Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wMVBJ9Bz2pnZP1VYv9HNgQLllIc.roa
File: wMVBJ9Bz2pnZP1VYv9HNgQLllIc.roa (raw, json)
Hash identifier: LT/77oEsAq8OiKFyvauOvEnk+mG+t1d5lKFdOTTuDRM=
Subject key identifier: C0:C5:41:27:D0:73:DA:99:D9:3F:55:58:BF:D1:CD:81:02:E5:94:87
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019606D5D6BFAD3EA40CFB1C1B5436A7A78A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wMVBJ9Bz2pnZP1VYv9HNgQLllIc.roa
Signing time: Sat 05 Apr 2025 16:43:19 +0000
ROA not before: Sat 05 Apr 2025 16:43:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.23.0/24 maxlen: 24
31.56.24.0/24 maxlen: 24
31.56.32.0/24 maxlen: 24
31.56.34.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.74.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.200.0/24 maxlen: 24
31.56.202.0/24 maxlen: 24
31.56.204.0/22 maxlen: 24
31.56.204.0/23 maxlen: 24
31.56.206.0/23 maxlen: 24
31.57.103.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.113.0/24 maxlen: 24
31.57.114.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.143.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.168.0/23 maxlen: 23
31.57.176.0/21 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.196.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.215.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.221.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.238.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.57.252.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.76.0/24 maxlen: 24
31.58.77.0/24 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.92.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.71.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 05 Apr 2025 19:56:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:06:d5:d6:bf:ad:3e:a4:0c:fb:1c:1b:54:36:a7:a7:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 5 16:43:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0c54127d073da99d93f5558bfd1cd8102e59487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ee:b3:cc:cd:92:13:f4:b8:f0:a3:ab:0f:70:
dd:4f:3b:0f:48:2a:5a:91:87:ed:e2:49:bb:ee:f8:
9c:7f:98:19:e2:08:91:09:8a:2e:b1:63:8e:0b:21:
91:9c:c5:e8:11:b2:58:8b:cf:f4:1c:ff:75:30:83:
fb:2b:8e:21:e0:32:21:ca:21:18:aa:99:6d:4e:d7:
4a:55:e7:7b:ef:76:37:0f:c8:31:74:ea:89:3f:cb:
08:f6:2b:19:89:da:2a:76:3c:e6:fa:f2:ea:3a:ff:
b3:34:45:95:00:e2:1d:d9:40:dd:98:b3:ef:f2:ae:
14:ef:5d:2d:cf:f7:29:33:b7:2a:63:85:dd:de:71:
10:d4:97:14:66:17:f9:ec:fe:a2:76:e2:20:be:4d:
f6:11:cb:cb:94:53:87:ae:d8:ec:78:37:49:54:09:
00:0a:db:e4:fb:d6:d4:3f:f1:3d:38:b0:e0:56:01:
2b:bd:ca:d9:3b:21:6f:dd:6e:7c:86:05:69:5e:19:
00:d3:e2:50:82:51:e1:22:d2:13:3b:39:78:6b:49:
3f:ff:b9:66:69:36:6f:e4:5b:4e:73:71:b9:27:ae:
c9:4c:2e:20:68:f9:f9:47:c0:86:e3:39:b8:5e:5f:
18:69:cb:7b:81:6c:21:9c:ee:a5:36:90:16:b0:63:
29:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C5:41:27:D0:73:DA:99:D9:3F:55:58:BF:D1:CD:81:02:E5:94:87
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wMVBJ9Bz2pnZP1VYv9HNgQLllIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.23.0-31.56.24.255
31.56.32.0/24
31.56.34.0/24
31.56.57.0/24
31.56.71.0/24
31.56.74.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/21
31.57.103.0-31.57.111.255
31.57.113.0-31.57.114.255
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0-31.57.196.255
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.238.0/24
31.57.252.0/22
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.76.0/23
31.58.84.0/22
31.58.92.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.71.0/24
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.175.255
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
45:86:95:c3:d1:4f:d0:25:b0:c2:83:00:87:85:2b:46:c9:7a:
7d:63:a2:c9:30:85:71:64:d6:20:83:7f:9f:a6:0c:29:c0:0a:
92:bf:84:10:38:ed:d0:2d:55:5d:3d:63:d9:41:3a:03:6a:b5:
41:3c:1e:32:fe:d8:44:02:58:fd:40:eb:30:bb:c0:d0:c8:46:
54:53:7b:a6:c5:af:df:a4:00:2a:71:50:07:cd:e1:a4:b0:ac:
ab:e0:bd:9a:b7:df:72:06:27:8b:b7:cc:ae:95:75:2d:0b:04:
51:88:d7:8b:b6:e2:e2:ff:84:7c:07:a5:27:4c:12:32:b1:8e:
a8:87:e4:96:c5:89:f3:57:f4:ce:b1:c9:7d:9b:65:53:12:20:
d5:99:57:2e:13:36:48:7b:48:1f:bc:44:6a:af:13:9c:a3:70:
0d:5e:a1:92:78:88:df:af:72:30:a9:88:a2:d7:be:ca:a3:2f:
e5:27:d5:97:22:e1:a2:21:b1:91:1f:b1:98:69:97:9f:00:36:
81:ad:99:8e:c3:54:6b:ea:f9:82:db:03:71:ea:ae:78:f5:8a:
64:3e:7a:f7:8d:6a:9d:96:8b:12:17:48:b5:20:07:78:67:4a:
1f:75:f7:d3:95:17:6a:78:44:5c:5d:83:32:9c:96:3d:53:6d:
60:a4:d0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:47:34 2025 by rpki-client