Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tFqgO5s9dQauUAgg81bEdYNnJck.roa
File: tFqgO5s9dQauUAgg81bEdYNnJck.roa (raw, json)
Hash identifier: 4c4zf2XaRDJjy3qKHy18gFEm9fyIuy+UBsBcxckpnWk=
Subject key identifier: B4:5A:A0:3B:9B:3D:75:06:AE:50:08:20:F3:56:C4:75:83:67:25:C9
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01963937E10621624E22CB7E09D0B0935C34
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tFqgO5s9dQauUAgg81bEdYNnJck.roa
Signing time: Tue 15 Apr 2025 11:31:25 +0000
ROA not before: Tue 15 Apr 2025 11:31:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.23.0/24 maxlen: 24
31.56.24.0/24 maxlen: 24
31.56.32.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.67.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.200.0/24 maxlen: 24
31.56.202.0/24 maxlen: 24
31.57.103.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.113.0/24 maxlen: 24
31.57.114.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.138.0/24 maxlen: 24
31.57.143.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.168.0/23 maxlen: 23
31.57.176.0/21 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.196.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.208.0/22 maxlen: 22
31.57.215.0/24 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.221.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.230.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.238.0/24 maxlen: 24
31.57.249.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.76.0/24 maxlen: 24
31.58.77.0/24 maxlen: 24
31.58.78.0/24 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.92.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 16 Apr 2025 05:55:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:39:37:e1:06:21:62:4e:22:cb:7e:09:d0:b0:93:5c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 15 11:31:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b45aa03b9b3d7506ae500820f356c475836725c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:04:08:91:f7:4c:7c:dc:fb:69:69:6e:b8:17:
9e:c8:16:46:f7:83:35:61:8d:70:5a:bd:b8:91:39:
3a:eb:db:60:e5:e7:06:24:16:f4:b8:1e:57:aa:d4:
32:ea:d5:9e:25:1c:7c:5a:51:86:2b:3c:dc:1e:56:
7c:5d:c0:01:14:59:ee:f5:52:5c:7e:5a:c7:69:de:
c0:d7:db:da:36:70:26:98:b1:4a:01:88:62:85:cc:
01:50:2b:6f:8b:7c:43:9c:7d:f2:a2:04:5a:ec:c3:
d0:41:e8:1e:4f:67:92:d6:20:79:e6:74:7b:d3:37:
8a:f9:26:41:e5:de:ed:07:3c:a7:0d:28:24:c1:43:
38:8c:c1:5d:79:0b:e4:e0:61:ee:ec:49:82:46:de:
bc:8d:66:93:51:94:a8:ce:fd:d1:e6:15:22:5f:98:
a2:0c:37:71:f6:de:ff:ac:ca:9f:93:cd:59:cc:33:
d7:70:77:42:b2:8f:f7:fe:46:53:5e:92:19:b8:5d:
ca:c1:79:26:32:8c:8a:66:3b:fc:72:e9:b7:03:a6:
95:3d:48:35:ec:38:0a:ca:19:ca:b2:4b:7c:18:a4:
0c:76:4f:45:3e:49:1f:c3:27:db:e2:d6:7c:b1:d1:
8e:29:8f:11:4b:86:b3:a6:16:f2:d4:41:7f:9f:9e:
6e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5A:A0:3B:9B:3D:75:06:AE:50:08:20:F3:56:C4:75:83:67:25:C9
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tFqgO5s9dQauUAgg81bEdYNnJck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.23.0-31.56.24.255
31.56.32.0/24
31.56.57.0/24
31.56.67.0/24
31.56.71.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.103.0-31.57.111.255
31.57.113.0-31.57.114.255
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.188.255
31.57.192.0-31.57.196.255
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.230.0/24
31.57.232.0/22
31.57.238.0/24
31.57.249.0-31.57.255.255
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.76.0-31.58.78.255
31.58.84.0/22
31.58.92.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.175.255
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
55:7b:3e:85:72:b4:c8:ff:bb:d1:83:f1:7c:83:12:45:3c:ce:
76:3c:79:2d:b0:b7:c2:1e:2d:77:44:a6:1a:d8:e1:71:95:21:
0d:bd:1c:d0:e0:96:67:58:b9:de:25:68:86:55:2f:0b:71:80:
66:1e:d7:a3:62:85:d4:d5:37:fe:c6:a9:36:a7:3b:24:fd:76:
0a:da:c9:e1:3e:76:fe:9d:1c:02:23:44:ce:af:98:91:f5:41:
09:0c:23:c7:b6:32:f5:81:53:9d:30:1a:d1:cd:da:7e:2d:83:
93:b9:ab:76:38:ac:ab:ca:a3:e6:87:fc:4f:93:49:b2:ba:de:
8f:99:e4:1c:87:56:8f:91:eb:5c:43:f2:ac:4e:05:43:eb:b2:
d6:a5:42:a1:9d:63:44:08:62:91:5c:ca:8a:32:27:53:4f:5a:
45:9e:d5:52:d4:05:07:68:bd:f0:4a:4d:d4:a1:82:a2:78:34:
10:74:fa:5d:51:71:15:a0:e5:a7:3a:aa:b7:cf:f8:11:54:6b:
1a:a2:d3:3a:52:a8:c4:77:08:41:c6:89:ba:c3:1e:6e:9b:12:
70:2d:dd:4a:d6:8d:79:d3:89:a1:66:30:86:9d:3c:6b:a8:ec:
60:eb:14:f1:c9:5c:6f:0f:38:eb:6b:96:76:65:23:65:2a:46:
f2:cf:5e:9d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 28 04:47:13 2025 by rpki-client