Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YFDcFI0QQGNXffw3Jop01mYyFf4.roa
File: YFDcFI0QQGNXffw3Jop01mYyFf4.roa (raw, json)
Hash identifier: 31xCtUllFvyma9lkfcyx/J1zlxlyOCUdIt2swuG32L8=
Subject key identifier: 60:50:DC:14:8D:10:40:63:57:7D:FC:37:26:8A:74:D6:66:32:15:FE
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01969A9D1F7269A2255A0AC741AA3CCCCA07
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YFDcFI0QQGNXffw3Jop01mYyFf4.roa
Signing time: Sun 04 May 2025 09:25:10 +0000
ROA not before: Sun 04 May 2025 09:25:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.48.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.176.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.184.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/22 maxlen: 24
31.56.224.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.57.10.0/24 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.115.0/24 maxlen: 24
31.57.118.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.171.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.196.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.230.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.238.0/24 maxlen: 24
31.57.249.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.50.0/24 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.86.0/24 maxlen: 24
31.58.141.0/24 maxlen: 24
31.58.144.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.196.0/22 maxlen: 24
31.58.204.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.36.0/22 maxlen: 24
31.59.44.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 05 May 2025 14:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9a:9d:1f:72:69:a2:25:5a:0a:c7:41:aa:3c:cc:ca:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 4 09:25:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6050dc148d104063577dfc37268a74d6663215fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e8:56:0e:19:30:38:8f:7e:cc:fc:6c:5d:b6:
90:ce:1f:d4:13:f6:da:73:34:08:45:19:7d:b3:aa:
1c:a3:34:b0:dc:ee:86:15:a4:c8:f0:f3:56:25:89:
c2:cd:37:8e:cf:7b:49:af:04:d6:a1:ad:6b:a9:84:
f9:60:c0:4c:51:22:64:ee:6a:1d:52:7c:21:78:0f:
05:c7:6d:e0:ab:71:f3:88:91:5c:e3:20:d4:7f:df:
85:8f:ea:8f:f8:18:45:ba:1d:4d:1d:4f:26:da:16:
23:13:07:c2:68:91:c2:6d:44:b9:18:c0:fa:d8:a3:
7b:53:e2:1a:c0:1d:1a:5b:d2:f6:c1:22:9d:d3:da:
ea:2c:f8:88:8a:e8:97:dc:86:01:65:f2:20:44:a5:
ee:c0:26:23:74:02:20:de:2f:6f:ae:eb:09:6e:5c:
a5:ce:2a:34:54:3b:6b:c3:12:d4:f0:59:ea:d7:e9:
5f:51:fc:34:6f:8c:ea:2d:5f:8d:e5:3a:5b:00:f7:
ec:22:a4:5e:f5:60:72:a9:6a:84:31:1b:fb:ab:f1:
74:3f:ba:8a:76:cd:28:cd:90:29:3f:6f:ac:b1:fd:
54:95:26:73:79:1b:e3:42:77:b2:3c:c9:8b:5f:0b:
4f:d6:8a:e9:c8:6c:26:af:f2:da:86:1b:28:2b:f0:
78:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:50:DC:14:8D:10:40:63:57:7D:FC:37:26:8A:74:D6:66:32:15:FE
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YFDcFI0QQGNXffw3Jop01mYyFf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.48.0/24
31.56.57.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.176.0/20
31.56.200.0/22
31.56.208.0/21
31.56.220.0-31.56.231.255
31.56.236.0/22
31.57.10.0/24
31.57.36.0/23
31.57.104.0/21
31.57.115.0/24
31.57.118.0/24
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.188.255
31.57.192.0-31.57.196.255
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.230.0/24
31.57.232.0/22
31.57.238.0/24
31.57.249.0-31.57.255.255
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.84.0/22
31.58.141.0/24
31.58.144.0/24
31.58.152.0/22
31.58.172.0/22
31.58.196.0/22
31.58.204.0/22
31.58.220.0-31.58.227.255
31.59.36.0/22
31.59.44.0/22
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.151.255
31.59.160.0/20
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:49:7d:97:18:bf:55:00:f3:05:4f:f9:12:30:af:3c:76:a5:
e5:7b:80:cf:7a:68:3c:0a:6e:7c:d8:46:3a:37:31:5a:6f:d1:
67:89:1d:03:cf:77:5d:fa:53:26:df:c9:84:de:07:56:4c:79:
48:0a:c5:08:e3:a4:8a:4d:e8:8a:38:62:16:b4:c1:68:5a:af:
43:58:16:1e:34:b2:28:d8:71:7a:8c:17:c7:7f:53:05:18:d1:
3a:51:6a:11:3b:c6:6d:e8:de:4c:f4:bc:86:f4:58:89:e2:b6:
c4:53:28:fb:67:24:7f:6e:48:9f:f3:cd:68:2a:51:1c:43:af:
0b:e8:4a:07:52:fa:ee:21:20:db:88:61:d2:74:24:a9:53:45:
8c:fe:2c:14:12:5a:fc:39:43:cd:52:c1:a4:22:45:44:d1:e1:
a6:27:02:5f:b5:b8:9b:80:09:93:23:df:3c:40:65:9d:09:45:
99:a5:8e:17:07:7d:82:4e:fa:96:10:24:f8:4e:a1:b0:6e:ec:
22:18:71:42:1b:bf:42:f3:dd:32:9e:5e:f2:b2:3a:06:4a:87:
f7:07:c1:ed:de:18:c6:44:b9:e4:5a:51:b3:f7:c0:e2:65:68:
b1:13:85:39:64:8e:dd:ac:0a:03:db:f6:ec:38:c2:e3:48:2d:
8e:86:b6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:43:18 2025 by rpki-client