Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lZIBOWKFtLvJVKumZR2nMJsSnTw.roa
File: lZIBOWKFtLvJVKumZR2nMJsSnTw.roa (raw, json)
Hash identifier: Lc1l5jcFPSCpdj2ewfOXAcWFBO8Y/E2mF+gjHmhTt5Q=
Subject key identifier: 95:92:01:39:62:85:B4:BB:C9:54:AB:A6:65:1D:A7:30:9B:12:9D:3C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019690ACDFFD5D86B984920250D5EB0D492E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lZIBOWKFtLvJVKumZR2nMJsSnTw.roa
Signing time: Fri 02 May 2025 11:06:10 +0000
ROA not before: Fri 02 May 2025 11:06:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.48.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.176.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.184.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/22 maxlen: 24
31.56.224.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.57.10.0/24 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.115.0/24 maxlen: 24
31.57.118.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.171.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.196.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.230.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.238.0/24 maxlen: 24
31.57.249.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.50.0/24 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.86.0/24 maxlen: 24
31.58.141.0/24 maxlen: 24
31.58.144.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.196.0/22 maxlen: 24
31.58.204.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.36.0/22 maxlen: 24
31.59.44.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 02 May 2025 18:45:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:ac:df:fd:5d:86:b9:84:92:02:50:d5:eb:0d:49:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 2 11:06:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=959201396285b4bbc954aba6651da7309b129d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ff:bb:16:b9:72:08:8d:42:65:b2:3a:af:c7:
e6:37:29:8c:0d:6d:56:89:37:09:ba:99:6b:43:25:
ee:25:73:e3:6e:47:f7:a3:3a:a3:4b:ee:e7:77:09:
26:a5:81:7d:a5:7c:0b:aa:08:47:76:36:6f:96:3a:
4e:94:c9:6e:ba:ae:8e:ff:ef:c9:1f:e1:d6:d5:26:
e2:00:ba:04:37:98:a0:23:ef:8b:70:26:de:f8:c1:
99:d9:70:a2:4a:50:9a:11:94:8a:a3:25:9e:b3:e6:
8c:82:97:93:36:e7:23:6e:74:08:77:70:f4:3d:4f:
17:71:34:58:31:ab:dd:86:80:d4:29:ef:3e:b2:7b:
58:15:a9:db:b6:c3:b3:1e:29:6e:52:d1:35:ae:5f:
ed:55:ff:c7:81:78:60:86:fc:bf:d7:6f:08:bc:54:
0a:54:e2:cd:cc:78:69:e9:17:31:15:4b:8b:28:72:
11:e5:f6:95:72:96:e6:08:81:65:72:4b:a3:4e:c4:
c3:b8:5f:0c:8e:ac:48:e9:2f:a9:ab:d4:fa:8e:3a:
9e:a2:8e:04:95:fa:8a:6e:bd:9a:b0:73:48:3c:bf:
32:62:0c:a4:9e:84:56:9c:29:a7:af:e3:96:f7:57:
1f:97:26:58:5f:e5:39:46:35:d2:97:86:fc:bb:b2:
01:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:92:01:39:62:85:B4:BB:C9:54:AB:A6:65:1D:A7:30:9B:12:9D:3C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lZIBOWKFtLvJVKumZR2nMJsSnTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.48.0/24
31.56.57.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.176.0/20
31.56.200.0/22
31.56.208.0/21
31.56.220.0-31.56.231.255
31.56.236.0/22
31.57.10.0/24
31.57.36.0/23
31.57.104.0/21
31.57.115.0/24
31.57.118.0/24
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.188.255
31.57.192.0-31.57.196.255
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.230.0/24
31.57.232.0/22
31.57.238.0/24
31.57.249.0-31.57.255.255
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.84.0/22
31.58.141.0/24
31.58.144.0/24
31.58.152.0/22
31.58.172.0/22
31.58.196.0/22
31.58.204.0/22
31.58.220.0-31.58.227.255
31.59.36.0/22
31.59.44.0/22
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.151.255
31.59.160.0/20
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
bf:16:13:15:56:2e:2a:ae:5c:6b:09:57:4b:2e:6d:d4:32:04:
23:f5:6e:ce:35:fd:21:3f:94:97:3a:bd:b1:81:d6:37:3f:5a:
d6:c4:e4:2b:91:ab:19:19:f6:7f:94:a5:5f:35:64:73:93:15:
df:25:83:b8:e4:db:8c:e3:0d:5c:af:9a:2f:81:0f:10:05:b7:
03:16:28:cb:df:44:7b:1e:86:db:ad:8d:27:8f:90:b0:63:8b:
c4:51:0c:9d:a9:19:6c:4a:40:49:59:af:54:c0:af:27:86:15:
cd:55:21:73:3e:eb:96:cc:80:05:e2:eb:a2:ff:77:2e:92:88:
37:6b:86:77:c7:e7:8f:ae:84:cb:aa:0d:90:9b:0d:94:11:d1:
e6:d4:72:77:51:1f:8b:13:0b:99:28:3e:3b:0d:d0:28:c6:43:
30:74:dc:18:d0:65:90:f1:52:8c:f4:a2:f1:41:c2:b0:44:0e:
15:73:33:7a:19:dd:6c:1c:dd:8e:38:fd:a1:56:6e:1f:38:bd:
c6:76:d6:9e:2e:04:af:c1:d1:07:53:a0:fe:02:5b:92:03:b0:
c4:87:5b:b0:02:7b:f9:8d:18:b3:d1:cd:ad:2c:ce:e0:c9:4a:
8a:17:b0:9b:56:d3:ac:f1:2e:73:6e:93:23:8b:17:bd:0c:2b:
1a:47:c0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 17:04:04 2025 by rpki-client