Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/aYgntxTGUeDMn9FMYsMaI4CkQrU.roa
File: aYgntxTGUeDMn9FMYsMaI4CkQrU.roa (raw, json)
Hash identifier: pIzPK+vmJ23Zxk+H3lCAtzvXpxW37Jhiet2dSWnGisE=
Subject key identifier: 69:88:27:B7:14:C6:51:E0:CC:9F:D1:4C:62:C3:1A:23:80:A4:42:B5
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01969A35ABA359262179C00D6305CB72A913
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/aYgntxTGUeDMn9FMYsMaI4CkQrU.roa
Signing time: Sun 04 May 2025 07:32:10 +0000
ROA not before: Sun 04 May 2025 07:32:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 31.56.113.0/24 maxlen: 24
31.56.154.0/24 maxlen: 24
31.56.158.0/24 maxlen: 24
31.56.159.0/24 maxlen: 24
31.56.168.0/24 maxlen: 24
31.56.169.0/24 maxlen: 24
31.56.170.0/24 maxlen: 24
31.56.171.0/24 maxlen: 24
31.56.174.0/24 maxlen: 24
31.56.175.0/24 maxlen: 24
31.57.24.0/22 maxlen: 24
31.57.28.0/22 maxlen: 24
31.57.48.0/22 maxlen: 24
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.105.0/24 maxlen: 24
31.57.106.0/24 maxlen: 24
31.57.107.0/24 maxlen: 24
31.57.108.0/24 maxlen: 24
31.57.109.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.212.0/22 maxlen: 24
217.60.0.0/21 maxlen: 24
217.60.0.0/24 maxlen: 24
217.60.1.0/24 maxlen: 24
217.60.2.0/24 maxlen: 24
217.60.4.0/24 maxlen: 24
217.60.5.0/24 maxlen: 24
217.60.6.0/24 maxlen: 24
217.60.12.0/22 maxlen: 24
217.60.12.0/24 maxlen: 24
217.60.13.0/24 maxlen: 24
217.60.14.0/24 maxlen: 24
217.60.24.0/22 maxlen: 24
217.60.36.0/22 maxlen: 24
217.60.44.0/22 maxlen: 24
217.60.56.0/24 maxlen: 24
217.60.57.0/24 maxlen: 24
217.60.58.0/24 maxlen: 24
217.60.59.0/24 maxlen: 24
217.60.60.0/22 maxlen: 24
217.60.60.0/24 maxlen: 24
217.60.61.0/24 maxlen: 24
217.60.62.0/24 maxlen: 24
217.60.63.0/24 maxlen: 24
217.60.188.0/22 maxlen: 24
217.60.192.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 May 2025 07:51:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9a:35:ab:a3:59:26:21:79:c0:0d:63:05:cb:72:a9:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 4 07:32:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=698827b714c651e0cc9fd14c62c31a2380a442b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:75:f1:06:33:8b:5e:15:2b:74:50:94:02:60:
b7:27:90:0e:f3:77:64:60:2d:65:d2:30:ba:28:10:
20:22:00:b8:32:fd:ee:f9:50:17:6a:eb:26:b0:fc:
72:e5:53:1b:2e:36:7e:4b:49:4d:d0:1c:1e:06:04:
96:47:60:7a:c3:e9:f0:cb:0c:49:c6:b9:d3:f9:6b:
50:50:ee:3d:4c:6b:36:66:37:29:d2:ec:48:48:f9:
99:e9:b6:f1:97:d1:4c:84:f3:e0:b5:55:0d:69:ea:
73:ad:9e:57:85:e0:15:b2:bc:af:f5:5a:9d:ad:fb:
90:55:cc:83:00:5f:a9:9d:ec:58:1b:fc:a6:9f:ea:
cf:3f:a5:30:39:ea:ed:eb:ab:82:8b:57:1a:6e:88:
97:2a:aa:ac:2a:5d:8b:e0:1e:03:f8:8b:39:93:e0:
a6:f0:93:cf:b7:b3:eb:d9:39:a7:56:f9:e3:26:b1:
cc:22:a2:6c:5f:eb:3b:c3:fe:f8:b2:c6:6e:5e:6e:
7e:76:47:09:38:e2:60:c7:7b:86:e5:73:fd:5b:be:
d4:f7:54:3e:50:1e:67:fe:f5:17:f8:75:8e:0c:38:
f2:32:9f:74:84:48:59:c5:d8:52:20:a2:a3:37:36:
2b:10:66:2d:f4:f4:f5:25:ab:51:fe:11:bd:77:a5:
c0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:88:27:B7:14:C6:51:E0:CC:9F:D1:4C:62:C3:1A:23:80:A4:42:B5
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/aYgntxTGUeDMn9FMYsMaI4CkQrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.113.0/24
31.56.154.0/24
31.56.158.0/23
31.56.168.0/22
31.56.174.0/23
31.57.24.0/21
31.57.48.0/20
31.57.105.0-31.57.109.255
31.58.34.0/23
31.58.212.0/22
217.60.0.0/21
217.60.12.0/22
217.60.24.0/22
217.60.36.0/22
217.60.44.0/22
217.60.56.0/21
217.60.188.0-217.60.195.255
Signature Algorithm: sha256WithRSAEncryption
b7:90:6d:2d:2a:7b:b5:c0:6c:76:0c:b6:9e:c3:bc:0c:93:33:
3d:37:9b:b3:bb:91:f8:db:d3:49:8e:85:11:64:20:73:ad:03:
1e:ae:55:47:5d:00:45:63:b4:65:59:5f:1b:cf:8f:97:14:b5:
ac:7a:ba:98:e6:8d:e4:f6:6e:66:bd:7c:af:b3:4f:31:c3:c4:
fd:49:0a:06:92:a0:5f:dd:ac:07:0a:4b:d2:b6:0b:75:01:c1:
34:41:f7:e0:59:b4:64:6a:d3:32:a0:4c:58:19:53:00:b6:67:
f0:c8:67:fb:84:7d:27:cf:96:1a:55:88:33:36:1a:9d:4a:c5:
5b:7b:31:2b:06:09:a5:49:fc:f0:68:f2:b9:d4:19:9d:40:e3:
e6:bf:d6:8e:96:61:af:a8:ef:66:26:c4:d9:f4:e8:3c:e4:09:
b1:dc:59:0a:8c:af:b6:90:87:d9:70:76:2f:8a:2f:bb:d4:7d:
5e:8f:06:b8:f9:74:41:9d:0b:ad:2e:6b:3e:39:06:89:8f:55:
8e:95:99:0b:0d:78:0f:80:dc:63:85:e1:04:ae:16:f0:81:0b:
35:28:de:ee:cc:cb:a5:8b:f6:f9:36:34:41:de:5b:51:ef:0d:
06:5f:ce:22:49:e3:71:1c:26:1f:6f:90:76:29:fd:e9:e8:7c:
b8:f3:05:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:23:40 2025 by rpki-client