Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qT-2ef6DrLeOOIgHVfsXVWSGUBA.roa
File: qT-2ef6DrLeOOIgHVfsXVWSGUBA.roa (raw, json)
Hash identifier: kQEs2TFK8akD8OuPX/AnooF4YdMLVE1UtZsenyz4rDk=
Subject key identifier: A9:3F:B6:79:FE:83:AC:B7:8E:38:88:07:55:FB:17:55:64:86:50:10
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194E70792D67D373AFD7A1713C69037890E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qT-2ef6DrLeOOIgHVfsXVWSGUBA.roa
Signing time: Sat 08 Feb 2025 19:27:00 +0000
ROA not before: Sat 08 Feb 2025 19:27:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.129.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.151.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.191.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.244.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.33.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.163.0/24 maxlen: 24
31.58.230.0/23 maxlen: 24
31.59.42.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.108.0/24 maxlen: 24
31.59.109.0/24 maxlen: 24
31.59.110.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
31.59.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 09 Feb 2025 05:48:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e7:07:92:d6:7d:37:3a:fd:7a:17:13:c6:90:37:89:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 8 19:27:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a93fb679fe83acb78e38880755fb175564865010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ad:da:28:c2:ad:86:d3:60:ec:bd:76:26:7c:
a9:bc:89:62:a3:4c:c2:3c:95:53:87:3b:ae:8c:89:
b4:e9:66:73:b5:1c:36:2b:0c:d5:e3:da:d7:1e:0a:
a4:ec:5f:b0:db:d8:14:a0:8a:80:2f:58:b6:9f:88:
52:62:5f:2e:9e:6d:3d:ac:a2:0b:2c:ba:8b:2d:10:
b7:2d:b9:03:1b:b3:fa:66:56:4f:3f:be:27:45:45:
0b:69:26:20:bb:f7:c0:04:1d:f5:90:7a:e7:50:5d:
32:98:a0:53:07:e4:ef:33:94:75:fd:7a:21:da:8a:
50:81:61:19:03:fc:93:02:7e:67:2e:fd:ce:56:8e:
5e:d0:93:f5:67:44:b8:37:36:e7:a5:01:5f:3c:87:
5b:52:aa:8e:13:d1:01:08:b3:60:f1:69:d1:d8:71:
b7:07:d1:f5:ad:95:5a:fd:a2:91:7c:b2:c6:08:c6:
cd:e3:61:3c:b3:57:c8:d4:83:b0:78:f4:8d:f3:af:
df:c8:03:d6:fd:22:9e:57:a7:b0:8f:a2:b9:60:cd:
74:19:65:97:fe:79:5f:f1:8c:8e:65:07:1f:21:1e:
0a:17:34:cb:c2:3f:34:19:28:6f:1d:94:40:27:e0:
a1:f6:0e:5e:6e:fd:e6:05:14:89:0c:fa:92:64:30:
d5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3F:B6:79:FE:83:AC:B7:8E:38:88:07:55:FB:17:55:64:86:50:10
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qT-2ef6DrLeOOIgHVfsXVWSGUBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.104.0/21
31.57.129.0/24
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.151.0/24
31.57.176.0/21
31.57.191.0-31.57.195.255
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.244.0/24
31.57.252.0/22
31.58.33.0-31.58.35.255
31.58.152.0/22
31.58.163.0/24
31.58.230.0/23
31.59.42.0/24
31.59.57.0/24
31.59.96.0/22
31.59.108.0-31.59.110.255
31.59.112.0/22
31.59.184.0/22
Signature Algorithm: sha256WithRSAEncryption
87:22:c3:40:41:f0:a3:79:40:e3:ce:aa:40:32:31:4a:1a:8a:
8e:8e:5c:af:c2:56:3c:6d:04:1e:e2:58:09:04:92:ae:bc:ed:
eb:11:7a:f7:ff:99:45:63:d3:47:70:fc:bd:fe:07:1f:31:77:
27:5e:33:3f:6f:c3:74:c7:a3:2f:c0:54:8b:c3:28:3e:11:23:
90:4e:6e:e2:cd:36:64:36:22:f2:96:f3:29:d6:c5:59:86:58:
64:a4:3c:82:49:ae:8f:9e:6c:b9:bc:d7:8c:58:98:7a:c4:46:
46:87:89:d4:f8:c6:c4:b7:9d:cb:34:af:54:c3:a7:ff:21:a5:
d8:3d:d4:29:b0:94:cb:41:3c:cf:bf:da:8a:7f:fc:c2:3b:69:
9d:87:98:c7:1f:25:09:d2:d2:8a:45:e9:b6:17:7e:d0:25:b5:
84:1b:c8:c8:da:c4:d0:ea:b0:11:40:d4:fa:22:35:38:98:a6:
a2:fe:9b:bd:81:c8:98:08:86:d8:67:e8:ed:05:64:fa:a2:fa:
9d:03:67:2b:58:bb:40:a8:c8:70:36:ee:bc:14:5a:d7:d4:f8:
66:59:a2:a7:77:d3:b5:70:51:51:e9:1e:de:89:56:2e:b3:28:
89:2d:f4:c7:b9:af:2f:ef:26:7e:ac:c9:4a:ca:a8:9a:5d:ae:
a0:ea:b3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:40:29 2025 by rpki-client