Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lJ0uJus0NW6IZTKraXp-YiLo4no.roa
File: lJ0uJus0NW6IZTKraXp-YiLo4no.roa (raw, json)
Hash identifier: X/nNW9gU34VEcFqNWdfdSiuv+nAl6hlqUs0b+kL0pxw=
Subject key identifier: 94:9D:2E:26:EB:34:35:6E:88:65:32:AB:69:7A:7E:62:22:E8:E2:7A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019682175A79CBE92B22DD75C3AEFF96CC92
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lJ0uJus0NW6IZTKraXp-YiLo4no.roa
Signing time: Tue 29 Apr 2025 15:08:10 +0000
ROA not before: Tue 29 Apr 2025 15:08:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.48.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.113.0/24 maxlen: 24
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.176.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.184.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.192.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.216.0/22 maxlen: 24
31.56.220.0/22 maxlen: 24
31.56.224.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.103.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.105.0/24 maxlen: 24
31.57.106.0/24 maxlen: 24
31.57.107.0/24 maxlen: 24
31.57.108.0/24 maxlen: 24
31.57.109.0/24 maxlen: 24
31.57.111.0/24 maxlen: 24
31.57.118.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.171.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.196.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.215.0/24 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.230.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.238.0/24 maxlen: 24
31.57.249.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.50.0/24 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.86.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.196.0/22 maxlen: 24
31.58.204.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.36.0/22 maxlen: 24
31.59.44.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 29 Apr 2025 17:54:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:17:5a:79:cb:e9:2b:22:dd:75:c3:ae:ff:96:cc:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 29 15:08:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=949d2e26eb34356e886532ab697a7e6222e8e27a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b3:28:05:5c:6d:bd:d2:d2:b7:0f:5a:8e:c6:
23:68:b9:63:3d:23:54:86:f0:72:01:91:f6:df:36:
fa:49:e4:8d:a6:35:c8:77:b1:1d:7d:5f:62:d8:e9:
c0:5c:76:06:65:1a:7a:76:5c:56:3a:d8:71:2e:13:
3f:59:8c:36:42:8e:ba:7c:11:34:bb:7a:76:87:f2:
a0:8c:34:01:25:99:09:08:bb:a0:6f:29:8f:ab:b1:
79:80:27:71:9e:f4:58:9f:cd:83:a1:47:0f:fc:b7:
26:16:c3:e5:d1:ff:24:47:f3:84:95:db:3b:db:a2:
73:f4:55:a1:3a:67:82:95:91:6b:76:ab:39:9e:bb:
b8:e4:2f:1d:81:23:70:b8:9b:4e:aa:d0:a5:ac:6a:
ad:98:0a:ed:ad:8d:08:01:ac:b4:e6:3b:c0:5b:ef:
65:fa:d2:f6:17:1b:e5:38:b5:d5:4f:64:82:7d:bf:
72:34:39:bc:5f:6b:0d:5e:a0:32:e9:03:51:38:1c:
52:d7:12:01:16:ba:2b:a6:16:46:66:15:46:77:e6:
aa:0a:30:58:dc:bc:a8:77:31:7e:ed:a4:e4:18:33:
6a:5d:69:5f:84:fe:07:d6:37:90:a1:4e:78:ba:69:
8c:c2:dd:8a:51:06:72:a4:6d:4f:54:22:04:6c:1b:
5c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9D:2E:26:EB:34:35:6E:88:65:32:AB:69:7A:7E:62:22:E8:E2:7A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lJ0uJus0NW6IZTKraXp-YiLo4no.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.48.0/24
31.56.57.0/24
31.56.90.0/23
31.56.104.0/21
31.56.113.0-31.56.115.255
31.56.118.0-31.56.123.255
31.56.176.0-31.56.195.255
31.56.200.0/22
31.56.208.0-31.56.231.255
31.56.236.0/22
31.57.36.0/23
31.57.103.0-31.57.111.255
31.57.118.0/24
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.188.255
31.57.192.0-31.57.196.255
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.230.0/24
31.57.232.0/22
31.57.238.0/24
31.57.249.0-31.57.255.255
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.196.0/22
31.58.204.0/22
31.58.220.0-31.58.227.255
31.59.36.0/22
31.59.44.0/22
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.151.255
31.59.160.0/20
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
73:c0:fc:9b:79:31:d6:60:22:a7:06:76:95:f4:c5:a3:7b:93:
98:35:2a:c7:41:3d:e1:f4:2d:4e:bd:4f:27:47:c8:85:17:08:
b1:4b:38:1c:d2:e9:2c:b6:22:08:81:a1:cd:c8:87:43:b3:1d:
7a:9d:f8:6c:23:21:2a:fa:67:70:eb:92:0a:75:d7:c3:93:af:
ff:eb:e8:c3:2e:f7:31:87:b9:16:f9:94:4d:60:4a:5e:a0:2c:
99:c1:7c:48:e5:c6:05:a8:f1:53:95:63:d3:59:7d:91:b6:2b:
ca:05:cd:de:c9:45:5a:c3:63:cb:86:e5:b4:58:be:cf:b5:3a:
e0:c7:ef:12:1c:12:4d:b0:f6:bd:4e:04:21:b6:2c:61:35:12:
9c:f1:73:2d:3d:ab:18:e7:e6:23:77:26:c3:ed:66:ff:f2:4b:
dd:bb:13:ac:0d:77:f6:a6:4c:dd:94:cb:41:d2:c1:3b:0c:93:
2a:80:de:6d:e6:58:a8:dd:1e:97:04:68:48:84:4b:7a:ce:5f:
39:cb:4a:a2:83:34:5b:89:0d:d2:d4:b5:ed:9f:09:c8:44:b3:
db:f3:c5:d9:94:5d:b8:3e:bd:af:5c:35:b4:a5:63:51:3c:7c:
58:3b:45:88:02:b2:fb:d1:fe:b3:16:34:eb:73:1e:71:c2:7a:
c1:e9:1e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:19:35 2025 by rpki-client