Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/v0L_I5ZZns_-DNavBEmRvQdt0xU.roa
File: v0L_I5ZZns_-DNavBEmRvQdt0xU.roa (raw, json)
Hash identifier: qLFNpSmzNtfaVIHSJ1Cktwiy5k8UOEosGWRBD4E8rCA=
Subject key identifier: BF:42:FF:23:96:59:9E:CF:FE:0C:D6:AF:04:49:91:BD:07:6D:D3:15
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01953363F226B021A2E5B4607DD19405D368
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/v0L_I5ZZns_-DNavBEmRvQdt0xU.roa
Signing time: Sun 23 Feb 2025 15:19:02 +0000
ROA not before: Sun 23 Feb 2025 15:19:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.85.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.64.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.141.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.66.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
31.59.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Feb 2025 06:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:33:63:f2:26:b0:21:a2:e5:b4:60:7d:d1:94:05:d3:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 23 15:19:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf42ff2396599ecffe0cd6af044991bd076dd315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6e:0f:18:09:c0:18:3e:6f:d6:70:01:10:40:
38:44:80:1f:84:20:1a:65:64:f9:f5:ba:c9:0d:73:
15:c0:5b:ed:01:43:21:e2:5b:f1:07:7d:57:f4:ba:
b4:fc:79:16:89:91:fb:f9:f5:95:14:57:56:a1:11:
44:27:f6:3c:6c:d1:2e:2e:33:14:f2:b7:62:74:bc:
a2:4a:4a:4a:49:f5:85:ae:38:ee:21:8e:73:b4:78:
75:19:18:76:61:e6:da:03:3c:6d:e5:2f:c5:8b:99:
aa:3d:ee:2f:06:02:7c:91:30:de:aa:9a:1a:6d:7b:
25:94:26:21:63:1d:8d:ef:b5:6d:e7:d4:57:58:1d:
0b:8a:49:c5:82:9c:8e:32:8a:49:2d:f1:2a:c2:e3:
0a:a0:98:10:31:57:df:60:78:e4:ae:fc:6a:3d:c1:
75:35:c4:f4:b4:4e:20:d6:bf:d1:43:d8:99:3d:a4:
98:47:71:e1:88:e6:f4:dc:74:47:b4:9b:19:eb:e1:
4f:ee:ca:13:2a:41:0f:39:4a:41:ae:e8:7d:b4:ba:
1f:8d:9b:1f:e6:2b:e6:ff:50:4e:a6:c4:b4:03:17:
45:35:ef:d3:9e:8e:61:15:39:af:95:9c:4f:cd:b9:
11:31:38:e0:83:f5:8b:ab:cf:c0:28:68:52:e3:94:
71:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:42:FF:23:96:59:9E:CF:FE:0C:D6:AF:04:49:91:BD:07:6D:D3:15
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/v0L_I5ZZns_-DNavBEmRvQdt0xU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.71.0/24
31.56.77.0/24
31.56.85.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.64.0/24
31.57.104.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.176.0/21
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.34.0/23
31.58.50.0/23
31.58.66.0/24
31.58.152.0/22
31.59.96.0/22
31.59.112.0/22
31.59.184.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:6d:f4:17:ce:e0:e8:0c:d4:cf:8a:07:3b:33:2f:2a:91:a7:
11:a5:4c:69:ff:39:92:39:f0:13:cb:c4:c3:c3:66:28:93:8b:
92:26:5b:71:89:dd:1d:86:fa:b4:d4:5a:17:47:10:0f:ab:e7:
2a:1c:f9:f2:69:0a:79:f8:4e:39:f5:56:5a:71:63:c8:de:70:
b5:9c:01:db:a6:85:c2:93:57:c1:86:03:1c:6b:57:25:c8:f8:
f3:56:bd:4b:9f:28:e7:35:95:cb:fe:33:eb:eb:90:52:51:c9:
0c:6d:2a:f7:27:a3:99:6e:1e:65:58:fc:cc:45:3f:b6:7f:26:
09:c7:eb:2e:22:49:c9:20:14:7f:1e:c0:86:2e:ee:bf:8d:8d:
9f:ae:16:9e:fa:69:d1:e6:22:c3:a8:48:00:0d:33:dc:f4:bc:
2a:e5:c4:1c:ec:f3:28:64:c3:6e:ab:9c:65:55:76:dc:af:fc:
92:ec:4f:ac:2b:87:ea:b8:f2:e8:71:97:07:0f:1e:ce:a8:4f:
68:b7:2e:b7:4d:11:8e:96:19:bd:fa:10:1f:cb:1b:a9:ce:ac:
c9:7b:88:25:8a:25:59:12:d5:b8:9c:7a:b7:e1:a6:a0:7b:ac:
f7:68:43:e0:a2:2f:d6:0d:32:f3:be:c1:87:45:16:20:36:e0:
16:bb:75:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 14:28:02 2025 by rpki-client