Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EkoY2ZMNMmQxLw55VgM4222XAbs.roa
File: EkoY2ZMNMmQxLw55VgM4222XAbs.roa (raw, json)
Hash identifier: cgWJ9ZTzwHcnXrroHWMff1CxmNzRif97xTNxkLgFaOY=
Subject key identifier: 12:4A:18:D9:93:0D:32:64:31:2F:0E:79:56:03:38:DB:6D:97:01:BB
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197B03304034E8029DE1F96CFCB72C82421
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EkoY2ZMNMmQxLw55VgM4222XAbs.roa
Signing time: Fri 27 Jun 2025 07:03:42 +0000
ROA not before: Fri 27 Jun 2025 07:03:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.32.0/24 maxlen: 24
31.56.48.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.146.0/24 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.196.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.204.0/22 maxlen: 22
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.57.12.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.60.0/22 maxlen: 24
31.57.92.0/22 maxlen: 22
31.57.92.0/23 maxlen: 24
31.57.95.0/24 maxlen: 24
31.57.99.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.162.0/23 maxlen: 23
31.57.164.0/23 maxlen: 23
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.183.0/24 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.200.0/24 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.66.0/24 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.171.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.58.226.0/24 maxlen: 24
31.59.70.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.128.0/24 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.136.0/24 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.212.0/22 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 27 Jun 2025 08:41:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b0:33:04:03:4e:80:29:de:1f:96:cf:cb:72:c8:24:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 27 07:03:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=124a18d9930d3264312f0e79560338db6d9701bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b2:2e:d4:9e:78:a2:b5:d4:cc:51:14:fe:fb:
f9:49:47:7a:13:29:48:8b:c0:f4:9a:8a:83:cf:bf:
bb:be:f6:fd:4f:90:c2:b5:a9:4a:cd:5d:bb:0d:56:
f2:5e:7c:a6:70:64:6a:70:52:78:9d:28:c3:59:e2:
cb:78:ed:bb:22:3c:e3:a6:19:cb:2b:48:57:4b:40:
37:35:14:ae:cb:56:ac:d1:86:38:31:ae:b3:c1:ed:
3b:52:eb:76:3b:18:10:ae:f3:32:27:26:77:d0:e9:
a8:03:fc:8b:ee:67:9f:7b:1e:11:f3:2d:72:ff:02:
88:a1:b3:24:24:55:c2:c3:71:b9:33:f2:65:4e:6e:
51:23:fd:91:00:84:e4:7a:00:e7:24:1b:33:a6:12:
07:46:c0:b6:f2:31:ae:b6:5c:a2:29:1c:1e:50:59:
86:d2:ad:2a:6c:f6:41:fb:cd:c5:ea:b4:8a:03:36:
05:e2:d3:ec:40:b0:da:a9:88:7a:1f:91:a1:58:29:
0f:9d:94:63:38:fc:df:7c:b8:e7:bf:87:8e:ac:c3:
b4:c3:70:d0:c5:2b:69:db:df:1e:6e:8f:fe:44:97:
e7:2b:0e:b5:36:93:ab:6b:3d:79:50:8c:45:4d:5c:
93:7f:50:e9:5b:e0:88:28:e1:04:64:2b:59:32:e0:
2c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4A:18:D9:93:0D:32:64:31:2F:0E:79:56:03:38:DB:6D:97:01:BB
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EkoY2ZMNMmQxLw55VgM4222XAbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.32.0/24
31.56.48.0/24
31.56.57.0/24
31.56.77.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.146.0/24
31.56.180.0/22
31.56.188.0/22
31.56.196.0-31.56.215.255
31.56.228.0/22
31.56.236.0/22
31.57.12.0/23
31.57.36.0/22
31.57.60.0/22
31.57.92.0/22
31.57.99.0/24
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.162.0-31.57.165.255
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.64.0-31.58.66.255
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.171.0-31.58.175.255
31.58.220.0-31.58.227.255
31.59.70.0/24
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.128.0/24
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.212.0/22
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:61:70:42:d9:a8:63:d4:1e:2e:25:40:83:06:e3:c6:81:25:
12:b7:26:1d:17:43:51:ed:44:67:21:2d:46:16:59:ae:94:0b:
84:c1:d8:33:f0:b3:86:b2:79:6f:0c:27:02:27:89:56:bd:08:
fa:ad:11:8f:c0:a5:30:92:73:c0:be:f3:8b:41:5a:a2:03:aa:
ea:a5:c2:d0:b3:d6:80:8e:ae:a0:fd:0b:d7:8f:51:82:cf:f7:
24:1f:e0:4f:2b:4b:dd:fa:c6:9e:c3:4f:e3:40:78:cf:2b:6d:
c2:54:b0:f0:fb:d4:e1:84:fe:b3:06:4c:17:ee:32:b9:54:5d:
e6:87:e6:10:c8:fc:9f:67:57:e4:66:c4:45:61:53:39:f7:c9:
1b:b3:41:9c:6c:da:be:33:41:43:67:8f:10:de:24:a8:0c:24:
fc:e4:11:90:fd:2b:b3:9e:25:4d:f9:23:38:64:d2:43:04:7e:
45:6e:53:78:6b:f8:33:90:87:d7:17:e2:60:98:c5:68:70:41:
1f:f4:8b:de:f0:a8:c8:77:18:04:52:65:51:3b:71:b0:85:b4:
14:2e:91:9f:b2:b9:a7:8b:7a:b7:b6:1d:a6:85:20:8a:0a:49:
37:7d:8d:48:25:8d:83:99:33:92:00:91:f9:3b:5e:9c:fb:8f:
bf:7e:b7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:31:02 2025 by rpki-client