Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ESUnP81BruQDt-tq1edvavelxsY.roa
File: ESUnP81BruQDt-tq1edvavelxsY.roa (raw, json)
Hash identifier: M0t4pDdLQ5WZIBZreqifcsv42Vpmynwt8ucUGHmpOW0=
Subject key identifier: 11:25:27:3F:CD:41:AE:E4:03:B7:EB:6A:D5:E7:6F:6A:F7:A5:C6:C6
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197AB416261C6F199BA15DA044DD3257D41
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ESUnP81BruQDt-tq1edvavelxsY.roa
Signing time: Thu 26 Jun 2025 08:01:18 +0000
ROA not before: Thu 26 Jun 2025 08:01:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.32.0/24 maxlen: 24
31.56.48.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.146.0/24 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.196.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.204.0/22 maxlen: 22
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.57.12.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.60.0/22 maxlen: 24
31.57.92.0/22 maxlen: 22
31.57.92.0/23 maxlen: 24
31.57.95.0/24 maxlen: 24
31.57.99.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.162.0/23 maxlen: 23
31.57.164.0/23 maxlen: 23
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.183.0/24 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.200.0/24 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.171.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.58.226.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.136.0/21 maxlen: 24
31.59.136.0/24 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.212.0/22 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 26 Jun 2025 14:43:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ab:41:62:61:c6:f1:99:ba:15:da:04:4d:d3:25:7d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 26 08:01:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1125273fcd41aee403b7eb6ad5e76f6af7a5c6c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:02:aa:d7:4a:f1:89:d6:6e:44:07:ab:39:51:
63:54:a9:58:93:c0:2e:ca:f8:11:68:cc:ca:07:23:
b6:d7:64:5c:a3:1c:48:de:24:25:c9:dd:21:b8:db:
9e:b9:20:20:48:df:7e:64:0e:e9:8a:66:b2:f3:96:
12:36:b8:67:bf:fb:de:db:b9:57:14:62:49:77:9a:
26:fa:85:18:83:46:c7:d2:f8:23:39:9d:7d:45:06:
b9:2f:73:7c:72:e3:7e:85:38:62:63:b7:65:6c:32:
01:06:6e:ea:c3:34:5a:74:3e:23:1f:5f:0d:0e:a0:
45:0b:fe:60:1c:eb:9b:6c:2a:c9:f8:bb:95:0f:36:
eb:43:1a:ca:e9:d8:a9:9a:3e:87:06:8d:69:24:99:
ec:bd:c3:18:eb:55:f1:46:24:6c:7b:a0:50:99:70:
3f:85:04:17:f7:f1:1f:a9:e8:d1:e8:b2:5b:d1:ec:
33:06:fa:0e:42:e7:7b:bc:60:9b:e4:44:41:bf:b7:
90:c0:73:d5:10:24:de:da:57:ec:ef:93:44:e1:b3:
24:dd:8b:0a:4a:96:58:86:df:8e:dd:37:e7:04:2f:
33:9f:fc:bc:cc:4c:08:5e:61:db:84:63:87:e4:60:
43:85:fe:20:22:8a:1f:98:c0:1f:6c:da:7e:39:f5:
aa:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:25:27:3F:CD:41:AE:E4:03:B7:EB:6A:D5:E7:6F:6A:F7:A5:C6:C6
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ESUnP81BruQDt-tq1edvavelxsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.32.0/24
31.56.48.0/24
31.56.57.0/24
31.56.77.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.146.0/24
31.56.180.0/22
31.56.188.0/22
31.56.196.0-31.56.215.255
31.56.228.0/22
31.56.236.0/22
31.57.12.0/23
31.57.36.0/22
31.57.60.0/22
31.57.92.0/22
31.57.99.0/24
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.162.0-31.57.165.255
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.171.0-31.58.175.255
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.212.0/22
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:d3:f5:39:42:b3:e1:ab:53:2d:02:09:11:02:04:49:0c:a3:
48:b3:25:99:04:76:20:26:0e:cb:3b:63:24:a4:8c:46:6b:89:
ae:31:61:6b:86:91:98:11:b6:e3:32:03:d2:0e:b0:fd:cf:c3:
da:56:5a:b1:1d:a1:9c:7f:9b:83:4b:9d:89:3b:3c:7b:1f:7c:
84:ea:69:2b:68:fb:5e:41:01:0c:e9:9f:13:8b:25:97:c6:b1:
27:0d:1e:52:65:93:79:ad:d3:21:50:ee:39:bb:a2:74:ee:c5:
68:ee:56:40:21:c9:25:be:7c:f5:11:53:a9:fe:58:31:f7:4c:
5f:b1:33:fe:78:46:12:3f:ad:4a:41:66:25:60:84:e7:4e:61:
d9:7e:0c:26:82:c3:d8:72:5c:d0:c4:ef:66:a5:58:e3:5c:c2:
71:dc:98:04:a2:69:83:36:85:19:69:54:8d:83:bb:48:83:8b:
1f:48:24:12:f5:f1:53:52:f8:b2:94:6c:2b:bf:d6:d5:07:a0:
36:4e:50:59:13:ce:89:c5:5f:8d:41:b8:ee:67:57:73:48:08:
6d:d4:1e:12:63:3c:e4:bf:d8:ef:69:83:cd:f0:27:da:39:47:
a9:b5:7d:a7:11:2d:00:b1:35:d4:fb:a2:d3:36:25:e6:a8:58:
b9:e2:6d:a3
-----BEGIN CERTIFICATE-----
MIIGbjCCBVagAwIBAgISAZerQWJhxvGZuhXaBE3TJX1BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNjI2MDgwMTE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTI1MjczZmNkNDFhZWU0MDNiN2ViNmFkNWU3NmY2YWY3YTVjNmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gKq10rxidZuRAerOVFjVKlYk8Au
yvgRaMzKByO212RcoxxI3iQlyd0huNueuSAgSN9+ZA7pimay85YSNrhnv/ve27lX
FGJJd5om+oUYg0bH0vgjOZ19RQa5L3N8cuN+hThiY7dlbDIBBm7qwzRadD4jH18N
DqBFC/5gHOubbCrJ+LuVDzbrQxrK6dipmj6HBo1pJJnsvcMY61XxRiRse6BQmXA/
hQQX9/EfqejR6LJb0ewzBvoOQud7vGCb5ERBv7eQwHPVECTe2lfs75NE4bMk3YsK
SpZYht+O3TfnBC8zn/y8zEwIXmHbhGOH5GBDhf4gIoofmMAfbNp+OfWqAwIDAQAB
o4IDejCCA3YwHQYDVR0OBBYEFBElJz/NQa7kA7fratXnb2r3pcbGMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvRVNVblA4MUJydVFEdC10cTFlZHZhdmVseHNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBjgYIKwYBBQUHAQcBAf8EggF9MIIBeTCCAXUEAgABMIIB
bQMEAR84BAMEAB84IAMEAB84MAMEAB84OQMEAB84TQMEAR84WgMEAx84aAMEAR84
cjAMAwQBHzh2AwQCHzh4AwQAHziSAwQCHzi0AwQCHzi8MAwDBAIfOMQDBAMfONAD
BAIfOOQDBAIfOOwDBAEfOQwDBAIfOSQDBAIfOTwDBAIfOVwDBAAfOWMDBAMfOWgD
BAMfOXgDBAEfOYQDBAMfOYgDBAEfOZIwDAMEAR85ogMEAR85pAMEAh85qDAMAwQE
HzmwAwQCHzm4AwQCHznAAwQBHznIMAwDBAQfOdADBAIfOeADBAIfOegwCwMEAR85
+gMDAR84AwQBHzoiAwQBHzoyAwQBHzpAAwQCHzpEAwQCHzpUAwQCHzqYMAwDBAAf
OqsDBAQfOqAwDAMEAh863AMEAh864AMEAh87TAMEAh87YAMEAh87cDAMAwQDHzuI
AwQDHzuQAwQDHzugAwQCHzvUAwQCHzvgAwQCHzvoMA0GCSqGSIb3DQEBCwUAA4IB
AQC40/U5QrPhq1MtAgkRAgRJDKNIsyWZBHYgJg7LO2MkpIxGa4muMWFrhpGYEbbj
MgPSDrD9z8PaVlqxHaGcf5uDS52JOzx7H3yE6mkraPteQQEM6Z8TiyWXxrEnDR5S
ZZN5rdMhUO45u6J07sVo7lZAIcklvnz1EVOp/lgx90xfsTP+eEYSP61KQWYlYITn
TmHZfgwmgsPYclzQxO9mpVjjXMJx3JgEommDNoUZaVSNg7tIg4sfSCQS9fFTUviy
lGwrv9bVB6A2TlBZE86JxV+NQbjuZ1dzSAht1B4SYzzkv9jvaYPN8CfaOUeptX2n
ES0AsTXU+6LTNiXmqFi54m2j
-----END CERTIFICATE-----
Generated at Tue Jul 29 07:37:21 2025 by rpki-client