Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/T0Y7juYBLlS5MlkLUxEdosncLHE.roa
File: T0Y7juYBLlS5MlkLUxEdosncLHE.roa (raw, json)
Hash identifier: f5WawsuPM7Fz1ZkEPc0yOeBfRM1xCdy/4X8TDFBhB2g=
Subject key identifier: 4F:46:3B:8E:E6:01:2E:54:B9:32:59:0B:53:11:1D:A2:C9:DC:2C:71
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196B36DF9C03D26172E1CAFBA5E219D3E38
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/T0Y7juYBLlS5MlkLUxEdosncLHE.roa
Signing time: Fri 09 May 2025 05:04:11 +0000
ROA not before: Fri 09 May 2025 05:04:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.48.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.74.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/22 maxlen: 24
31.56.224.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.57.10.0/24 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.118.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.171.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.196.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.230.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.238.0/24 maxlen: 24
31.57.249.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.50.0/24 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.86.0/24 maxlen: 24
31.58.141.0/24 maxlen: 24
31.58.144.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.120.0/24 maxlen: 24
31.59.121.0/24 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 09 May 2025 14:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:6d:f9:c0:3d:26:17:2e:1c:af:ba:5e:21:9d:3e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 9 05:04:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f463b8ee6012e54b932590b53111da2c9dc2c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ca:cd:b4:11:12:0b:88:2d:06:55:33:82:6a:
27:8c:72:3e:9d:87:b5:d6:7b:15:4c:2c:68:19:6e:
93:4c:4b:2d:4d:aa:26:c8:98:a3:81:8b:39:5b:ab:
e9:77:bf:c6:82:2e:a1:a8:5a:3b:1a:98:87:3b:17:
19:b0:46:58:1b:2d:6a:9c:b4:a4:5f:0e:f0:c8:d1:
da:18:2e:6b:8f:f6:e9:34:9b:e6:e4:80:a5:91:57:
9a:69:60:81:a6:97:d3:e9:53:4f:b7:9c:a9:b7:72:
b6:93:ec:a6:87:77:90:30:ec:aa:c4:e2:ae:0a:26:
0f:1f:6f:8b:17:f7:0f:05:66:ed:92:2a:3c:0a:2a:
9c:98:12:56:37:80:0e:4a:c5:0c:e0:cc:dd:63:31:
c1:15:da:f9:40:9c:61:6a:06:97:00:e0:68:6b:77:
3f:38:a4:d8:57:cc:a1:cc:10:43:46:79:4e:22:f0:
79:3a:ad:49:9d:59:1e:15:d3:43:f9:4c:42:b6:15:
4d:2c:10:12:00:5e:52:52:13:4a:9d:6f:ec:dd:60:
3e:a7:71:d8:bb:71:fa:c1:52:26:f5:f9:25:5c:5f:
50:0d:75:fe:b5:b7:8c:2b:4b:dc:ab:0e:28:62:b3:
39:c3:2a:c6:19:25:ab:3c:03:66:49:70:00:fc:bb:
79:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:46:3B:8E:E6:01:2E:54:B9:32:59:0B:53:11:1D:A2:C9:DC:2C:71
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/T0Y7juYBLlS5MlkLUxEdosncLHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.48.0/24
31.56.57.0/24
31.56.74.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0/22
31.56.200.0/22
31.56.208.0/21
31.56.220.0-31.56.231.255
31.56.236.0/22
31.57.10.0/24
31.57.36.0/23
31.57.104.0/21
31.57.118.0/24
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.188.255
31.57.192.0-31.57.196.255
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.230.0/24
31.57.232.0/22
31.57.238.0/24
31.57.249.0-31.57.255.255
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.84.0/22
31.58.141.0/24
31.58.144.0/24
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.151.255
31.59.160.0/20
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
08:16:3c:09:fe:cd:08:cb:9a:22:91:d3:7a:4d:2a:a1:8d:52:
11:59:c5:7c:d4:df:d9:7b:f5:50:98:f0:30:d7:e4:a1:39:04:
5c:dc:6d:39:ea:95:83:f0:a0:0c:05:0e:de:06:fb:75:2d:9d:
a0:13:69:50:e4:03:82:a8:1d:74:2c:72:37:a5:94:48:3f:ea:
9b:e2:68:d0:55:26:87:32:34:46:b7:c9:f9:08:cb:6a:a0:b8:
55:e5:ba:e9:dd:12:d4:d4:fa:b7:f3:32:83:2e:74:6a:9d:98:
b2:1e:f0:78:a1:55:ce:f7:3c:96:03:b5:e9:dd:5b:74:12:2f:
fe:67:9a:6b:19:de:2d:9c:83:bf:61:81:b1:0b:ab:2a:81:a0:
f2:53:47:7b:40:82:a6:34:a9:ba:b1:9a:95:36:de:7e:ba:aa:
cf:09:20:05:b6:da:8f:df:71:27:c9:43:ec:15:c1:38:7d:7a:
b1:0d:f9:79:54:af:c2:7a:46:d7:7a:18:ac:d8:d4:65:ae:ee:
c9:dd:aa:e5:96:6a:90:47:4c:a6:6f:82:5d:b2:b7:04:72:e0:
27:00:6a:47:80:21:48:1c:45:fe:bf:b1:e9:3c:e8:d6:36:f8:
65:0d:b5:23:ea:d9:a7:96:55:2a:6b:f4:65:3a:54:9d:dd:35:
e4:1f:01:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 17:50:40 2025 by rpki-client