Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zncoO9h_3Ce6TLeSQrGnltYeDng.roa
File: zncoO9h_3Ce6TLeSQrGnltYeDng.roa (raw, json)
Hash identifier: yy6EvW2F6B6ZSixRfn3s/gN1uFkajP3NMu6LcQCF+/I=
Subject key identifier: CE:77:28:3B:D8:7F:DC:27:BA:4C:B7:92:42:B1:A7:96:D6:1E:0E:78
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196A172431634AE68499E55D1EA02113BE7
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zncoO9h_3Ce6TLeSQrGnltYeDng.roa
Signing time: Mon 05 May 2025 17:15:42 +0000
ROA not before: Mon 05 May 2025 17:15:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.48.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/22 maxlen: 24
31.56.224.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.57.10.0/24 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.115.0/24 maxlen: 24
31.57.118.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.171.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.196.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.230.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.238.0/24 maxlen: 24
31.57.249.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.50.0/24 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.86.0/24 maxlen: 24
31.58.141.0/24 maxlen: 24
31.58.144.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.204.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 06 May 2025 08:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:72:43:16:34:ae:68:49:9e:55:d1:ea:02:11:3b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 5 17:15:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce77283bd87fdc27ba4cb79242b1a796d61e0e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:df:23:80:18:ab:8d:8a:47:d0:c2:8f:6d:ca:
f4:07:88:24:f7:99:82:8a:83:97:33:b2:c6:5a:61:
c6:61:63:4e:e4:ce:bf:ac:89:0d:e5:c1:e5:39:42:
6e:dc:aa:58:b2:5b:73:83:35:ba:24:6e:d7:97:2d:
70:14:b2:29:80:75:6a:3d:fb:55:cd:cd:bb:c7:4e:
74:53:1e:80:49:3a:bb:b7:88:cc:1b:86:89:94:de:
96:49:45:61:46:8a:d2:70:fd:4e:c6:0a:80:6d:f0:
ce:e1:4c:89:bf:37:67:67:4d:c5:81:65:28:7d:c3:
76:50:b5:1f:d8:54:ea:f9:28:e9:bf:b7:c2:c0:e1:
4d:02:73:4e:1f:db:45:83:15:7b:31:ef:b3:3e:d6:
46:dc:31:c1:82:bb:90:4b:86:d4:73:1a:69:5b:d8:
8d:aa:9c:61:a3:2d:3c:94:55:c8:e2:76:7a:67:0c:
de:2e:cd:54:5d:19:4e:5a:c5:3e:00:1e:de:c3:dc:
42:ec:8c:2d:9a:c6:cf:64:02:0b:48:a4:a8:c5:aa:
eb:ec:3e:df:84:88:04:70:22:1f:6b:21:8f:c4:6e:
d6:13:48:c1:68:85:5f:bb:3d:2e:93:e8:6d:73:97:
63:e0:a2:b8:d6:f8:91:43:42:da:8f:bf:95:a9:34:
0a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:77:28:3B:D8:7F:DC:27:BA:4C:B7:92:42:B1:A7:96:D6:1E:0E:78
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zncoO9h_3Ce6TLeSQrGnltYeDng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.48.0/24
31.56.57.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0/22
31.56.200.0/22
31.56.208.0/21
31.56.220.0-31.56.231.255
31.56.236.0/22
31.57.10.0/24
31.57.36.0/23
31.57.104.0/21
31.57.115.0/24
31.57.118.0/24
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.188.255
31.57.192.0-31.57.196.255
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.230.0/24
31.57.232.0/22
31.57.238.0/24
31.57.249.0-31.57.255.255
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.84.0/22
31.58.141.0/24
31.58.144.0/24
31.58.152.0/22
31.58.172.0/22
31.58.204.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.151.255
31.59.160.0/20
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:ff:7f:35:9f:fa:cb:a1:1c:1a:80:17:bc:45:04:30:7a:fd:
fe:25:87:5c:4e:2a:8e:09:52:7d:07:47:ea:2e:f6:4f:23:41:
0d:06:0f:c6:a5:b5:4f:03:0c:b1:40:1b:a5:1a:d6:de:81:ca:
91:8e:f2:3f:35:bf:ad:3f:ef:e6:75:15:c6:e6:85:10:48:d2:
26:88:30:26:9e:4c:93:e0:43:0d:d6:14:f7:ef:ed:89:b5:ed:
78:f9:6c:24:17:1a:b5:53:75:8e:9f:6c:89:8f:31:5a:25:ab:
44:e7:da:5a:c1:df:5c:79:3a:3c:c5:95:89:d1:ed:0e:27:a4:
e2:c0:8d:4f:c2:35:7e:f3:f0:52:5d:fc:d3:cd:96:8b:24:c4:
f2:54:cc:62:18:c9:55:d3:09:e2:3a:65:9d:a7:e7:63:ca:53:
d6:be:79:63:4e:ee:50:d8:05:6c:84:ea:f7:b1:a3:0e:dc:ab:
7c:b0:6e:c0:1a:9f:6a:8b:24:33:b9:ff:58:49:5b:0f:17:6c:
db:e3:2a:14:97:33:68:3e:72:21:c8:5f:51:67:6b:8c:55:03:
32:09:f0:3c:19:00:15:0b:16:b8:2c:14:ba:87:2c:aa:ae:0c:
90:25:35:14:46:46:8c:6e:6b:f8:99:33:62:99:01:f9:16:a4:
4c:71:4e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:01:53 2025 by rpki-client