Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2XTEZyT74i_8IDrugjC0QAZ0Vj8.roa
File: 2XTEZyT74i_8IDrugjC0QAZ0Vj8.roa (raw, json)
Hash identifier: cfd8xbrbRNA4sFl8LGFgIr7wDocF3d5Di+wvfeKOOxM=
Subject key identifier: D9:74:C4:67:24:FB:E2:2F:FC:20:3A:EE:82:30:B4:40:06:74:56:3F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196A0D27A910AEC1E0657D7F7F80A5C7909
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2XTEZyT74i_8IDrugjC0QAZ0Vj8.roa
Signing time: Mon 05 May 2025 14:21:10 +0000
ROA not before: Mon 05 May 2025 14:21:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.48.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.176.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.184.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/22 maxlen: 24
31.56.224.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.57.10.0/24 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.115.0/24 maxlen: 24
31.57.118.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.171.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.196.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.230.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.238.0/24 maxlen: 24
31.57.249.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.50.0/24 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.86.0/24 maxlen: 24
31.58.141.0/24 maxlen: 24
31.58.144.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.196.0/22 maxlen: 24
31.58.204.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.36.0/22 maxlen: 24
31.59.44.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 05 May 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:d2:7a:91:0a:ec:1e:06:57:d7:f7:f8:0a:5c:79:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 5 14:21:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d974c46724fbe22ffc203aee8230b4400674563f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:52:3a:56:84:3f:67:01:36:3a:e4:4d:18:be:
3f:b2:c1:ec:8f:d8:d7:cd:67:a9:52:0a:80:29:28:
7e:c9:e6:ad:d0:fa:79:fe:7e:fb:3e:9c:f5:8c:56:
fd:fd:1c:2c:d1:4a:32:a1:b9:cd:9d:d6:a7:70:32:
41:e4:ab:0a:b5:20:f0:e3:66:a0:ff:c6:c2:2b:e7:
2e:1d:e3:64:9e:41:b6:39:27:7b:44:d1:ab:58:52:
44:c2:cb:06:3e:d6:df:cb:1e:bc:38:36:5a:86:0e:
6a:91:94:ed:c6:07:6c:28:f0:a2:93:1d:7e:c7:4e:
c2:83:71:12:4f:4d:08:82:ed:de:4d:f0:fe:5d:26:
61:89:c4:e1:e4:e2:03:49:16:cb:28:54:5d:f0:a5:
5d:3d:22:dd:0d:4a:eb:6b:d6:28:ec:f5:e7:8f:40:
08:a9:96:6c:8e:d6:77:d3:df:0b:fe:6e:18:2f:46:
83:e4:eb:aa:c2:f8:c0:3f:bb:a6:cc:3b:d5:50:13:
af:fa:8c:f0:5a:4d:2d:cf:86:d4:55:52:01:e7:62:
94:c0:f0:c6:29:c6:63:0a:45:7a:b5:ef:f8:cd:71:
fd:d6:99:cd:fb:2b:ef:8e:c7:ef:74:31:c9:71:6f:
bf:08:1f:e4:a4:52:68:eb:ea:e6:97:73:ba:13:b5:
f4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:74:C4:67:24:FB:E2:2F:FC:20:3A:EE:82:30:B4:40:06:74:56:3F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2XTEZyT74i_8IDrugjC0QAZ0Vj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.48.0/24
31.56.57.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.176.0/20
31.56.200.0/22
31.56.208.0/21
31.56.220.0-31.56.231.255
31.56.236.0/22
31.57.10.0/24
31.57.36.0/23
31.57.104.0/21
31.57.115.0/24
31.57.118.0/24
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.188.255
31.57.192.0-31.57.196.255
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.230.0/24
31.57.232.0/22
31.57.238.0/24
31.57.249.0-31.57.255.255
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.84.0/22
31.58.141.0/24
31.58.144.0/24
31.58.152.0/22
31.58.172.0/22
31.58.196.0/22
31.58.204.0/22
31.58.220.0-31.58.227.255
31.59.36.0/22
31.59.44.0/22
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.151.255
31.59.160.0/20
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:08:2c:9d:56:4b:85:d4:f3:e4:3f:65:21:aa:a4:fb:fc:df:
a2:4d:68:42:5c:0b:01:64:09:2c:e2:2c:79:8d:f2:53:52:a6:
e3:89:2a:51:af:a5:07:9a:e3:50:d3:13:45:fa:64:ef:0c:0e:
cb:7b:ba:d1:69:0d:c7:c3:6f:39:80:cb:6b:e0:1f:dd:91:32:
ae:d0:11:64:dd:56:2c:fb:2b:8f:e0:a5:dd:8e:d9:e9:ab:d9:
bc:e7:a0:a2:03:6f:29:67:e4:c8:2e:73:f0:4c:ad:f6:61:b1:
b1:67:13:ef:dc:e1:26:7d:4a:b8:11:2e:2f:3d:58:26:ee:b1:
c9:36:16:2e:37:39:c6:f9:c9:5f:36:0d:fd:ac:34:98:9c:a3:
47:47:66:73:fe:72:1a:26:4c:d3:5c:c8:db:17:62:1a:48:d6:
65:f5:1c:86:0e:73:ab:3a:bb:a6:7e:f9:b1:2c:e8:77:c6:3a:
4a:b7:ee:12:40:8e:af:cd:d5:e9:17:1e:d5:8f:d3:d0:e4:20:
85:83:7e:12:bb:a4:48:4a:18:fb:33:d2:fe:6b:03:e1:58:e0:
40:9f:83:5d:77:d1:e5:ad:d2:83:46:c8:09:b4:e1:86:64:a5:
ee:b2:0d:6b:21:70:61:31:67:8c:51:c6:df:f9:c6:ef:8e:ac:
69:c1:2a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:42:38 2025 by rpki-client