Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bPSdQR_0wbR8bsTzIKTH9dh2Hy8.roa
File: bPSdQR_0wbR8bsTzIKTH9dh2Hy8.roa (raw, json)
Hash identifier: 3z/Nv/XHY3RIH2QD9+19YGfTpdHPpFT0WO1XSVaByXA=
Subject key identifier: 6C:F4:9D:41:1F:F4:C1:B4:7C:6E:C4:F3:20:A4:C7:F5:D8:76:1F:2F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194D555A2A6606746665A1950859FA0AB7A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bPSdQR_0wbR8bsTzIKTH9dh2Hy8.roa
Signing time: Wed 05 Feb 2025 08:59:06 +0000
ROA not before: Wed 05 Feb 2025 08:59:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.74.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.129.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.151.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.191.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.197.0/24 maxlen: 24
31.57.198.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.238.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.33.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.163.0/24 maxlen: 24
31.58.230.0/23 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.42.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.108.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
31.59.228.0/24 maxlen: 24
31.59.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Feb 2025 11:25:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d5:55:a2:a6:60:67:46:66:5a:19:50:85:9f:a0:ab:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 5 08:59:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6cf49d411ff4c1b47c6ec4f320a4c7f5d8761f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d6:96:fc:75:c3:14:67:d7:31:63:d7:84:ef:
d9:b0:eb:17:fd:2a:5a:32:61:4a:03:8c:17:26:fc:
28:51:f9:d4:9d:8a:18:d4:fd:b1:82:16:d6:bf:c5:
7c:b5:86:36:9f:eb:1d:50:39:47:60:4e:98:18:37:
8d:37:6a:64:0e:99:e8:58:a2:1b:3e:8b:a8:fd:ce:
cf:b3:43:c5:82:ad:bc:e8:d0:f8:96:a6:d9:2e:0d:
e4:56:c5:4d:fa:b1:92:1c:6c:e4:d4:04:6c:06:94:
dc:8b:bd:65:18:ee:d3:37:e0:21:5b:f5:a6:07:db:
31:87:e7:7f:00:3e:23:1f:1a:ee:e2:50:ba:e1:16:
eb:7e:00:09:a7:98:7d:82:83:ce:d0:bf:ab:2f:4f:
e6:d5:4d:de:4b:3d:66:91:53:80:de:66:ea:8f:ae:
b7:fe:61:3f:97:cc:e4:89:3f:57:eb:0e:52:dc:b1:
94:a9:3e:a1:d1:ed:7f:9a:26:47:57:d4:e0:d9:74:
0d:89:09:2c:b0:81:17:8b:1e:0e:5b:db:45:51:38:
75:e0:81:ea:08:8b:ac:86:81:17:86:6a:d6:22:8e:
ce:95:05:94:11:0f:70:b9:b7:93:e3:34:eb:4b:a3:
9a:f4:d8:e2:d6:07:07:7b:72:d2:11:63:d3:61:bf:
a4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F4:9D:41:1F:F4:C1:B4:7C:6E:C4:F3:20:A4:C7:F5:D8:76:1F:2F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bPSdQR_0wbR8bsTzIKTH9dh2Hy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.74.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.104.0/21
31.57.129.0/24
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.151.0/24
31.57.176.0/21
31.57.191.0-31.57.195.255
31.57.197.0-31.57.198.255
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.238.0/24
31.57.252.0/22
31.58.33.0-31.58.35.255
31.58.152.0/22
31.58.163.0/24
31.58.230.0/23
31.59.41.0-31.59.42.255
31.59.57.0/24
31.59.96.0/22
31.59.108.0/24
31.59.112.0/22
31.59.184.0/22
31.59.228.0/24
31.59.230.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:94:54:04:5f:89:f8:7c:e5:ae:2d:56:b6:08:a2:a8:1f:c0:
b2:f7:45:2d:aa:fe:e8:60:c4:60:68:9f:49:5c:f0:05:b9:fa:
fd:75:76:22:df:fb:9b:20:d3:1e:3b:42:c5:f6:6f:62:cb:4f:
26:0d:7b:74:7f:c9:6d:4b:5c:61:66:d2:37:e9:ea:c7:dc:eb:
7b:3a:9d:2f:ca:b5:db:89:f1:7f:a8:8c:d8:78:c0:e9:02:48:
b4:60:94:68:19:78:cf:e0:79:c2:df:9a:da:30:31:b9:84:47:
26:af:61:03:95:7c:4f:c7:54:1a:68:6c:c3:db:34:82:7b:15:
6e:0b:85:1c:90:af:f8:3a:ba:fd:65:41:18:72:53:da:41:8a:
31:4b:c9:56:e6:2c:40:bc:42:7c:c4:db:14:9b:e6:99:64:d8:
99:9f:37:06:5c:38:7d:dd:7c:ce:41:41:ab:b3:fe:5b:89:fd:
08:7c:84:93:39:84:cc:d0:d7:99:c2:22:cd:f2:80:63:8c:7a:
19:dd:08:a0:be:9a:43:76:20:b4:07:e2:a5:8a:23:95:3a:d9:
46:e8:51:0c:15:4f:41:ec:5a:5a:2f:12:a1:28:c2:3e:86:68:
e2:9f:8c:67:ad:9c:39:d8:f2:db:7b:22:ad:d4:c8:a3:e6:72:
2f:a0:d7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 17:51:24 2025 by rpki-client