Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qrZOMALsgyk7tNmcSzxdem5BdSQ.roa
File: qrZOMALsgyk7tNmcSzxdem5BdSQ.roa (raw, json)
Hash identifier: 53/zLgcg9yY96Z0xzHE3aIS+LFjtzx8fkAc1RNthFYE=
Subject key identifier: AA:B6:4E:30:02:EC:83:29:3B:B4:D9:9C:4B:3C:5D:7A:6E:41:75:24
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019658CCAC8CBD8509E4EC1F182D2B04F0BD
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qrZOMALsgyk7tNmcSzxdem5BdSQ.roa
Signing time: Mon 21 Apr 2025 14:42:10 +0000
ROA not before: Mon 21 Apr 2025 14:42:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.23.0/24 maxlen: 24
31.56.24.0/24 maxlen: 24
31.56.32.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.125.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.200.0/24 maxlen: 24
31.56.202.0/24 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.103.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.113.0/24 maxlen: 24
31.57.118.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.138.0/24 maxlen: 24
31.57.143.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.171.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.196.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.215.0/24 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.230.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.238.0/24 maxlen: 24
31.57.249.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.50.0/24 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.76.0/24 maxlen: 24
31.58.77.0/24 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 22 Apr 2025 10:40:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:cc:ac:8c:bd:85:09:e4:ec:1f:18:2d:2b:04:f0:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 21 14:42:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aab64e3002ec83293bb4d99c4b3c5d7a6e417524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d4:d1:38:92:e5:74:34:ba:91:a9:4c:73:9b:
48:52:3f:d7:5c:48:d8:9c:95:98:cc:29:5f:1d:e8:
fd:5d:58:df:12:63:f9:be:e4:ab:57:86:a9:d5:c0:
b6:09:e2:60:3d:f8:9e:13:78:f8:76:6c:0e:87:ad:
f2:de:ca:ba:eb:70:c0:28:05:a4:60:29:e6:cd:9a:
f6:e1:e1:9b:0c:82:0c:f5:0a:6a:07:af:e2:10:41:
10:2f:30:d2:9b:8d:4a:31:8c:c6:1c:c8:1c:03:74:
c8:d3:85:0e:76:23:4c:e3:1f:4e:80:bc:7f:aa:6c:
f9:9d:12:ea:b0:30:db:be:c5:f5:7c:48:53:ad:ec:
e0:b2:f3:49:cd:81:13:19:be:d2:a4:bc:7d:32:2a:
4f:69:94:35:d4:5d:b9:1c:33:b3:8f:53:a5:c8:99:
de:7b:51:c7:0a:d7:13:9d:56:88:fe:ac:38:4b:0e:
21:a2:e6:ef:8a:b9:45:2f:09:f1:1d:8d:50:88:f4:
98:4d:50:44:cf:a0:7a:59:81:f8:2d:87:17:25:02:
bc:19:2f:3c:11:7b:eb:7b:b1:de:28:5e:19:ed:fe:
3c:b4:46:1b:11:a1:4d:2b:3c:98:e2:21:b1:8a:f9:
5b:3b:77:58:6d:b8:a7:30:b7:63:13:f0:ff:67:2b:
31:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B6:4E:30:02:EC:83:29:3B:B4:D9:9C:4B:3C:5D:7A:6E:41:75:24
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qrZOMALsgyk7tNmcSzxdem5BdSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.23.0-31.56.24.255
31.56.32.0/24
31.56.57.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.125.0/24
31.56.200.0/22
31.57.36.0/23
31.57.103.0-31.57.111.255
31.57.113.0/24
31.57.118.0/24
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.188.255
31.57.192.0-31.57.196.255
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.230.0/24
31.57.232.0/22
31.57.238.0/24
31.57.249.0-31.57.255.255
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.76.0/23
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.151.255
31.59.160.0/20
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:53:d5:05:c9:c8:fb:41:95:1b:4e:b9:18:e5:ef:06:43:e2:
97:13:8d:45:f3:85:fa:9b:1b:05:d6:49:e7:37:b8:10:98:c7:
a0:cf:80:89:c0:78:a8:f5:c9:c4:1e:0a:fe:b0:d7:3b:00:34:
6b:f9:a1:27:84:05:89:4a:ca:ae:98:3a:69:b0:83:f5:77:f4:
1f:04:d5:4a:86:81:20:1d:d5:c2:aa:d6:5c:1b:3f:7e:50:8f:
71:72:76:5b:e2:ec:4f:11:fd:ec:49:5f:79:be:b9:bd:60:d9:
40:f5:ef:e2:cd:d5:88:4a:42:ca:26:cb:0c:9c:94:fe:f6:34:
4b:29:e5:b7:ed:75:8c:0d:5b:39:a2:d4:8a:dd:88:f5:7f:dc:
ba:ce:75:d6:82:fb:6f:cd:3b:d2:7e:20:c0:fa:a6:41:29:a5:
56:dd:2e:55:a8:41:6e:53:0a:8e:ad:91:c7:30:3c:ac:5e:7f:
d1:06:8d:83:e5:b7:0c:a4:c8:70:16:de:de:17:15:1b:4b:49:
d5:3a:af:d5:13:27:50:d6:a2:da:53:c4:ba:44:31:69:46:4d:
77:af:1c:67:ee:e5:fa:67:9b:df:b0:f4:eb:51:8c:c6:dc:9e:
f2:0c:bd:bb:aa:d9:6b:0f:6a:a0:5c:59:74:d1:7c:77:aa:06:
d1:71:94:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:08:40 2025 by rpki-client