
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FeCIEp5tZhguMqZmq0U_7yPy6FI.roa
File: FeCIEp5tZhguMqZmq0U_7yPy6FI.roa (raw, json)
Hash identifier: k0rxG2c4eW74ZxysqBWv9JOeABEbBLn8rmR9aId0txA=
Subject key identifier: 15:E0:88:12:9E:6D:66:18:2E:32:A6:66:AB:45:3F:EF:23:F2:E8:52
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197EF762E2F7FCA1B816C89E4D1905757E4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FeCIEp5tZhguMqZmq0U_7yPy6FI.roa
Signing time: Wed 09 Jul 2025 13:53:09 +0000
ROA not before: Wed 09 Jul 2025 13:53:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.1.0/24 maxlen: 24
31.56.4.0/23 maxlen: 23
31.56.28.0/22 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.59.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.180.0/23 maxlen: 23
31.56.188.0/22 maxlen: 24
31.56.190.0/23 maxlen: 23
31.56.198.0/23 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/23 maxlen: 23
31.56.224.0/23 maxlen: 23
31.56.228.0/22 maxlen: 24
31.56.230.0/23 maxlen: 23
31.56.236.0/22 maxlen: 24
31.56.236.0/23 maxlen: 23
31.57.12.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.94.0/23 maxlen: 23
31.57.104.0/21 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.120.0/23 maxlen: 23
31.57.124.0/22 maxlen: 24
31.57.126.0/23 maxlen: 23
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.147.0/24 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.186.0/23 maxlen: 23
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.225.0/24 maxlen: 24
31.57.231.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.87.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.220.0/23 maxlen: 23
31.58.224.0/22 maxlen: 24
31.58.226.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.96.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.136.0/21 maxlen: 24
31.59.136.0/24 maxlen: 24
31.59.138.0/23 maxlen: 23
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.174.0/23 maxlen: 23
31.59.212.0/22 maxlen: 24
31.59.212.0/24 maxlen: 24
31.59.213.0/24 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 10 Jul 2025 06:29:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ef:76:2e:2f:7f:ca:1b:81:6c:89:e4:d1:90:57:57:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 9 13:53:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15e088129e6d66182e32a666ab453fef23f2e852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c0:5c:6d:b2:ab:9d:6b:88:15:0b:32:43:b4:
15:c2:a0:71:77:83:43:f1:90:88:a2:4b:3b:62:21:
24:78:e1:5c:f8:ba:be:9a:5b:7e:eb:61:56:58:4b:
fe:3b:9e:96:93:d6:39:b2:46:48:1e:02:1b:87:51:
50:3a:2e:12:63:6e:a0:df:8e:95:48:c3:d4:6d:5a:
33:e7:d1:ff:19:96:3d:02:7d:a2:cf:7f:8e:06:94:
f9:1b:6d:9f:b6:c9:2c:79:38:08:98:c4:13:69:b7:
bd:5f:f1:0b:f3:f1:47:d7:ee:b4:24:98:6f:11:ff:
c1:c3:a5:66:95:ec:aa:8d:95:32:d1:19:de:3c:0d:
6c:98:bf:c6:8d:9f:33:f6:46:86:de:f3:a0:b2:08:
80:49:32:09:0b:de:cf:61:38:69:a2:0b:8f:19:c1:
22:6d:28:d4:ea:01:12:1f:2f:2b:71:c7:e1:ec:54:
34:07:6e:ba:ab:bb:a4:39:0f:d7:48:f8:26:1c:5c:
5f:47:2d:e5:43:ca:70:2f:57:90:5c:29:09:84:66:
37:0a:82:62:ca:f4:75:dd:0d:74:41:14:24:6a:60:
e0:e0:2d:a7:d8:0b:29:a5:1f:65:7c:77:03:83:b6:
ba:2a:72:e1:12:21:54:0b:89:10:ec:38:fe:52:24:
39:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E0:88:12:9E:6D:66:18:2E:32:A6:66:AB:45:3F:EF:23:F2:E8:52
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FeCIEp5tZhguMqZmq0U_7yPy6FI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.1.0/24
31.56.4.0/23
31.56.28.0/22
31.56.57.0/24
31.56.59.0/24
31.56.77.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0/22
31.56.198.0-31.56.203.255
31.56.208.0/21
31.56.220.0/23
31.56.224.0/23
31.56.228.0/22
31.56.236.0/22
31.57.12.0/23
31.57.36.0/22
31.57.52.0-31.57.63.255
31.57.94.0/23
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.231.0-31.57.235.255
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.174.0/23
31.59.212.0/22
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:ab:8f:ad:be:de:5d:1d:e2:49:3a:b1:ae:cc:44:bf:08:48:
0d:ef:e1:fb:b4:55:73:4e:b0:f3:f2:08:3f:5a:4f:f3:a0:63:
58:ec:c8:eb:3e:2d:39:99:5c:0c:2b:9a:fd:b7:e9:94:7f:b5:
9d:5a:2f:44:9d:98:15:96:fc:ea:59:92:b1:48:f8:52:eb:28:
b2:03:e5:37:3e:cf:e1:dd:44:5c:12:d6:65:17:e4:27:54:7f:
f7:3f:5b:d2:ba:9d:48:5d:f7:af:ac:c6:43:85:e4:9f:95:a3:
40:7f:8f:60:0d:79:1a:96:53:b7:aa:e6:6b:e4:63:b1:ee:ee:
b0:b6:04:27:6a:27:8f:ce:89:01:81:7a:14:fb:00:d3:10:f5:
f9:dd:12:07:61:e2:31:ab:5a:97:6d:b5:7f:c9:0e:fa:c8:fd:
3c:00:aa:56:a1:6a:e6:69:29:0a:3f:fa:31:b4:4d:99:0a:ef:
88:00:cc:47:75:0d:ed:77:d1:50:d9:b8:47:ef:30:e1:c8:11:
39:bc:0f:d5:77:9e:f7:03:c1:ea:4c:96:eb:cc:98:3b:86:76:
76:a9:28:e6:e2:49:30:88:7c:ae:ea:58:3f:db:d8:16:1d:5f:
d5:5f:72:89:ca:64:63:48:6a:ef:84:7f:44:22:e3:8e:91:ec:
02:da:c8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:30:23 2025 by rpki-client