Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1Rh9IST5oVwsan2dFavHOcGrhF4.roa
File: 1Rh9IST5oVwsan2dFavHOcGrhF4.roa (raw, json)
Hash identifier: kvTui0kahNyb/S/4Y8iA6r959+QovAniSXE0o2DAmbE=
Subject key identifier: D5:18:7D:21:24:F9:A1:5C:2C:6A:7D:9D:15:AB:C7:39:C1:AB:84:5E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197EE053925CC418F33F445B5B3B902B6FF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1Rh9IST5oVwsan2dFavHOcGrhF4.roa
Signing time: Wed 09 Jul 2025 07:10:09 +0000
ROA not before: Wed 09 Jul 2025 07:10:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.1.0/24 maxlen: 24
31.56.4.0/23 maxlen: 23
31.56.28.0/22 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.59.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.180.0/23 maxlen: 23
31.56.188.0/22 maxlen: 24
31.56.190.0/23 maxlen: 23
31.56.198.0/23 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/23 maxlen: 23
31.56.224.0/23 maxlen: 23
31.56.228.0/22 maxlen: 24
31.56.230.0/23 maxlen: 23
31.56.236.0/22 maxlen: 24
31.56.236.0/23 maxlen: 23
31.57.12.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.94.0/23 maxlen: 23
31.57.104.0/21 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.120.0/23 maxlen: 23
31.57.124.0/22 maxlen: 24
31.57.126.0/23 maxlen: 23
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.147.0/24 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.186.0/23 maxlen: 23
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.225.0/24 maxlen: 24
31.57.231.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.220.0/23 maxlen: 23
31.58.224.0/22 maxlen: 24
31.58.226.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.96.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.136.0/21 maxlen: 24
31.59.136.0/24 maxlen: 24
31.59.138.0/23 maxlen: 23
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.174.0/23 maxlen: 23
31.59.212.0/22 maxlen: 24
31.59.212.0/24 maxlen: 24
31.59.213.0/24 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 09 Jul 2025 13:53:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ee:05:39:25:cc:41:8f:33:f4:45:b5:b3:b9:02:b6:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 9 07:10:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5187d2124f9a15c2c6a7d9d15abc739c1ab845e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a0:8b:ab:44:53:de:c5:5c:ce:b7:6a:18:9d:
3c:97:1d:53:90:7d:8a:1c:92:f3:c5:d6:53:33:54:
a5:a9:71:26:0f:e2:2b:d1:44:92:68:4e:57:b5:ae:
3f:25:fc:16:54:de:d0:63:99:3a:c4:bf:84:be:53:
d4:79:ae:53:38:d7:a4:bf:90:24:d9:6f:b8:a5:b0:
eb:cd:75:73:5e:c0:35:17:53:f3:83:51:ff:57:b5:
c5:aa:1c:e8:d8:e1:52:ac:db:1a:f2:a6:8b:91:3e:
fa:c4:6d:36:6d:07:36:61:44:f3:89:b6:a0:cd:36:
9e:ed:18:2e:2e:17:08:b0:06:4b:d9:f5:71:7a:fa:
53:be:77:e6:e0:f6:2b:6f:24:16:f8:ce:dc:12:60:
40:72:c0:4b:18:44:5d:e8:a0:0d:ea:6d:ce:92:45:
e3:d3:d0:a0:82:31:3f:e5:21:84:66:21:03:f7:d2:
f6:a6:c4:2d:b6:2b:e1:98:64:9b:c0:1c:1d:d9:65:
dc:c0:07:66:c0:cd:18:65:eb:2b:ff:6b:4c:9f:3e:
fb:64:bc:e2:e9:54:9f:f8:65:5d:62:f7:8e:27:40:
e8:cc:d4:79:0d:fc:93:1e:41:16:fa:46:65:b8:38:
b4:eb:cb:98:c5:cb:07:7a:dd:8e:14:4a:cb:7f:96:
a5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:18:7D:21:24:F9:A1:5C:2C:6A:7D:9D:15:AB:C7:39:C1:AB:84:5E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1Rh9IST5oVwsan2dFavHOcGrhF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.1.0/24
31.56.4.0/23
31.56.28.0/22
31.56.57.0/24
31.56.59.0/24
31.56.77.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0/22
31.56.198.0-31.56.203.255
31.56.208.0/21
31.56.220.0/23
31.56.224.0/23
31.56.228.0/22
31.56.236.0/22
31.57.12.0/23
31.57.36.0/22
31.57.52.0-31.57.63.255
31.57.94.0/23
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.231.0-31.57.235.255
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.174.0/23
31.59.212.0/22
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:34:0e:89:48:ef:c4:a7:4e:03:6b:69:e5:f7:01:d3:04:bc:
9b:c8:0e:57:4e:84:8b:fe:41:3b:c5:f1:5d:66:01:18:05:da:
9b:05:bd:a0:2d:c4:d4:e5:10:45:27:f1:24:f1:58:ea:32:4f:
bd:c3:63:ac:0b:d4:e7:6a:51:82:b3:5f:1a:00:66:a0:9b:40:
40:f0:0f:7f:7e:61:5f:f5:fd:a2:f4:ed:c8:37:7b:6d:5e:93:
f9:fa:e5:db:ef:94:e0:91:76:4f:ea:fc:84:e8:6d:ee:af:26:
cf:ff:68:d5:21:ca:80:b7:0f:b9:18:74:c9:5e:03:0b:4e:2c:
40:86:dd:17:ae:1b:5e:9a:1d:dd:28:95:46:01:52:79:46:2a:
ce:a7:f6:f1:2e:27:84:fb:e6:4f:90:17:24:e2:57:7b:bd:3a:
3a:82:9c:6e:ff:59:e4:8a:54:88:ea:0e:53:b8:e9:85:32:51:
a4:d6:3a:89:b5:59:14:60:ca:17:0c:e6:7d:e0:ea:5a:14:73:
fd:29:d2:6c:5d:8b:3b:23:e9:5d:51:cc:0a:48:70:9f:1e:50:
af:93:18:c3:d3:bd:b8:00:0b:15:35:66:98:7b:3d:63:6d:19:
7c:04:f6:bd:7d:86:8c:f7:c7:32:29:db:f6:7e:6a:e7:eb:ab:
85:09:6a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:37:27 2025 by rpki-client