Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rEcH0V_i_q2nuzLZocscLGCvTHo.roa
File: rEcH0V_i_q2nuzLZocscLGCvTHo.roa (raw, json)
Hash identifier: mRuLihgEOlHJtsrMAymwc6d6Qp4rNrPD5MOwtZabzMk=
Subject key identifier: AC:47:07:D1:5F:E2:FE:AD:A7:BB:32:D9:A1:CB:1C:2C:60:AF:4C:7A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019652FEC63F9F65D432AB76D061B12B785A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rEcH0V_i_q2nuzLZocscLGCvTHo.roa
Signing time: Sun 20 Apr 2025 11:39:10 +0000
ROA not before: Sun 20 Apr 2025 11:39:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.23.0/24 maxlen: 24
31.56.24.0/24 maxlen: 24
31.56.32.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.91.0/24 maxlen: 24
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.125.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.200.0/24 maxlen: 24
31.56.202.0/24 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.103.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.113.0/24 maxlen: 24
31.57.118.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.138.0/24 maxlen: 24
31.57.143.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.168.0/23 maxlen: 23
31.57.171.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.196.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.208.0/22 maxlen: 22
31.57.215.0/24 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.230.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.238.0/24 maxlen: 24
31.57.249.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.50.0/24 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.76.0/24 maxlen: 24
31.58.77.0/24 maxlen: 24
31.58.78.0/24 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.92.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 21 Apr 2025 07:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:fe:c6:3f:9f:65:d4:32:ab:76:d0:61:b1:2b:78:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 20 11:39:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac4707d15fe2feada7bb32d9a1cb1c2c60af4c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7e:d6:07:8d:0c:12:a0:86:ec:cc:bc:f2:02:
e4:c2:dc:7d:6e:d8:63:65:ab:16:c0:1e:d9:de:94:
41:6b:2a:10:77:43:42:0b:2c:5c:26:90:ac:f0:11:
90:d0:2d:5e:f9:09:a9:da:16:68:de:43:67:b5:41:
95:a1:ac:75:d2:45:44:ce:5a:06:36:9e:93:8d:4a:
3a:f6:01:c2:9d:ef:91:5e:f9:73:a9:79:b8:b1:c6:
db:35:42:e1:8b:c5:80:44:93:76:d4:a1:f2:ee:6b:
d3:ae:16:7f:b5:2f:fe:f8:fb:aa:02:37:9b:02:7c:
b5:3e:80:ee:5b:79:4f:86:00:df:b3:68:06:a4:bd:
c5:6d:38:b3:c4:2c:8a:37:c8:c3:c2:35:58:32:3d:
3c:96:b9:c1:48:57:2d:d4:81:6e:38:46:fb:f6:f3:
cd:a8:39:ff:68:fe:9f:53:f6:f6:e4:07:ee:cf:25:
9b:35:b6:f5:30:f2:0d:e5:cb:7e:5c:af:91:0c:53:
44:fa:11:ac:56:f9:42:4d:27:74:b8:ff:c9:23:36:
60:f9:7d:85:f2:fa:7a:94:9d:cd:42:50:dc:53:9f:
c9:71:02:45:b1:dd:89:04:0f:d2:14:07:de:64:71:
b0:da:97:2b:d9:bf:0a:58:f4:3a:12:f6:c0:1f:75:
45:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:47:07:D1:5F:E2:FE:AD:A7:BB:32:D9:A1:CB:1C:2C:60:AF:4C:7A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rEcH0V_i_q2nuzLZocscLGCvTHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.23.0-31.56.24.255
31.56.32.0/24
31.56.57.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.125.0/24
31.56.200.0/22
31.57.36.0/23
31.57.103.0-31.57.111.255
31.57.113.0/24
31.57.118.0/24
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.188.255
31.57.192.0-31.57.196.255
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.230.0/24
31.57.232.0/22
31.57.238.0/24
31.57.249.0-31.57.255.255
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.76.0-31.58.78.255
31.58.84.0/22
31.58.92.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.175.255
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
16:45:6d:8a:cf:24:fe:2f:7a:8e:08:b4:eb:2a:b6:dc:89:a3:
f9:02:25:cc:01:54:66:ae:f6:a1:22:3d:88:23:5b:7e:f0:fe:
a2:b4:59:bf:6f:e5:bb:62:ec:da:23:36:44:2e:d0:e3:45:ee:
c6:e6:f0:90:a9:73:1c:ad:53:84:27:ce:af:88:e6:6a:82:99:
3b:58:22:07:5d:68:79:7b:89:ba:0e:5a:5a:a3:dc:34:0f:22:
cd:57:a6:f3:97:ff:78:26:44:9c:87:ad:62:cf:8e:8f:06:3a:
4c:7e:e3:60:47:e7:7f:da:67:d3:86:43:21:4e:fa:5d:98:f3:
09:87:3c:90:1a:f4:61:c7:d4:63:f7:83:16:12:53:1a:75:91:
dd:bf:b1:7e:96:1f:93:28:04:5c:c3:64:d7:57:c1:e7:e0:c0:
85:f7:38:e4:70:f9:d9:51:34:21:a4:be:5d:65:99:8a:e4:3e:
b3:bd:e6:c9:e7:08:39:08:3b:82:b4:90:87:88:83:71:5a:f8:
3f:08:37:c8:4b:d3:23:74:45:ef:56:f0:f3:b9:a8:06:07:dc:
43:29:7c:97:8a:9b:3e:96:b6:f0:78:55:72:31:c8:7b:c5:c8:
74:0b:d3:11:de:3f:9f:ed:5d:f6:11:6c:32:98:8a:6a:27:b4:
73:56:5c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 16:54:23 2025 by rpki-client