Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0tR_t4AoP3gM_14_Sts7w78xG0I.roa
File: 0tR_t4AoP3gM_14_Sts7w78xG0I.roa (raw, json)
Hash identifier: LarOUDQxHUy5LWA7yyEUpcjBzTVspRDoYBe/u28RUDU=
Subject key identifier: D2:D4:7F:B7:80:28:3F:78:0C:FF:5E:3F:4A:DB:3B:C3:BF:31:1B:42
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019759E6F6DF3B97A6F16ECD0DEED813AB15
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0tR_t4AoP3gM_14_Sts7w78xG0I.roa
Signing time: Tue 10 Jun 2025 12:53:18 +0000
ROA not before: Tue 10 Jun 2025 12:53:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.48.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.146.0/24 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.196.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.204.0/22 maxlen: 22
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.57.12.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.60.0/22 maxlen: 24
31.57.92.0/22 maxlen: 22
31.57.99.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.134.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.58.226.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.212.0/22 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 14 Jun 2025 06:39:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:e6:f6:df:3b:97:a6:f1:6e:cd:0d:ee:d8:13:ab:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 10 12:53:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2d47fb780283f780cff5e3f4adb3bc3bf311b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:52:b2:fa:1a:ff:cf:7b:f7:d7:8c:27:c9:63:
bf:90:40:dd:fc:f7:36:b3:3b:ca:c9:05:1b:9e:87:
50:de:78:b4:06:6f:7e:13:d9:1e:33:08:53:9c:61:
0c:21:ed:4e:1e:68:39:3d:86:d7:cb:9f:b5:f7:20:
1f:2a:5d:15:a0:e5:2b:f1:f7:6a:f1:99:e6:b6:0f:
7a:b9:37:93:c5:03:23:6b:6c:00:fe:34:cf:33:93:
db:ca:66:31:0b:da:4c:77:ad:c7:5e:6d:72:05:d7:
77:18:3c:28:3d:3a:82:89:75:4c:8f:e5:8e:c3:f3:
4c:e9:e8:b7:0a:2c:01:3a:3d:dd:d2:0d:44:db:ea:
40:00:6c:3f:08:c4:3e:cb:7b:82:4e:bb:f7:3a:5f:
6c:14:f5:f7:23:87:7d:aa:b7:10:03:24:2d:89:18:
7e:fc:55:48:eb:54:33:74:27:51:26:93:58:50:48:
82:fe:ef:57:8b:3d:7d:45:f3:28:cf:45:dc:c6:f1:
11:b9:6c:ed:d5:43:7f:95:aa:4f:e2:33:a4:ac:3a:
ec:f0:44:70:ee:36:c9:f9:43:0c:2b:6e:3c:b5:04:
7c:23:1c:d6:f3:18:0c:fc:13:d2:cc:66:3a:34:95:
58:eb:75:2e:97:c9:6f:04:0e:4b:5a:4e:fe:bb:a3:
c2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D4:7F:B7:80:28:3F:78:0C:FF:5E:3F:4A:DB:3B:C3:BF:31:1B:42
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0tR_t4AoP3gM_14_Sts7w78xG0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.48.0/24
31.56.57.0/24
31.56.77.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.146.0/24
31.56.180.0/22
31.56.188.0/22
31.56.196.0-31.56.215.255
31.56.228.0/22
31.56.236.0/22
31.57.12.0/23
31.57.36.0/22
31.57.60.0/22
31.57.92.0/22
31.57.99.0/24
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.134.0/24
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.212.0/22
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
20:75:a5:2d:44:ca:ed:d2:6c:7a:cf:54:d5:15:d6:f3:cf:13:
18:88:ab:c7:88:8b:31:3d:ff:a1:44:fa:4a:a3:8c:49:21:9d:
2c:9c:32:5c:ea:d9:42:0b:c4:60:d3:50:4d:e6:0e:2f:cf:d2:
b6:10:f4:13:1d:d2:f9:01:59:80:b9:0f:86:ab:c6:3b:4c:0b:
13:f8:cc:2d:88:cd:16:be:34:a6:63:4d:fa:25:35:80:49:e1:
ff:21:e2:54:58:25:9b:9c:e7:b7:1a:da:8d:6d:97:5e:e3:0d:
e4:dc:44:94:7e:6d:88:50:ab:14:dc:b2:1a:8a:bf:ef:a7:9a:
97:49:66:10:e8:7f:d8:30:b7:e6:55:ca:d0:13:67:8f:b2:39:
ec:86:cb:a3:29:31:df:08:38:12:a0:c4:a3:ca:1c:02:f7:0b:
e0:97:fb:e8:bd:f7:15:37:66:34:ae:57:d8:a4:1f:22:69:05:
9c:26:89:56:2f:bc:a4:72:2a:b8:be:c3:b0:d3:8b:d8:23:89:
a7:5f:66:ec:d0:9a:0a:54:99:5f:fa:ba:65:07:15:73:db:72:
6f:56:c4:a3:52:0e:65:79:5a:a2:c9:15:ae:09:68:82:ab:3e:
a0:e8:4c:0a:f6:69:04:7d:ac:c5:1c:7e:3a:0d:32:b9:ea:25:
d6:d7:11:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 16:23:05 2025 by rpki-client