
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7P_Fw_Zl7GJ3xHFA-5ooxzVNJ14.roa
File: 7P_Fw_Zl7GJ3xHFA-5ooxzVNJ14.roa (raw, json)
Hash identifier: KLRpcJUz300zhVI00vNUEAkF3H8cWO0xE74ec1xc5GI=
Subject key identifier: EC:FF:C5:C3:F6:65:EC:62:77:C4:71:40:FB:9A:28:C7:35:4D:27:5E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197E941BD2501F20625F3B972CC0994949B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7P_Fw_Zl7GJ3xHFA-5ooxzVNJ14.roa
Signing time: Tue 08 Jul 2025 08:58:08 +0000
ROA not before: Tue 08 Jul 2025 08:58:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.1.0/24 maxlen: 24
31.56.4.0/23 maxlen: 23
31.56.28.0/22 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.59.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.180.0/23 maxlen: 23
31.56.188.0/22 maxlen: 24
31.56.190.0/23 maxlen: 23
31.56.198.0/23 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/23 maxlen: 23
31.56.224.0/23 maxlen: 23
31.56.228.0/22 maxlen: 24
31.56.230.0/23 maxlen: 23
31.56.236.0/22 maxlen: 24
31.56.236.0/23 maxlen: 23
31.57.12.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.60.0/24 maxlen: 24
31.57.94.0/23 maxlen: 23
31.57.104.0/21 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.120.0/23 maxlen: 23
31.57.124.0/22 maxlen: 24
31.57.126.0/23 maxlen: 23
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.147.0/24 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.186.0/23 maxlen: 23
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.225.0/24 maxlen: 24
31.57.231.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.220.0/23 maxlen: 23
31.58.224.0/22 maxlen: 24
31.58.226.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.96.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.136.0/21 maxlen: 24
31.59.136.0/24 maxlen: 24
31.59.138.0/23 maxlen: 23
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.174.0/23 maxlen: 23
31.59.212.0/22 maxlen: 24
31.59.212.0/24 maxlen: 24
31.59.213.0/24 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 09 Jul 2025 07:10:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e9:41:bd:25:01:f2:06:25:f3:b9:72:cc:09:94:94:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 8 08:58:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ecffc5c3f665ec6277c47140fb9a28c7354d275e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d1:25:ce:92:b0:11:87:02:78:79:2c:37:ad:
4b:2b:ec:8c:f3:55:ca:48:01:01:29:03:33:70:c9:
dc:3b:ae:92:ec:ed:c1:3d:a1:a1:1c:67:75:1f:b5:
c1:7e:e6:3a:11:07:9e:cb:0f:dd:0e:88:d8:c3:78:
e0:96:6f:26:30:c5:56:f8:8a:a6:8c:c1:08:62:01:
c9:e5:3d:b2:b4:68:e6:e7:13:08:4e:20:1a:5d:27:
47:75:14:aa:35:c3:42:32:53:94:3a:a3:70:96:9e:
20:92:de:dc:0f:5e:93:30:61:5b:0a:da:c4:6d:5c:
6a:e2:ca:f0:95:7b:01:76:43:31:b0:a6:6c:eb:da:
5a:63:7c:02:2c:88:d0:61:f5:96:d6:01:fb:55:9e:
ac:9c:02:c2:5f:e7:32:dc:40:f6:8f:d4:45:d1:d4:
f6:c5:31:fc:6f:f5:3c:4f:ec:e8:8e:53:01:ae:af:
10:fc:34:e1:69:08:12:98:d7:e7:5b:b3:c6:4d:6a:
6d:f0:ba:f9:47:9e:43:c0:43:1e:11:02:0d:8d:e7:
b7:89:fc:59:e0:93:a9:b3:e3:95:63:e9:be:1e:41:
70:2a:cd:5d:ef:52:16:e5:5e:1a:e2:62:71:b5:11:
31:2b:8e:49:52:8b:2d:56:b7:7f:69:e1:96:81:80:
64:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:FF:C5:C3:F6:65:EC:62:77:C4:71:40:FB:9A:28:C7:35:4D:27:5E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7P_Fw_Zl7GJ3xHFA-5ooxzVNJ14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.1.0/24
31.56.4.0/23
31.56.28.0/22
31.56.57.0/24
31.56.59.0/24
31.56.77.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0/22
31.56.198.0-31.56.203.255
31.56.208.0/21
31.56.220.0/23
31.56.224.0/23
31.56.228.0/22
31.56.236.0/22
31.57.12.0/23
31.57.36.0/22
31.57.52.0-31.57.63.255
31.57.94.0/23
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.231.0-31.57.235.255
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.174.0/23
31.59.212.0/22
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:8b:ed:9a:e6:93:aa:c3:79:40:2e:3c:2a:f9:e9:5c:6a:e7:
36:2e:2c:33:fd:d5:aa:54:05:7b:ac:b6:22:3b:75:35:42:a1:
b9:19:4f:0c:85:cf:f2:23:47:b0:84:80:97:31:e5:c9:f2:db:
ef:ed:94:09:c2:f0:4f:70:89:f6:5d:72:ee:65:db:e1:aa:f9:
60:ee:af:b5:f6:dd:28:de:03:33:3a:a4:94:5f:be:cb:60:e9:
76:b2:73:24:90:f4:4a:e9:08:b3:65:cb:e4:9c:37:c6:5d:9e:
4c:16:9b:49:bf:71:44:68:4b:c2:0c:47:fc:d4:b6:7c:17:96:
2a:ec:d5:6d:3d:b8:ef:09:90:03:e9:56:ab:bd:95:fd:1d:dd:
c7:80:21:0e:b1:bb:a3:b1:2d:29:5a:f1:a3:fd:df:90:6a:f4:
11:b1:cd:0c:9e:c2:53:e6:b1:0e:6a:b1:65:67:25:cb:1b:15:
b6:8c:a8:92:c1:e1:56:df:09:74:0e:f9:50:93:2e:6e:53:31:
4a:d6:1c:96:f6:a5:89:79:a5:ef:e5:cf:d6:1e:0a:67:39:91:
78:8c:4a:db:63:fc:4c:ab:69:16:22:3f:5f:ee:8d:9f:95:14:
a9:48:7f:60:69:65:88:2e:05:66:df:1f:dc:0a:ef:cb:3b:19:
f6:00:27:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:39:03 2025 by rpki-client