Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/AQL5psyTL3p0AUfxR_-uOkESKgU.roa
File: AQL5psyTL3p0AUfxR_-uOkESKgU.roa (raw, json)
Hash identifier: TgbRDd4zcHSohrMYtFvH09PLhm/t8nCVcspUAPVf7E8=
Subject key identifier: 01:02:F9:A6:CC:93:2F:7A:74:01:47:F1:47:FF:AE:3A:41:12:2A:05
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0198177A45CC5A1080666A6DF77B41907040
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/AQL5psyTL3p0AUfxR_-uOkESKgU.roa
Signing time: Thu 17 Jul 2025 08:22:25 +0000
ROA not before: Thu 17 Jul 2025 08:22:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.28.0/22 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.59.0/24 maxlen: 24
31.56.76.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.107.0/24 maxlen: 24
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.180.0/23 maxlen: 23
31.56.188.0/22 maxlen: 24
31.56.190.0/23 maxlen: 23
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/23 maxlen: 23
31.56.224.0/23 maxlen: 23
31.56.228.0/22 maxlen: 24
31.56.230.0/23 maxlen: 23
31.56.236.0/22 maxlen: 24
31.56.236.0/23 maxlen: 23
31.57.10.0/24 maxlen: 24
31.57.12.0/23 maxlen: 24
31.57.14.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.94.0/23 maxlen: 23
31.57.104.0/21 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.120.0/23 maxlen: 23
31.57.124.0/22 maxlen: 24
31.57.126.0/23 maxlen: 23
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.183.0/24 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.186.0/23 maxlen: 23
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.231.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.87.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.152.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.220.0/23 maxlen: 23
31.58.224.0/22 maxlen: 24
31.58.226.0/24 maxlen: 24
31.59.59.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.96.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.136.0/21 maxlen: 24
31.59.136.0/24 maxlen: 24
31.59.138.0/23 maxlen: 23
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.174.0/23 maxlen: 23
31.59.212.0/22 maxlen: 24
31.59.212.0/24 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.230.0/24 maxlen: 24
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 18 Jul 2025 07:17:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:17:7a:45:cc:5a:10:80:66:6a:6d:f7:7b:41:90:70:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 17 08:22:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0102f9a6cc932f7a740147f147ffae3a41122a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dc:9e:2d:8b:89:1f:14:a0:b0:44:4b:5e:c7:
aa:58:72:0c:da:f7:e4:92:42:7e:83:97:b2:5f:06:
7b:a8:3c:52:5e:52:30:bb:09:ad:7f:c3:eb:0d:7f:
59:0b:2c:4a:9f:e7:3c:2a:5b:e7:5a:53:03:44:c6:
77:62:1d:1d:b1:ab:2a:76:e1:7a:9a:00:59:38:fe:
44:37:c6:10:f0:49:6f:64:bd:df:01:dc:1a:e8:38:
b6:52:99:e4:e9:7b:48:e6:a4:dc:1c:e1:fa:68:fe:
92:e5:5d:f9:57:4b:79:a7:98:05:6a:68:8b:19:6d:
31:44:8f:12:da:26:af:94:0f:0c:a7:26:cb:b6:59:
a1:00:d0:11:6a:e5:a0:e0:b8:93:8d:09:b5:a6:16:
fe:80:7c:f0:19:46:1c:cf:60:7e:05:de:e0:41:8c:
48:93:9b:57:af:c9:1c:eb:7c:ba:0b:25:18:04:4f:
f4:2b:90:2f:ed:a2:c3:2b:3b:c0:70:f0:e9:e3:ff:
bc:cc:05:8e:c8:0c:cc:53:dd:34:0f:eb:a2:ec:c1:
0c:22:73:00:6e:e0:4b:74:75:e0:c4:4b:28:47:71:
b1:4f:40:d5:47:81:6b:a5:cf:b0:92:bc:75:ff:0f:
ac:69:31:25:55:64:ac:db:f5:8a:53:3d:b3:b9:0c:
24:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:02:F9:A6:CC:93:2F:7A:74:01:47:F1:47:FF:AE:3A:41:12:2A:05
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/AQL5psyTL3p0AUfxR_-uOkESKgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.28.0/22
31.56.57.0/24
31.56.59.0/24
31.56.76.0/23
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0/22
31.56.200.0/22
31.56.208.0/21
31.56.220.0/23
31.56.224.0/23
31.56.228.0/22
31.56.236.0/22
31.57.10.0/24
31.57.12.0/22
31.57.36.0/22
31.57.52.0-31.57.63.255
31.57.94.0/23
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.231.0-31.57.235.255
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.59.0/24
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.174.0/23
31.59.212.0/22
31.59.224.0/22
31.59.230.0/24
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
47:13:26:f8:19:e1:9f:c3:5e:37:cb:a0:df:e4:d5:b7:4e:f2:
13:08:27:34:e3:72:37:83:b7:7a:40:a9:bb:27:f3:f4:44:9c:
4d:a2:96:8e:b7:52:1e:d1:14:40:0c:6c:0f:5c:14:e9:ba:53:
2a:f6:a4:e1:23:4f:fb:6c:69:ec:32:f7:39:09:65:3d:6a:ef:
ac:10:fa:13:31:05:60:70:6a:b7:df:92:86:85:b8:22:14:5d:
91:27:89:fc:48:6d:54:10:09:32:21:52:3e:a7:c0:55:97:1f:
b0:ef:15:1f:3b:a9:e9:dc:0c:02:4e:e6:9b:30:00:56:04:bd:
d4:dd:6d:3d:d7:18:75:86:11:5c:5d:2c:4c:b9:e3:00:52:77:
66:15:f6:81:73:e2:a0:4a:fa:40:27:73:47:91:65:55:f4:e4:
79:8a:01:a9:fc:5e:60:2d:a4:16:98:db:d9:39:a5:17:75:91:
e4:dc:3b:ec:47:51:f6:22:fc:ec:2a:47:cd:c0:43:42:81:f0:
d0:29:3e:ee:3e:2d:a3:2f:d5:5b:4c:4a:99:12:74:37:93:3f:
a7:76:9f:37:0c:72:bc:0d:39:6e:a1:ae:1e:47:03:42:76:29:
ce:04:d2:88:73:92:2c:52:11:84:d1:5b:79:6b:fe:92:10:2a:
d3:fc:17:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:40:55 2025 by rpki-client