Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2yBbIMS86BBBNkdtw20CmIVuMd4.roa
File: 2yBbIMS86BBBNkdtw20CmIVuMd4.roa (raw, json)
Hash identifier: c4+ZgrT+kIwAt8/NHsqnlX/+X+4TI1Esas2Efb95NYM=
Subject key identifier: DB:20:5B:20:C4:BC:E8:10:41:36:47:6D:C3:6D:02:98:85:6E:31:DE
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01981C7C02D4E0DAA9139D87A595965347C0
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2yBbIMS86BBBNkdtw20CmIVuMd4.roa
Signing time: Fri 18 Jul 2025 07:42:25 +0000
ROA not before: Fri 18 Jul 2025 07:42:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.28.0/22 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.59.0/24 maxlen: 24
31.56.76.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.107.0/24 maxlen: 24
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.180.0/23 maxlen: 23
31.56.188.0/22 maxlen: 24
31.56.190.0/23 maxlen: 23
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/23 maxlen: 23
31.56.224.0/23 maxlen: 23
31.56.228.0/22 maxlen: 24
31.56.230.0/23 maxlen: 23
31.56.236.0/22 maxlen: 24
31.56.236.0/23 maxlen: 23
31.57.10.0/24 maxlen: 24
31.57.12.0/23 maxlen: 24
31.57.14.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.94.0/23 maxlen: 23
31.57.104.0/21 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.120.0/23 maxlen: 23
31.57.124.0/22 maxlen: 24
31.57.126.0/23 maxlen: 23
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.183.0/24 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.186.0/23 maxlen: 23
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.231.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.87.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.152.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.220.0/23 maxlen: 23
31.58.224.0/22 maxlen: 24
31.58.226.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.96.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.136.0/21 maxlen: 24
31.59.136.0/24 maxlen: 24
31.59.138.0/23 maxlen: 23
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/23 maxlen: 23
31.59.174.0/23 maxlen: 23
31.59.212.0/22 maxlen: 24
31.59.212.0/24 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.230.0/24 maxlen: 24
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 18 Jul 2025 09:25:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1c:7c:02:d4:e0:da:a9:13:9d:87:a5:95:96:53:47:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 18 07:42:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db205b20c4bce8104136476dc36d0298856e31de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:25:18:00:30:c7:b6:88:a2:3f:19:ca:37:b3:
53:58:63:5b:6f:1b:dd:dc:8c:48:b5:d3:7d:c7:f4:
fd:6f:83:34:7d:fb:80:33:cd:e2:74:f0:14:4c:8d:
0c:cd:b7:a1:95:48:77:0f:d4:c5:37:ce:7a:1b:e3:
07:df:69:f6:d6:b3:af:9a:88:f4:3b:91:fe:6d:a7:
ce:14:ff:81:2a:ce:85:0e:ff:b1:3f:15:6d:fb:49:
ad:55:cb:67:71:51:9b:9f:d0:6d:d5:7f:98:fa:a1:
20:4f:a5:bf:6e:2b:21:fc:88:cc:bd:eb:7f:36:4c:
eb:fc:b8:95:a0:24:8d:82:5f:eb:86:e8:95:11:5a:
0f:12:98:f9:3e:ba:42:fa:a6:b6:56:43:7e:58:46:
04:99:8d:8c:3c:ef:25:28:3a:e7:fd:65:18:f6:db:
ef:a5:b6:e8:4e:d4:28:a1:c7:5d:19:44:4c:32:61:
ec:76:97:af:70:71:4e:d3:fc:ba:61:bb:cc:24:57:
1b:4d:ea:7a:28:73:62:07:a0:7e:52:fc:9d:cb:f2:
dc:1f:c2:7a:7a:4c:17:aa:1f:01:d4:ae:98:61:eb:
26:62:d8:7b:be:f3:b3:8a:64:79:da:a2:bd:34:1b:
32:d9:6e:97:31:6d:59:eb:0e:a2:a5:bb:77:b3:a7:
b8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:20:5B:20:C4:BC:E8:10:41:36:47:6D:C3:6D:02:98:85:6E:31:DE
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2yBbIMS86BBBNkdtw20CmIVuMd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.28.0/22
31.56.57.0/24
31.56.59.0/24
31.56.76.0/23
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0/22
31.56.200.0/22
31.56.208.0/21
31.56.220.0/23
31.56.224.0/23
31.56.228.0/22
31.56.236.0/22
31.57.10.0/24
31.57.12.0/22
31.57.36.0/22
31.57.52.0-31.57.63.255
31.57.94.0/23
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.231.0-31.57.235.255
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.136.0-31.59.151.255
31.59.160.0-31.59.169.255
31.59.174.0/23
31.59.212.0/22
31.59.224.0/22
31.59.230.0/24
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:b4:e8:f2:0a:a9:78:86:23:39:29:32:f0:20:67:f8:2c:4c:
7b:3a:cc:cb:fc:4a:5d:4c:f1:29:91:28:06:e4:61:b8:23:9d:
c2:0e:44:98:ec:d8:a6:fd:da:17:d7:67:40:9f:0e:aa:e1:ca:
95:f7:45:91:0d:05:96:cc:eb:77:6e:ca:cc:7a:87:d2:fc:5e:
17:1c:7f:62:1c:5b:76:22:22:45:3a:e8:dd:f8:1a:51:c3:eb:
ab:8a:28:07:12:ee:af:3b:a6:31:60:7a:7c:69:4f:59:57:24:
cf:ec:fd:73:d1:4f:d0:51:16:93:6f:5f:e1:76:da:0b:cc:dc:
a4:b8:14:d8:0e:f3:d6:95:19:f2:cf:77:5c:93:66:8e:2d:4c:
fe:bf:d9:ff:9f:d6:e2:fa:fa:6a:5e:1f:eb:2d:ff:7b:b0:96:
e6:b9:c3:4d:19:6a:a5:14:c9:ea:0c:af:7d:c0:cb:be:08:06:
8b:59:78:5e:58:33:68:0f:bd:61:b7:a6:0f:58:4c:5d:85:6d:
de:f5:68:ad:70:28:5a:2d:57:57:88:c2:e0:32:83:d6:64:f5:
c9:0a:47:c8:57:c4:ba:1e:e9:db:dc:dd:94:4b:9a:a3:f5:9f:
38:62:60:a2:95:07:6f:46:f8:ac:b5:82:fe:0d:ed:06:e2:75:
53:33:2a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:35:03 2025 by rpki-client