Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/18q7kWGwcZLD1n0wP28TsglJj-o.roa
File: 18q7kWGwcZLD1n0wP28TsglJj-o.roa (raw, json)
Hash identifier: AQkEiovZMjZGzJ605WBtrwci9hT0HkCXIj579CvnizI=
Subject key identifier: D7:CA:BB:91:61:B0:71:92:C3:D6:7D:30:3F:6F:13:B2:09:49:8F:EA
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019835BAB8A04F8499EEFF90ED7C8F9917AE
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/18q7kWGwcZLD1n0wP28TsglJj-o.roa
Signing time: Wed 23 Jul 2025 05:21:26 +0000
ROA not before: Wed 23 Jul 2025 05:21:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.28.0/22 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.59.0/24 maxlen: 24
31.56.76.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.107.0/24 maxlen: 24
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.180.0/23 maxlen: 23
31.56.188.0/22 maxlen: 24
31.56.190.0/23 maxlen: 23
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/23 maxlen: 23
31.56.224.0/23 maxlen: 23
31.56.228.0/22 maxlen: 24
31.56.230.0/23 maxlen: 23
31.56.236.0/22 maxlen: 24
31.56.236.0/23 maxlen: 23
31.57.12.0/23 maxlen: 24
31.57.14.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.64.0/24 maxlen: 24
31.57.94.0/23 maxlen: 23
31.57.104.0/21 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.120.0/23 maxlen: 23
31.57.124.0/22 maxlen: 24
31.57.126.0/23 maxlen: 23
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.161.0/24 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.183.0/24 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.186.0/23 maxlen: 23
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.87.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.152.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.220.0/23 maxlen: 23
31.58.224.0/22 maxlen: 24
31.58.226.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.96.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.136.0/21 maxlen: 24
31.59.136.0/24 maxlen: 24
31.59.138.0/23 maxlen: 23
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/23 maxlen: 23
31.59.174.0/23 maxlen: 23
31.59.224.0/22 maxlen: 22
31.59.230.0/24 maxlen: 24
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 23 Jul 2025 07:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:ba:b8:a0:4f:84:99:ee:ff:90:ed:7c:8f:99:17:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 23 05:21:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7cabb9161b07192c3d67d303f6f13b209498fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:99:31:c5:94:8a:de:16:f2:f4:f6:88:de:a1:
ca:35:28:f7:b9:8b:e9:bd:33:ae:14:6c:87:28:26:
fd:0f:76:9f:3e:cf:ad:19:48:3e:db:c4:ae:b7:fe:
d7:cd:b7:49:1d:fc:2c:a0:86:17:b5:72:56:0e:7f:
74:0b:9d:c1:41:42:55:1f:e4:da:70:0e:8d:ca:a5:
a4:9e:35:5f:45:a7:20:aa:89:8c:46:a9:2b:e0:b5:
8e:e2:5e:15:ef:dc:82:19:b6:d7:ad:e0:13:11:82:
c1:bc:ca:b0:79:8b:1b:98:0c:f9:7e:4f:8c:68:d4:
cc:8c:6b:e8:f3:30:e9:18:dd:d8:df:39:b5:4b:a3:
e2:f1:22:76:77:fb:e7:02:f2:c0:58:f6:2c:ea:f0:
e6:27:91:7b:0a:ee:5d:07:c5:c9:9d:e0:18:78:57:
43:15:b9:52:cd:5f:3c:d9:4c:6a:49:0b:a6:d4:a7:
c8:f7:8e:66:91:21:fd:8a:fc:e2:f8:97:f7:c2:e7:
0d:9f:3f:4c:72:9a:6d:fa:22:a5:d3:85:cf:23:83:
03:87:3e:51:4e:9b:56:fc:4c:3a:76:6c:ab:ed:df:
98:dd:96:ac:23:85:3f:0c:53:48:98:d2:ff:db:ad:
f2:8e:f1:ef:47:84:26:15:9e:29:c5:be:c3:55:50:
69:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CA:BB:91:61:B0:71:92:C3:D6:7D:30:3F:6F:13:B2:09:49:8F:EA
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/18q7kWGwcZLD1n0wP28TsglJj-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.28.0/22
31.56.57.0/24
31.56.59.0/24
31.56.76.0/23
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0/22
31.56.200.0/22
31.56.208.0/21
31.56.220.0/23
31.56.224.0/23
31.56.228.0/22
31.56.236.0/22
31.57.12.0/22
31.57.36.0/22
31.57.52.0-31.57.64.255
31.57.94.0/23
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.161.0/24
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.136.0-31.59.151.255
31.59.160.0-31.59.169.255
31.59.174.0/23
31.59.224.0/22
31.59.230.0/24
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
56:d0:79:55:d4:08:8f:25:eb:44:43:67:e5:42:68:6c:df:cd:
57:86:18:a3:12:11:79:fc:10:09:76:f2:bf:20:a0:c2:9d:a4:
e4:c4:4e:b1:39:78:2f:75:88:e7:fe:47:28:99:f2:09:26:b3:
c1:29:44:67:4d:13:bf:bb:02:4d:75:6e:0a:92:e4:fe:2c:47:
6d:1e:85:3e:d0:7b:b7:19:e6:13:1f:e4:b6:d9:1d:2b:bd:e5:
e9:8d:de:12:70:50:d8:a4:1b:a0:07:4a:6b:75:18:c3:cf:e7:
0d:b5:21:63:75:dd:d6:83:b0:4f:63:52:99:11:c9:72:a4:db:
77:cf:79:ea:dc:02:39:a8:f0:de:40:8c:7b:29:9c:78:e4:46:
75:bf:fe:09:98:73:87:82:5f:cf:47:6f:fb:6a:e1:87:f9:8c:
f5:18:4f:75:20:77:60:ae:84:80:25:65:45:0e:77:9e:7e:e6:
58:a6:7a:43:ee:93:15:6a:17:55:c8:ed:74:cc:5b:7e:a7:2f:
50:c5:10:29:12:ff:e9:5a:4f:11:fd:33:06:4c:0b:05:01:bb:
36:ed:d9:62:63:11:1c:a3:bd:eb:44:a5:a3:ee:7f:81:e6:36:
cd:da:64:27:44:64:27:88:1c:0a:97:c2:01:5b:b1:61:c2:36:
7f:54:2e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:34:32 2025 by rpki-client