Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/K5AfSPED9Sns2kU3zF94EaUn0_Q.roa
File: K5AfSPED9Sns2kU3zF94EaUn0_Q.roa (raw, json)
Hash identifier: Vyc/tEJ3RH3cWWs0+nU3kVbZb+8jynxnJgrEYqx5pno=
Subject key identifier: 2B:90:1F:48:F1:03:F5:29:EC:DA:45:37:CC:5F:78:11:A5:27:D3:F4
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01962A943BF48CC23C6BFECC61476537F05D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/K5AfSPED9Sns2kU3zF94EaUn0_Q.roa
Signing time: Sat 12 Apr 2025 15:17:59 +0000
ROA not before: Sat 12 Apr 2025 15:17:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.23.0/24 maxlen: 24
31.56.24.0/24 maxlen: 24
31.56.32.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.67.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.200.0/24 maxlen: 24
31.56.202.0/24 maxlen: 24
31.57.103.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.113.0/24 maxlen: 24
31.57.114.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.143.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.168.0/23 maxlen: 23
31.57.176.0/21 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.196.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.208.0/22 maxlen: 22
31.57.215.0/24 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.221.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.230.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.238.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.76.0/24 maxlen: 24
31.58.77.0/24 maxlen: 24
31.58.78.0/24 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.92.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.71.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 13 Apr 2025 14:15:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:94:3b:f4:8c:c2:3c:6b:fe:cc:61:47:65:37:f0:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 12 15:17:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b901f48f103f529ecda4537cc5f7811a527d3f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7c:86:8c:13:a6:d3:1e:1c:55:95:82:a7:59:
a6:3c:e7:6b:4d:b2:9d:b8:78:90:5f:d7:4c:30:35:
0e:37:39:cf:71:78:d5:28:38:62:61:f6:f7:f3:16:
b9:df:8b:98:47:5b:95:0c:36:93:80:22:b6:50:3c:
6a:2b:78:ae:dd:7e:74:86:54:1e:23:46:f2:ba:eb:
97:78:a1:fa:fc:ca:6b:ba:89:75:a0:dd:92:97:d8:
67:8b:db:b0:61:55:b2:f1:41:2d:84:48:ac:20:58:
d2:17:b8:f5:67:a4:30:b4:9f:0a:85:63:ab:b0:eb:
8d:de:1e:4c:a2:2d:6f:ac:23:dd:09:d0:f1:bc:54:
e5:b0:bd:35:8c:1e:b8:c0:06:8d:02:31:70:ac:f1:
39:ef:99:42:33:fc:68:d0:0a:31:54:17:79:02:75:
58:dd:6b:27:ee:81:ce:a1:4b:c0:75:64:c8:cd:21:
7d:17:f8:65:4b:79:7c:f6:7d:65:65:ad:83:8e:e9:
25:54:32:c6:aa:88:98:63:c9:94:4a:98:88:c8:df:
14:40:db:5d:e9:63:56:7a:a2:f0:0c:8d:06:d7:b7:
20:c6:36:30:84:f0:46:cd:6b:58:c7:f2:58:0c:b4:
2a:82:fb:85:ce:c9:50:72:c7:56:7d:ae:3c:b6:90:
c3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:90:1F:48:F1:03:F5:29:EC:DA:45:37:CC:5F:78:11:A5:27:D3:F4
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/K5AfSPED9Sns2kU3zF94EaUn0_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.23.0-31.56.24.255
31.56.32.0/24
31.56.57.0/24
31.56.67.0/24
31.56.71.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.103.0-31.57.111.255
31.57.113.0-31.57.114.255
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0-31.57.196.255
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.230.0/24
31.57.232.0/22
31.57.238.0/24
31.57.252.0/22
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.76.0-31.58.78.255
31.58.84.0/22
31.58.92.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.71.0/24
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.175.255
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
69:63:5d:ed:fd:f5:bd:a6:45:d7:f5:7c:94:ad:ac:71:7f:6c:
a3:49:33:0e:b9:bf:34:c4:84:4f:27:62:d1:a9:32:17:77:57:
f4:b7:1d:dd:b0:7d:2f:88:ff:c2:b5:0e:c0:23:a3:ca:ca:4a:
83:60:72:7c:39:95:da:49:af:65:97:fb:55:d5:fd:ce:1a:74:
2b:7c:49:36:ed:3b:96:b4:cb:33:99:18:23:47:b3:84:41:f6:
05:2b:29:b1:52:0b:c5:7f:40:c7:50:63:7a:f1:e0:1e:32:78:
2f:25:ec:3d:de:1b:c4:7a:e6:a0:66:ac:d9:74:33:22:a1:92:
96:3a:4d:94:a2:ad:80:9c:89:c2:75:c0:38:5b:4f:95:b1:6f:
be:cb:db:f1:94:92:9d:8e:91:9f:e3:0b:5a:cd:fb:69:9b:c2:
23:f6:51:f9:67:ed:f0:8a:78:d4:d2:71:e8:be:3e:67:ae:f4:
87:34:d9:c2:17:45:bd:73:d4:14:22:76:bc:ef:22:44:e3:7d:
ca:ae:86:06:18:25:3f:4f:f0:1e:82:50:dd:a1:5d:d8:e5:4d:
dc:0b:9e:82:ec:64:47:9f:9a:30:5e:2b:a3:69:6c:cf:e2:f3:
84:46:be:90:f8:a8:a2:ab:94:c2:33:4a:a2:49:64:e0:18:f6:
cd:1b:2f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:36:09 2025 by rpki-client