Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5MdehVuiKyfBazWDMBYqbciFHWw.roa
File: 5MdehVuiKyfBazWDMBYqbciFHWw.roa (raw, json)
Hash identifier: 2LmMyCrbuncqxCv7L8UP5iV2nOcSw0CNlbFRePH9PXo=
Subject key identifier: E4:C7:5E:85:5B:A2:2B:27:C1:6B:35:83:30:16:2A:6D:C8:85:1D:6C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197CB42D0267DD8456169232E74AB8DC3E6
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5MdehVuiKyfBazWDMBYqbciFHWw.roa
Signing time: Wed 02 Jul 2025 13:10:42 +0000
ROA not before: Wed 02 Jul 2025 13:10:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.28.0/22 maxlen: 24
31.56.32.0/24 maxlen: 24
31.56.44.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.112.0/24 maxlen: 24
31.56.114.0/23 maxlen: 24
31.56.117.0/24 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.180.0/23 maxlen: 23
31.56.188.0/22 maxlen: 24
31.56.190.0/23 maxlen: 23
31.56.192.0/22 maxlen: 22
31.56.198.0/23 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.216.0/22 maxlen: 22
31.56.220.0/23 maxlen: 23
31.56.224.0/23 maxlen: 23
31.56.228.0/22 maxlen: 24
31.56.230.0/23 maxlen: 23
31.56.236.0/22 maxlen: 24
31.56.236.0/23 maxlen: 23
31.57.12.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.48.0/22 maxlen: 24
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.94.0/23 maxlen: 23
31.57.104.0/21 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.120.0/23 maxlen: 23
31.57.124.0/22 maxlen: 24
31.57.126.0/23 maxlen: 23
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.225.0/24 maxlen: 24
31.57.231.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.58.226.0/24 maxlen: 24
31.59.70.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.128.0/24 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.136.0/24 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.212.0/22 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 03 Jul 2025 06:38:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:42:d0:26:7d:d8:45:61:69:23:2e:74:ab:8d:c3:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 2 13:10:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4c75e855ba22b27c16b358330162a6dc8851d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d9:76:53:e7:31:2e:06:d6:33:a2:a8:d2:0d:
4b:1a:93:63:f0:90:8d:13:7b:0d:d9:7e:b7:14:40:
b4:f2:85:96:20:e9:85:bd:1b:f8:41:4d:47:28:a7:
36:c2:15:34:ec:4a:24:ea:aa:ae:0d:d0:da:86:3f:
85:22:9b:19:8e:ea:11:63:6a:7f:d4:dc:f0:19:6d:
c7:b7:9d:82:d4:49:5a:2f:70:1e:66:69:28:37:7d:
87:bc:54:32:dc:5f:ba:31:ef:da:e4:ab:ac:d4:8e:
d8:40:bf:95:81:d9:4c:d3:7d:85:a3:32:44:3c:38:
7d:04:25:36:38:cf:6c:92:aa:eb:7d:80:26:b5:4b:
55:ee:c0:df:07:84:47:a5:65:9d:67:e7:a8:bc:58:
70:b7:46:3f:18:a8:43:b1:5e:14:5e:27:b5:6a:c4:
1e:0b:25:dc:65:8a:c7:e1:1c:f6:c5:7e:88:69:9d:
50:54:af:58:29:84:e2:af:d2:b4:b1:60:22:2a:0b:
79:52:66:a0:0d:a3:85:2e:43:2a:a4:71:de:68:d7:
8f:48:e3:81:e6:2e:77:dd:88:79:a2:59:c4:73:20:
44:4d:86:0b:a6:7c:21:4c:4f:eb:36:82:15:21:34:
51:ca:d5:6d:39:55:b2:40:45:ee:41:fc:e1:24:73:
98:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C7:5E:85:5B:A2:2B:27:C1:6B:35:83:30:16:2A:6D:C8:85:1D:6C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5MdehVuiKyfBazWDMBYqbciFHWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.28.0-31.56.32.255
31.56.44.0/24
31.56.57.0/24
31.56.77.0/24
31.56.90.0/23
31.56.104.0-31.56.112.255
31.56.114.0/23
31.56.117.0-31.56.123.255
31.56.180.0/22
31.56.188.0-31.56.195.255
31.56.198.0-31.56.203.255
31.56.208.0-31.56.221.255
31.56.224.0/23
31.56.228.0/22
31.56.236.0/22
31.57.12.0/23
31.57.36.0/22
31.57.48.0/20
31.57.94.0/23
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.231.0-31.57.235.255
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.70.0/24
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.128.0/24
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.212.0/22
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
84:1c:18:83:6e:88:93:21:ea:c5:42:cf:1b:49:6c:b3:0a:0e:
f3:28:82:88:1c:11:8a:3d:38:0e:b0:43:a1:39:88:3e:6d:e2:
83:79:e0:bd:2b:56:74:bb:66:5b:ef:89:45:82:f8:fb:06:40:
9a:03:ce:9a:4c:ac:79:0d:55:52:a4:ef:62:9c:88:43:c6:99:
49:dd:e7:fb:7c:72:ee:46:a6:0c:b6:b9:3c:12:1b:8a:8a:d8:
e9:bd:9c:7a:d0:8c:fb:5a:cf:75:5f:3e:1d:cb:d2:28:0c:a9:
7a:5e:b8:3b:f9:00:24:5c:56:0c:c6:97:59:f6:8f:45:d7:ac:
4f:d3:a9:c8:d7:f4:9c:1b:70:fb:70:c0:8b:6e:dc:fa:e2:28:
51:8b:db:95:14:60:5c:61:08:0c:ed:bd:7d:19:db:76:c1:71:
61:53:7a:da:a6:8c:80:93:cf:4c:6a:01:3e:b5:e9:bb:87:ee:
e9:36:09:19:8f:5a:11:f5:fe:a8:ce:12:05:7f:d5:b3:a6:73:
37:78:a7:35:7a:27:d5:6a:7d:49:28:57:9d:31:6c:7a:7e:10:
66:f7:c0:a6:b0:d2:c1:4f:f6:26:f4:99:9b:49:b3:55:87:6d:
07:8a:cf:a9:a8:4a:d9:1b:2f:a5:3d:99:fb:8a:52:3c:de:57:
2b:f4:a3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:31:48 2025 by rpki-client