Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qLkor3kukEBLJH2oazZK0USScSo.roa
File: qLkor3kukEBLJH2oazZK0USScSo.roa (raw, json)
Hash identifier: dlVuF4ukW7Jq52hdsNq4BCfWBjOgj+6aE/Nx34iPEZ8=
Subject key identifier: A8:B9:28:AF:79:2E:90:40:4B:24:7D:A8:6B:36:4A:D1:44:92:71:2A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195467BF2CEE5F69747857F9C014BA5D91E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qLkor3kukEBLJH2oazZK0USScSo.roa
Signing time: Thu 27 Feb 2025 08:18:02 +0000
ROA not before: Thu 27 Feb 2025 08:18:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.85.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.152.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
31.59.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Feb 2025 07:44:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:46:7b:f2:ce:e5:f6:97:47:85:7f:9c:01:4b:a5:d9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 27 08:18:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8b928af792e90404b247da86b364ad14492712a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:dd:a7:e1:7c:39:5a:16:0d:40:91:17:ad:18:
82:e6:60:29:a6:2c:02:42:2e:b0:c1:71:12:fd:07:
44:5a:7a:90:d3:ce:37:3f:2e:54:65:c8:b9:c6:97:
e1:0b:0c:5b:25:a5:e5:93:0e:8d:de:c5:6b:22:a3:
03:c8:30:17:13:93:70:fd:2e:46:a5:47:bc:3a:76:
f5:2a:04:0a:5c:28:ef:55:a3:54:58:5c:8b:0b:3c:
cb:cf:a4:71:77:a0:be:47:31:cd:ea:6b:08:f2:6b:
e2:98:d6:39:39:52:e6:88:b1:00:7d:7a:96:0c:c4:
86:cc:e6:ba:8f:ff:ed:a4:bf:3a:c0:e0:11:2a:49:
17:73:31:57:67:8e:11:bc:f8:4c:07:52:ad:c4:7f:
68:53:6e:09:5f:8b:33:f1:62:09:5e:e3:e3:d7:2d:
be:9c:61:be:25:30:28:25:3f:0d:bb:f0:7e:fc:ef:
2e:98:5f:ba:47:5c:70:ed:fa:98:81:cf:32:4f:0b:
2e:6f:db:59:c2:34:b9:e7:25:7f:08:c4:49:f8:ba:
65:f9:a6:aa:b5:e8:ae:ba:32:02:c5:a0:92:be:db:
1c:27:9d:0e:ac:d0:d6:08:eb:4e:c7:fa:ab:0d:c8:
eb:45:27:d0:98:68:4b:e9:cd:b7:90:09:96:08:ab:
ca:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B9:28:AF:79:2E:90:40:4B:24:7D:A8:6B:36:4A:D1:44:92:71:2A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qLkor3kukEBLJH2oazZK0USScSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.71.0/24
31.56.85.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.104.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.176.0/21
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.34.0/23
31.58.50.0/23
31.58.152.0/22
31.59.96.0/22
31.59.112.0/22
31.59.184.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:79:8a:e1:10:f0:c0:9d:08:41:25:02:6e:11:09:a5:20:79:
e2:e2:a9:39:b5:8c:fe:42:17:2e:96:83:51:98:f8:a8:9c:b1:
e9:59:c1:27:e4:d9:08:29:09:12:53:a0:0e:c5:51:5a:c7:f5:
29:63:3d:42:fe:02:71:ed:c9:e1:3a:ab:8a:2e:cb:2a:10:ea:
10:cf:28:be:48:a8:39:06:83:4c:83:cf:1c:47:b7:b7:5e:95:
ed:b6:cd:38:bc:c0:24:bb:5b:62:f9:cc:5b:c5:ec:d8:bc:a0:
b1:9b:28:31:71:4e:40:3c:30:0f:ea:c1:ec:51:d1:d2:cf:2c:
c4:21:cb:20:54:de:da:e8:e2:32:7b:c8:8f:04:a5:e1:0a:54:
99:51:3f:bb:90:30:9d:f6:cf:d6:9a:18:38:25:60:ac:bc:94:
3d:6a:88:4a:5c:9c:54:d6:3d:1f:7c:7c:8e:f5:d0:cc:38:85:
44:1a:b5:82:66:84:28:8e:e4:2a:55:67:e3:ea:17:03:fa:7f:
1e:c6:7e:21:8c:46:66:62:8e:d6:6d:fb:b2:fc:ad:40:cf:24:
c2:e2:c2:ac:43:c5:7f:64:59:64:93:d0:e6:e1:dd:d8:8c:f8:
26:5e:44:d3:42:43:d1:2d:b0:8f:3b:8c:6e:93:d1:59:84:07:
5d:b5:c0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:12:31 2025 by rpki-client