Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WhbhlEgZl9ShOQF3yrv9esA1tOY.roa
File: WhbhlEgZl9ShOQF3yrv9esA1tOY.roa (raw, json)
Hash identifier: 65CrooD6Hg1j+v48rTjIqqHo8QtdG9uvrNYt7cZhNJE=
Subject key identifier: 5A:16:E1:94:48:19:97:D4:A1:39:01:77:CA:BB:FD:7A:C0:35:B4:E6
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194DF35D46A451A92C6B2CA955B09564A05
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WhbhlEgZl9ShOQF3yrv9esA1tOY.roa
Signing time: Fri 07 Feb 2025 07:00:34 +0000
ROA not before: Fri 07 Feb 2025 07:00:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.129.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.151.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.191.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.197.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.33.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.163.0/24 maxlen: 24
31.58.230.0/23 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.42.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.108.0/24 maxlen: 24
31.59.109.0/24 maxlen: 24
31.59.110.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
31.59.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Feb 2025 19:39:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:df:35:d4:6a:45:1a:92:c6:b2:ca:95:5b:09:56:4a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 7 07:00:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a16e194481997d4a1390177cabbfd7ac035b4e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:25:ce:24:f7:11:e0:5a:19:18:8a:cd:5d:0e:
65:b6:f5:66:64:ff:6e:bd:a6:71:51:d8:eb:69:83:
4b:6f:32:0c:df:6a:4f:97:8a:63:75:fe:87:48:03:
4e:63:7f:9f:56:d6:f1:3c:97:61:99:da:fa:bf:f1:
4b:3b:9e:b0:32:24:84:8c:1d:28:2e:5f:19:33:6f:
55:62:77:3f:dd:af:b1:74:53:58:e0:7c:ba:7b:d7:
4d:50:6d:de:c1:15:e8:46:86:8c:43:1b:82:bc:f5:
ae:a5:53:37:8c:bd:4b:af:66:1e:ec:dc:58:35:de:
8c:37:c6:aa:db:e7:fc:e5:c0:df:3a:d2:b5:c9:b3:
cc:a0:79:51:c7:d8:2f:b3:7e:60:c2:cf:ad:66:d3:
4c:ca:5d:c3:ed:9f:98:a1:4a:35:a0:af:53:03:1f:
36:19:2c:41:05:0a:a0:e5:f2:89:4d:35:2e:17:13:
fe:94:d6:30:16:f2:16:ac:e0:3a:5d:2d:40:27:a6:
19:b4:90:58:a8:87:53:b7:13:1a:c6:58:fc:37:3d:
d9:2d:dc:98:8e:e2:e4:f9:37:e5:88:14:72:4d:34:
29:9b:3c:3d:b5:03:b4:e5:f9:da:13:07:d3:7d:f7:
35:ba:2e:0b:de:c5:03:34:16:96:8d:d6:33:14:ab:
6e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:16:E1:94:48:19:97:D4:A1:39:01:77:CA:BB:FD:7A:C0:35:B4:E6
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WhbhlEgZl9ShOQF3yrv9esA1tOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.104.0/21
31.57.129.0/24
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.151.0/24
31.57.176.0/21
31.57.191.0-31.57.195.255
31.57.197.0/24
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.33.0-31.58.35.255
31.58.152.0/22
31.58.163.0/24
31.58.230.0/23
31.59.41.0-31.59.42.255
31.59.57.0/24
31.59.96.0/22
31.59.108.0-31.59.110.255
31.59.112.0/22
31.59.184.0/22
Signature Algorithm: sha256WithRSAEncryption
be:82:0e:2b:a9:fe:8e:9c:a5:e4:e1:8c:ff:17:d1:f2:7b:5e:
72:17:70:01:bf:d3:88:63:41:ca:f7:a7:89:d2:fb:5a:da:54:
b2:04:46:d9:19:80:7c:83:cd:4f:79:1d:e3:5a:fa:ea:7d:8e:
cb:82:4a:01:5e:f4:08:19:06:82:91:40:20:7f:91:cc:6c:70:
85:c6:b6:6c:50:38:d4:a0:88:4c:19:48:a1:1c:be:08:e5:d4:
83:62:45:69:3d:70:bf:c5:96:2c:96:ff:82:9b:75:fb:b1:d4:
ca:4d:d8:85:52:9d:85:6e:b8:50:eb:e4:82:18:fc:26:8a:39:
10:0c:52:58:da:5f:d8:0c:d6:71:3e:a4:31:3f:4e:72:a1:cb:
eb:1e:84:0f:c7:a5:62:f2:b0:a3:2c:36:a8:5e:e2:ad:d2:0f:
ca:b8:24:f8:f7:fa:9c:b9:c2:08:e3:a8:6f:30:cc:d3:6c:0c:
2b:19:73:12:a8:a6:ce:de:d6:21:c5:dc:1c:49:db:71:34:01:
d3:12:f0:d1:98:29:c1:1e:38:c1:fe:21:71:28:59:42:a7:94:
09:7e:9b:77:3a:8d:08:71:ed:8d:98:f4:45:23:a4:02:6c:31:
ed:0a:a3:80:d5:f2:e9:d6:81:b8:e8:ba:c6:5f:7f:fc:7c:85:
dd:a0:52:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:16:17 2025 by rpki-client