Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Fyt4wBOWcOnncli2KDCbibBqsyU.roa
File: Fyt4wBOWcOnncli2KDCbibBqsyU.roa (raw, json)
Hash identifier: NpTfh24N9Zofso15fjpfxJ8RjV0OMu0tWJVgnqMYiCA=
Subject key identifier: 17:2B:78:C0:13:96:70:E9:E7:72:58:B6:28:30:9B:89:B0:6A:B3:25
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019777FE36A6119039829E45702C2056D026
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Fyt4wBOWcOnncli2KDCbibBqsyU.roa
Signing time: Mon 16 Jun 2025 09:07:18 +0000
ROA not before: Mon 16 Jun 2025 09:07:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.48.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.146.0/24 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.196.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.204.0/22 maxlen: 22
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.57.12.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.60.0/22 maxlen: 24
31.57.92.0/22 maxlen: 22
31.57.92.0/23 maxlen: 24
31.57.99.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.50.0/24 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.134.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.171.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.58.226.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.212.0/22 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 22 Jun 2025 19:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:fe:36:a6:11:90:39:82:9e:45:70:2c:20:56:d0:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 16 09:07:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=172b78c0139670e9e77258b628309b89b06ab325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0e:4a:28:1a:22:49:10:d0:5c:f4:e5:89:9a:
89:26:31:1c:d8:98:a2:b5:e6:86:ed:f4:10:d2:69:
a1:51:d6:dc:12:75:48:f2:2a:37:dc:0e:f4:9a:b7:
ff:f5:69:9a:04:ca:a8:d2:0b:e7:e2:00:ea:3c:4c:
b9:b5:5e:b7:aa:bd:ae:e4:7b:af:1e:b3:53:c7:19:
83:fe:ac:16:25:f2:00:ea:77:01:73:3f:cb:a4:23:
3f:fb:b7:12:bd:42:43:9f:2c:e8:a3:1a:88:40:71:
d9:75:ae:e8:d8:0b:64:76:1b:07:d2:83:17:54:96:
31:3d:1c:db:1b:25:91:4d:25:a7:4c:69:c2:66:3b:
91:bc:6d:9a:0b:c7:80:6f:13:b6:6f:1b:a6:81:17:
0b:d7:81:bf:1d:51:5f:17:88:05:3d:d5:38:2a:5c:
12:6e:8c:b3:15:1a:5e:7c:5d:88:be:8e:6c:59:42:
d5:57:e7:61:29:a0:d2:bf:88:7d:8c:dc:bc:46:84:
65:35:2b:03:96:92:38:10:f8:4a:3b:b3:a9:74:c2:
0c:a3:cc:c1:bf:99:4b:fd:89:24:e8:2e:e1:90:bf:
6c:80:5d:b6:ac:ab:70:02:4a:8e:fb:bd:f4:5a:da:
94:5b:78:eb:c7:6d:d6:6a:96:05:af:76:50:5a:54:
23:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2B:78:C0:13:96:70:E9:E7:72:58:B6:28:30:9B:89:B0:6A:B3:25
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Fyt4wBOWcOnncli2KDCbibBqsyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.48.0/24
31.56.57.0/24
31.56.77.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.146.0/24
31.56.180.0/22
31.56.188.0/22
31.56.196.0-31.56.215.255
31.56.228.0/22
31.56.236.0/22
31.57.12.0/23
31.57.36.0/22
31.57.60.0/22
31.57.92.0/22
31.57.99.0/24
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.134.0/24
31.58.152.0/22
31.58.171.0-31.58.175.255
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.212.0/22
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:37:be:7f:0c:c6:a5:68:b7:85:71:1d:e9:02:b3:92:3a:e3:
ee:22:98:95:74:ef:17:db:65:db:0b:eb:5e:d3:53:6e:36:18:
6d:09:4e:d8:9a:9f:57:d4:ea:2b:67:57:5b:f3:84:dd:b5:34:
92:2c:d6:0a:43:cf:3e:d1:71:0c:4a:83:d1:ef:14:05:ee:4e:
c4:61:f7:c0:a0:16:bb:9f:6d:a8:76:48:31:cf:3d:a9:fd:e6:
75:e2:59:ae:bf:32:5a:db:85:e3:07:2d:cc:26:9f:23:4f:c2:
8e:b4:8c:08:b8:a0:a5:14:40:55:2c:74:bf:6a:36:dc:0e:57:
e4:9e:d2:f5:99:9d:a3:fb:e0:cc:db:58:30:77:22:31:bb:a2:
29:55:a1:a5:47:82:fb:a7:7c:3d:80:8f:27:35:2e:b8:42:4a:
e4:cf:fd:cd:4d:71:84:1e:c5:6c:41:69:0c:f5:b9:da:9e:37:
05:f6:80:03:64:d0:08:69:48:d6:58:a8:77:e7:f6:d7:fe:c9:
ac:42:74:28:83:92:f6:68:fe:00:92:5e:29:ca:9b:87:97:c6:
29:88:af:f4:b8:53:42:7b:c0:7d:bb:4e:e8:9a:c1:87:1a:05:
a7:f7:6d:46:73:f8:8e:75:a5:55:2c:10:e2:68:35:ef:a8:84:
b1:0c:c2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:32:59 2025 by rpki-client