Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CN3qJwQPZCaRYXaX4daLlnsESUY.roa
File: CN3qJwQPZCaRYXaX4daLlnsESUY.roa (raw, json)
Hash identifier: 8axU/OAD+N0Rt4otzuY1iAJCKs6P93MLpumLnKn5t+g=
Subject key identifier: 08:DD:EA:27:04:0F:64:26:91:61:76:97:E1:D6:8B:96:7B:04:49:46
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01945A291E0E8FC447DFEA5FD1D751F3FED3
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CN3qJwQPZCaRYXaX4daLlnsESUY.roa
Signing time: Sun 12 Jan 2025 10:57:11 +0000
ROA not before: Sun 12 Jan 2025 10:57:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.44.0/24 maxlen: 24
31.56.49.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.74.0/24 maxlen: 24
31.56.75.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.112.0/24 maxlen: 24
31.56.113.0/24 maxlen: 24
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.126.0/24 maxlen: 24
31.56.157.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.133.0/24 maxlen: 24
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.142.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.163.0/24 maxlen: 24
31.58.230.0/23 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.42.0/24 maxlen: 24
31.59.43.0/24 maxlen: 24
31.59.56.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.97.0/24 maxlen: 24
31.59.108.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.112.0/24 maxlen: 24
31.59.113.0/24 maxlen: 24
31.59.130.0/24 maxlen: 24
31.59.184.0/22 maxlen: 24
31.59.228.0/24 maxlen: 24
31.59.229.0/24 maxlen: 24
31.59.231.0/24 maxlen: 24
31.59.244.0/24 maxlen: 24
31.59.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 12 Jan 2025 18:27:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5a:29:1e:0e:8f:c4:47:df:ea:5f:d1:d7:51:f3:fe:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 12 10:57:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08ddea27040f642691617697e1d68b967b044946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:54:26:4b:2f:e4:4d:d0:2f:d2:ee:66:2e:0d:
ca:55:26:6e:76:4f:31:68:38:1c:99:58:16:25:a7:
32:8e:68:ff:e7:4d:8d:db:18:50:fe:ac:b8:64:cc:
92:50:bc:6c:f8:f5:c3:dd:a0:b3:eb:27:1e:78:b6:
3f:f0:20:c1:43:54:ba:25:b9:08:89:a2:c8:2b:3f:
1a:fb:dd:fa:c5:3f:5b:ba:ad:1c:5f:1b:db:31:d0:
49:a0:80:c0:b2:85:6e:48:f8:fb:48:81:dc:d2:14:
f7:40:8d:65:f6:dd:4d:0e:5b:63:26:81:f4:bd:63:
02:98:42:39:5d:85:cc:fb:e0:29:f4:a6:30:5f:ac:
8a:ba:1f:1b:48:57:1b:22:63:84:af:14:dc:e9:e7:
49:5b:55:5a:95:58:96:70:de:87:ca:72:0b:c6:cc:
f1:48:0f:6e:3c:bc:bc:22:5a:65:af:d7:5b:8f:94:
c8:e5:e6:2e:92:0e:d9:00:2f:06:f1:d0:6f:42:9f:
a0:15:ce:18:12:ef:b6:c1:a2:bf:53:78:c3:a4:49:
66:83:b3:1b:2d:d9:94:1e:0b:c6:64:98:bd:8c:97:
6e:a0:64:a1:35:bc:3e:36:3c:16:b7:a5:ea:64:eb:
57:1f:ff:16:0e:dd:3c:58:e9:03:41:ae:cf:89:70:
fd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:DD:EA:27:04:0F:64:26:91:61:76:97:E1:D6:8B:96:7B:04:49:46
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CN3qJwQPZCaRYXaX4daLlnsESUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0-31.56.44.255
31.56.49.0/24
31.56.57.0/24
31.56.74.0/23
31.56.89.0/24
31.56.104.0-31.56.115.255
31.56.118.0-31.56.123.255
31.56.126.0/24
31.56.157.0/24
31.56.200.0/22
31.57.104.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.176.0/21
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.34.0/23
31.58.142.0/24
31.58.152.0/22
31.58.163.0/24
31.58.230.0/23
31.59.41.0-31.59.43.255
31.59.56.0/23
31.59.96.0/22
31.59.108.0/24
31.59.112.0/22
31.59.130.0/24
31.59.184.0/22
31.59.228.0/23
31.59.231.0/24
31.59.244.0/23
Signature Algorithm: sha256WithRSAEncryption
62:ef:4a:e4:ec:50:e3:54:8f:33:b6:ac:02:50:fc:b9:ae:87:
e3:0e:3c:72:10:aa:40:6c:53:69:94:54:91:d0:4b:c2:d0:d6:
fb:24:0c:dd:3c:cd:cb:ad:f6:7d:2b:d5:52:f8:95:7f:03:f3:
19:85:2e:88:bd:be:74:69:98:10:38:2f:e2:b6:f2:87:af:b1:
1f:27:13:a2:4d:6c:79:c1:7c:8e:03:29:3e:53:dc:68:cd:e8:
47:c9:a6:d4:e8:b4:3f:cd:15:2d:16:dd:c0:51:aa:24:4e:ad:
be:f4:1b:bb:61:03:5b:30:e6:1c:ca:15:40:02:cb:5e:d3:4d:
b1:89:12:4d:93:a1:a8:c4:01:4d:d7:3e:21:0f:1c:8b:36:e4:
3f:45:66:e9:67:4d:fd:a8:e2:40:69:a3:f9:b5:06:f6:1e:b3:
cc:06:42:62:6b:11:b7:23:33:c0:9c:af:4e:7c:27:ee:e3:97:
b6:87:a7:fe:f1:52:a8:92:82:46:e5:2c:1f:f6:c0:32:53:a8:
d1:81:2b:56:88:ef:fc:38:16:89:cb:49:a1:d3:3c:de:bb:10:
3e:96:c1:d1:5c:54:4f:4d:72:8b:9e:1a:fe:ee:79:7e:2c:ae:
ed:31:02:4a:0d:c3:f3:46:f4:fe:9d:ea:b2:47:81:99:90:35:
11:ae:86:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:58:17 2025 by rpki-client