Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7P_Fw_Zl7GJ3xHFA-5ooxzVNJ14.roa
File:                     7P_Fw_Zl7GJ3xHFA-5ooxzVNJ14.roa (raw, json)
Hash identifier:          KLRpcJUz300zhVI00vNUEAkF3H8cWO0xE74ec1xc5GI=
Subject key identifier:   EC:FF:C5:C3:F6:65:EC:62:77:C4:71:40:FB:9A:28:C7:35:4D:27:5E
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       0197E941BD2501F20625F3B972CC0994949B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7P_Fw_Zl7GJ3xHFA-5ooxzVNJ14.roa
Signing time:             Tue 08 Jul 2025 08:58:08 +0000
ROA not before:           Tue 08 Jul 2025 08:58:08 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     834
IP address blocks:        31.56.1.0/24 maxlen: 24
                          31.56.4.0/23 maxlen: 23
                          31.56.28.0/22 maxlen: 24
                          31.56.57.0/24 maxlen: 24
                          31.56.59.0/24 maxlen: 24
                          31.56.77.0/24 maxlen: 24
                          31.56.90.0/23 maxlen: 23
                          31.56.104.0/22 maxlen: 22
                          31.56.108.0/22 maxlen: 22
                          31.56.114.0/23 maxlen: 24
                          31.56.118.0/23 maxlen: 24
                          31.56.120.0/22 maxlen: 24
                          31.56.180.0/22 maxlen: 24
                          31.56.180.0/23 maxlen: 23
                          31.56.188.0/22 maxlen: 24
                          31.56.190.0/23 maxlen: 23
                          31.56.198.0/23 maxlen: 24
                          31.56.200.0/22 maxlen: 24
                          31.56.208.0/22 maxlen: 24
                          31.56.212.0/22 maxlen: 24
                          31.56.220.0/23 maxlen: 23
                          31.56.224.0/23 maxlen: 23
                          31.56.228.0/22 maxlen: 24
                          31.56.230.0/23 maxlen: 23
                          31.56.236.0/22 maxlen: 24
                          31.56.236.0/23 maxlen: 23
                          31.57.12.0/23 maxlen: 24
                          31.57.36.0/23 maxlen: 24
                          31.57.38.0/23 maxlen: 23
                          31.57.52.0/22 maxlen: 24
                          31.57.56.0/22 maxlen: 24
                          31.57.60.0/22 maxlen: 24
                          31.57.60.0/24 maxlen: 24
                          31.57.94.0/23 maxlen: 23
                          31.57.104.0/21 maxlen: 24
                          31.57.120.0/22 maxlen: 24
                          31.57.120.0/23 maxlen: 23
                          31.57.124.0/22 maxlen: 24
                          31.57.126.0/23 maxlen: 23
                          31.57.132.0/23 maxlen: 23
                          31.57.136.0/21 maxlen: 24
                          31.57.146.0/23 maxlen: 24
                          31.57.147.0/24 maxlen: 24
                          31.57.168.0/22 maxlen: 24
                          31.57.176.0/21 maxlen: 21
                          31.57.184.0/22 maxlen: 24
                          31.57.186.0/23 maxlen: 23
                          31.57.192.0/22 maxlen: 24
                          31.57.200.0/23 maxlen: 24
                          31.57.208.0/20 maxlen: 24
                          31.57.216.0/24 maxlen: 24
                          31.57.217.0/24 maxlen: 24
                          31.57.224.0/22 maxlen: 22
                          31.57.225.0/24 maxlen: 24
                          31.57.231.0/24 maxlen: 24
                          31.57.232.0/22 maxlen: 24
                          31.57.250.0/24 maxlen: 24
                          31.57.251.0/24 maxlen: 24
                          31.57.252.0/22 maxlen: 24
                          31.58.34.0/23 maxlen: 24
                          31.58.50.0/23 maxlen: 24
                          31.58.64.0/23 maxlen: 24
                          31.58.68.0/22 maxlen: 24
                          31.58.84.0/22 maxlen: 24
                          31.58.152.0/22 maxlen: 24
                          31.58.172.0/22 maxlen: 24
                          31.58.220.0/22 maxlen: 22
                          31.58.220.0/23 maxlen: 23
                          31.58.224.0/22 maxlen: 24
                          31.58.226.0/24 maxlen: 24
                          31.59.76.0/22 maxlen: 24
                          31.59.96.0/22 maxlen: 22
                          31.59.96.0/24 maxlen: 24
                          31.59.112.0/22 maxlen: 22
                          31.59.136.0/21 maxlen: 24
                          31.59.136.0/24 maxlen: 24
                          31.59.138.0/23 maxlen: 23
                          31.59.144.0/21 maxlen: 24
                          31.59.160.0/21 maxlen: 24
                          31.59.174.0/23 maxlen: 23
                          31.59.212.0/22 maxlen: 24
                          31.59.212.0/24 maxlen: 24
                          31.59.213.0/24 maxlen: 24
                          31.59.224.0/22 maxlen: 22
                          31.59.232.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Wed 09 Jul 2025 07:10:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:e9:41:bd:25:01:f2:06:25:f3:b9:72:cc:09:94:94:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Jul  8 08:58:08 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ecffc5c3f665ec6277c47140fb9a28c7354d275e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d1:25:ce:92:b0:11:87:02:78:79:2c:37:ad:
                    4b:2b:ec:8c:f3:55:ca:48:01:01:29:03:33:70:c9:
                    dc:3b:ae:92:ec:ed:c1:3d:a1:a1:1c:67:75:1f:b5:
                    c1:7e:e6:3a:11:07:9e:cb:0f:dd:0e:88:d8:c3:78:
                    e0:96:6f:26:30:c5:56:f8:8a:a6:8c:c1:08:62:01:
                    c9:e5:3d:b2:b4:68:e6:e7:13:08:4e:20:1a:5d:27:
                    47:75:14:aa:35:c3:42:32:53:94:3a:a3:70:96:9e:
                    20:92:de:dc:0f:5e:93:30:61:5b:0a:da:c4:6d:5c:
                    6a:e2:ca:f0:95:7b:01:76:43:31:b0:a6:6c:eb:da:
                    5a:63:7c:02:2c:88:d0:61:f5:96:d6:01:fb:55:9e:
                    ac:9c:02:c2:5f:e7:32:dc:40:f6:8f:d4:45:d1:d4:
                    f6:c5:31:fc:6f:f5:3c:4f:ec:e8:8e:53:01:ae:af:
                    10:fc:34:e1:69:08:12:98:d7:e7:5b:b3:c6:4d:6a:
                    6d:f0:ba:f9:47:9e:43:c0:43:1e:11:02:0d:8d:e7:
                    b7:89:fc:59:e0:93:a9:b3:e3:95:63:e9:be:1e:41:
                    70:2a:cd:5d:ef:52:16:e5:5e:1a:e2:62:71:b5:11:
                    31:2b:8e:49:52:8b:2d:56:b7:7f:69:e1:96:81:80:
                    64:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:FF:C5:C3:F6:65:EC:62:77:C4:71:40:FB:9A:28:C7:35:4D:27:5E
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7P_Fw_Zl7GJ3xHFA-5ooxzVNJ14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.56.1.0/24
                  31.56.4.0/23
                  31.56.28.0/22
                  31.56.57.0/24
                  31.56.59.0/24
                  31.56.77.0/24
                  31.56.90.0/23
                  31.56.104.0/21
                  31.56.114.0/23
                  31.56.118.0-31.56.123.255
                  31.56.180.0/22
                  31.56.188.0/22
                  31.56.198.0-31.56.203.255
                  31.56.208.0/21
                  31.56.220.0/23
                  31.56.224.0/23
                  31.56.228.0/22
                  31.56.236.0/22
                  31.57.12.0/23
                  31.57.36.0/22
                  31.57.52.0-31.57.63.255
                  31.57.94.0/23
                  31.57.104.0/21
                  31.57.120.0/21
                  31.57.132.0/23
                  31.57.136.0/21
                  31.57.146.0/23
                  31.57.168.0/22
                  31.57.176.0-31.57.187.255
                  31.57.192.0/22
                  31.57.200.0/23
                  31.57.208.0-31.57.227.255
                  31.57.231.0-31.57.235.255
                  31.57.250.0-31.57.255.255
                  31.58.34.0/23
                  31.58.50.0/23
                  31.58.64.0/23
                  31.58.68.0/22
                  31.58.84.0/22
                  31.58.152.0/22
                  31.58.172.0/22
                  31.58.220.0-31.58.227.255
                  31.59.76.0/22
                  31.59.96.0/22
                  31.59.112.0/22
                  31.59.136.0-31.59.151.255
                  31.59.160.0/21
                  31.59.174.0/23
                  31.59.212.0/22
                  31.59.224.0/22
                  31.59.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:8b:ed:9a:e6:93:aa:c3:79:40:2e:3c:2a:f9:e9:5c:6a:e7:
         36:2e:2c:33:fd:d5:aa:54:05:7b:ac:b6:22:3b:75:35:42:a1:
         b9:19:4f:0c:85:cf:f2:23:47:b0:84:80:97:31:e5:c9:f2:db:
         ef:ed:94:09:c2:f0:4f:70:89:f6:5d:72:ee:65:db:e1:aa:f9:
         60:ee:af:b5:f6:dd:28:de:03:33:3a:a4:94:5f:be:cb:60:e9:
         76:b2:73:24:90:f4:4a:e9:08:b3:65:cb:e4:9c:37:c6:5d:9e:
         4c:16:9b:49:bf:71:44:68:4b:c2:0c:47:fc:d4:b6:7c:17:96:
         2a:ec:d5:6d:3d:b8:ef:09:90:03:e9:56:ab:bd:95:fd:1d:dd:
         c7:80:21:0e:b1:bb:a3:b1:2d:29:5a:f1:a3:fd:df:90:6a:f4:
         11:b1:cd:0c:9e:c2:53:e6:b1:0e:6a:b1:65:67:25:cb:1b:15:
         b6:8c:a8:92:c1:e1:56:df:09:74:0e:f9:50:93:2e:6e:53:31:
         4a:d6:1c:96:f6:a5:89:79:a5:ef:e5:cf:d6:1e:0a:67:39:91:
         78:8c:4a:db:63:fc:4c:ab:69:16:22:3f:5f:ee:8d:9f:95:14:
         a9:48:7f:60:69:65:88:2e:05:66:df:1f:dc:0a:ef:cb:3b:19:
         f6:00:27:e6
-----BEGIN CERTIFICATE-----
MIIGejCCBWKgAwIBAgISAZfpQb0lAfIGJfO5cswJlJSbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNzA4MDg1ODA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlY2ZmYzVjM2Y2NjVlYzYyNzdjNDcxNDBmYjlhMjhjNzM1NGQyNzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdElzpKwEYcCeHksN61LK+yM81XK
SAEBKQMzcMncO66S7O3BPaGhHGd1H7XBfuY6EQeeyw/dDojYw3jglm8mMMVW+Iqm
jMEIYgHJ5T2ytGjm5xMITiAaXSdHdRSqNcNCMlOUOqNwlp4gkt7cD16TMGFbCtrE
bVxq4srwlXsBdkMxsKZs69paY3wCLIjQYfWW1gH7VZ6snALCX+cy3ED2j9RF0dT2
xTH8b/U8T+zojlMBrq8Q/DThaQgSmNfnW7PGTWpt8Lr5R55DwEMeEQINjee3ifxZ
4JOps+OVY+m+HkFwKs1d71IW5V4a4mJxtRExK45JUostVrd/aeGWgYBkiwIDAQAB
o4IDhjCCA4IwHQYDVR0OBBYEFOz/xcP2Zexid8RxQPuaKMc1TSdeMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvN1BfRndfWmw3R0ozeEhGQS01b294elZOSjE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBmgYIKwYBBQUHAQcBAf8EggGJMIIBhTCCAYEEAgABMIIB
eQMEAB84AQMEAR84BAMEAh84HAMEAB84OQMEAB84OwMEAB84TQMEAR84WgMEAx84
aAMEAR84cjAMAwQBHzh2AwQCHzh4AwQCHzi0AwQCHzi8MAwDBAEfOMYDBAIfOMgD
BAMfONADBAEfONwDBAEfOOADBAIfOOQDBAIfOOwDBAEfOQwDBAIfOSQwDAMEAh85
NAMEBh85AAMEAR85XgMEAx85aAMEAx85eAMEAR85hAMEAx85iAMEAR85kgMEAh85
qDAMAwQEHzmwAwQCHzm4AwQCHznAAwQBHznIMAwDBAQfOdADBAIfOeAwDAMEAB85
5wMEAh856DALAwQBHzn6AwMBHzgDBAEfOiIDBAEfOjIDBAEfOkADBAIfOkQDBAIf
OlQDBAIfOpgDBAIfOqwwDAMEAh863AMEAh864AMEAh87TAMEAh87YAMEAh87cDAM
AwQDHzuIAwQDHzuQAwQDHzugAwQBHzuuAwQCHzvUAwQCHzvgAwQCHzvoMA0GCSqG
SIb3DQEBCwUAA4IBAQAti+2a5pOqw3lALjwq+elcauc2Liwz/dWqVAV7rLYiO3U1
QqG5GU8Mhc/yI0ewhICXMeXJ8tvv7ZQJwvBPcIn2XXLuZdvhqvlg7q+19t0o3gMz
OqSUX77LYOl2snMkkPRK6QizZcvknDfGXZ5MFptJv3FEaEvCDEf81LZ8F5Yq7NVt
PbjvCZAD6VarvZX9Hd3HgCEOsbujsS0pWvGj/d+QavQRsc0MnsJT5rEOarFlZyXL
GxW2jKiSweFW3wl0DvlQky5uUzFK1hyW9qWJeaXv5c/WHgpnOZF4jErbY/xMq2kW
Ij9f7o2flRSpSH9gaWWILgVm3x/cCu/LOxn2ACfm
-----END CERTIFICATE-----
Generated at Tue Jul 29 07:39:03 2025 by rpki-client