Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Oj7dofTjGLWrttcwSwgYpysVslw.roa
File: Oj7dofTjGLWrttcwSwgYpysVslw.roa (raw, json)
Hash identifier: FSs8aCaR8XJsSfGMTxZj8TqQBV0VYWnwerogc8mJTPA=
Subject key identifier: 3A:3E:DD:A1:F4:E3:18:B5:AB:B6:D7:30:4B:08:18:A7:2B:15:B2:5C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01965D53BCA42E3A0586602105BDBFC5CAB9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Oj7dofTjGLWrttcwSwgYpysVslw.roa
Signing time: Tue 22 Apr 2025 11:48:10 +0000
ROA not before: Tue 22 Apr 2025 11:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48678
IP address blocks: 31.56.16.0/22 maxlen: 24
31.57.16.0/21 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.135.0/24 maxlen: 24
31.57.168.0/23 maxlen: 24
31.57.184.0/23 maxlen: 24
31.57.208.0/22 maxlen: 22
31.57.216.0/23 maxlen: 24
31.57.250.0/23 maxlen: 24
31.58.76.0/22 maxlen: 24
31.58.92.0/22 maxlen: 24
31.58.176.0/22 maxlen: 24
31.58.200.0/22 maxlen: 24
31.58.216.0/22 maxlen: 24
31.58.235.0/24 maxlen: 24
31.58.236.0/24 maxlen: 24
31.58.240.0/22 maxlen: 24
31.58.244.0/24 maxlen: 24
31.58.247.0/24 maxlen: 24
31.58.251.0/24 maxlen: 24
31.58.252.0/22 maxlen: 24
31.59.64.0/22 maxlen: 24
31.59.80.0/22 maxlen: 24
31.59.124.0/22 maxlen: 24
31.59.140.0/22 maxlen: 24
31.59.148.0/22 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.160.0/22 maxlen: 24
31.59.164.0/23 maxlen: 24
31.59.176.0/21 maxlen: 24
31.59.188.0/22 maxlen: 24
31.59.192.0/22 maxlen: 24
31.59.216.0/22 maxlen: 24
217.60.16.0/21 maxlen: 24
217.60.28.0/22 maxlen: 24
217.60.40.0/22 maxlen: 24
217.60.64.0/18 maxlen: 24
217.60.187.0/24 maxlen: 24
217.60.196.0/23 maxlen: 24
217.60.244.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Apr 2025 12:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:53:bc:a4:2e:3a:05:86:60:21:05:bd:bf:c5:ca:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 22 11:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a3edda1f4e318b5abb6d7304b0818a72b15b25c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:96:7d:49:92:a1:7a:4a:27:c3:bb:cd:2e:53:
11:dc:46:ac:96:8a:12:57:64:c9:fa:ba:2c:72:f7:
d8:dc:5a:6a:9c:c7:f4:48:e3:8d:69:1f:7f:fd:02:
5d:a9:f8:53:f3:61:03:e1:41:7e:05:05:a6:53:85:
8e:81:99:3b:c3:38:ef:10:5c:a6:5b:6b:8a:8a:fb:
69:33:7c:fb:fa:98:9e:3f:9d:c2:bd:91:a0:3c:f4:
c5:2f:58:e5:ea:51:2f:88:6e:a8:b6:42:57:8c:97:
9d:ca:35:78:22:70:2c:13:2d:a0:2b:f9:1f:f1:12:
62:5f:e2:54:d4:49:d1:1f:87:51:7a:de:11:9b:5a:
05:eb:13:8b:97:14:14:01:f7:57:bd:ea:0e:fe:24:
bc:19:97:11:3e:4f:30:76:4c:e6:1c:eb:98:4c:f0:
90:95:24:d4:b2:f5:c6:d5:27:fa:a6:de:2c:c7:25:
94:d4:ea:56:97:27:fa:ba:84:2c:42:39:0e:33:f6:
04:df:20:6a:37:5a:7b:62:9d:1c:b4:ca:0d:c2:d6:
f7:f0:44:6b:96:35:1e:fb:7d:a9:ea:6a:f3:b8:7e:
12:aa:34:0e:28:24:f6:93:74:d6:cc:44:15:86:7f:
03:d3:8f:67:76:a8:b5:5b:b2:3a:b6:c2:6a:8b:4d:
6e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:3E:DD:A1:F4:E3:18:B5:AB:B6:D7:30:4B:08:18:A7:2B:15:B2:5C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Oj7dofTjGLWrttcwSwgYpysVslw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.16.0/22
31.57.16.0/21
31.57.36.0/23
31.57.135.0/24
31.57.168.0/23
31.57.184.0/23
31.57.208.0/22
31.57.216.0/23
31.57.250.0/23
31.58.76.0/22
31.58.92.0/22
31.58.176.0/22
31.58.200.0/22
31.58.216.0/22
31.58.235.0-31.58.236.255
31.58.240.0-31.58.244.255
31.58.247.0/24
31.58.251.0-31.58.255.255
31.59.64.0/22
31.59.80.0/22
31.59.124.0/22
31.59.140.0/22
31.59.148.0-31.59.165.255
31.59.176.0/21
31.59.188.0-31.59.195.255
31.59.216.0/22
217.60.16.0/21
217.60.28.0/22
217.60.40.0/22
217.60.64.0/18
217.60.187.0/24
217.60.196.0/23
217.60.244.0/23
Signature Algorithm: sha256WithRSAEncryption
66:d0:c8:93:e7:25:70:83:84:14:2f:fb:7e:3e:6e:71:31:b9:
44:3e:6c:89:a1:ad:50:ed:7f:b1:56:38:34:d9:d8:83:fc:ae:
07:16:4a:58:a7:9d:b4:96:d2:02:bc:51:1e:b2:15:25:65:f9:
2d:51:35:5f:8c:58:d7:28:be:ee:74:27:ca:46:59:b8:58:20:
34:d3:a5:50:52:b4:59:66:d2:ee:ea:fb:cd:9d:f2:05:3d:ff:
7e:1f:41:c0:73:44:fa:23:32:a6:52:c4:43:af:75:a4:b9:4b:
0d:f4:f6:86:82:50:47:99:ef:14:7d:b1:ae:68:c4:c7:07:e5:
70:16:97:04:fc:6a:cb:66:f5:5a:aa:c1:a6:ea:ad:d2:cc:fa:
f2:7b:bc:c8:14:9a:b1:64:00:15:b4:22:a6:c3:04:95:48:49:
83:c2:1b:36:cc:11:9d:e3:27:60:dc:cd:f5:96:29:e0:2b:e9:
0b:12:de:3e:8d:ac:1c:45:84:e8:c2:c5:7b:9d:78:c8:95:f1:
d3:c0:a8:1b:58:eb:69:7f:32:c1:ac:11:eb:65:4b:d9:77:91:
0d:15:cd:70:3a:f8:85:b5:0d:a4:96:e0:d1:05:68:89:dc:a6:
0e:13:85:28:1c:6d:ee:c3:b3:c2:ba:58:93:fd:28:2e:8c:93:
29:ab:80:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 16:38:33 2025 by rpki-client