56.208.0/21
31.56.220.0-31.56.231.255
31.56.236.0/22
31.57.36.0/23
31.57.92.0/22
31.57.104.0/21
31.57.118.0/24
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.188.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.230.0/24
31.57.232.0/22
31.57.249.0-31.57.255.255
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.84.0/22
31.58.141.0/24
31.58.144.0/24
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.151.255
31.59.160.0/20
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
07:70:6f:0e:41:9d:66:cd:92:cd:9c:01:89:f9:d2:41:f0:56:
e1:6e:9b:52:2b:3a:25:87:c8:9f:74:5f:cd:21:a8:46:bf:2a:
d1:1b:bc:b2:ac:39:bc:0b:cb:1f:0d:df:bf:2e:29:0e:17:d7:
13:1c:d3:69:72:18:b3:3e:4e:cc:3e:ba:62:c9:dc:ba:3d:af:
0b:17:c4:60:14:21:62:ab:94:27:18:d8:48:86:fa:b5:3b:f8:
7a:37:83:55:b5:50:f4:a3:99:ed:16:87:37:53:1e:50:c3:1b:
3e:45:62:da:07:22:16:0a:4b:65:2c:c0:f0:00:b7:05:5e:57:
7c:6f:fa:d5:93:37:7b:7a:17:47:9d:42:dd:b2:60:fa:7d:8c:
91:11:4d:7d:33:fc:2e:e5:3d:9c:41:5c:b4:42:c0:2c:e9:ca:
b7:99:b9:68:a6:aa:d5:b8:99:1d:a8:40:ca:87:e9:e8:f3:9e:
5c:27:40:2a:0e:4d:fe:da:bf:2b:e7:a6:94:64:22:6f:8f:81:
5f:1e:93:2e:f9:6a:7d:5c:fa:b5:92:c5:95:16:30:0a:ab:ef:
c2:c8:ad:c1:06:41:19:f7:47:31:61:dd:2f:2b:79:8e:5b:31:
ec:7c:70:9f:7a:fc:38:d7:dd:3b:ac:ea:61:58:50:ce:ec:d8:
d4:9c:b2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:08:49 2025 by rpki-client