Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/I_GL_R7LbA56Akg7MS6pqLVYB50.roa
File: I_GL_R7LbA56Akg7MS6pqLVYB50.roa (raw, json)
Hash identifier: hyuGzEQhI8PTBL8iyi9m9H5Z8jp560mw4c6IYv33CMQ=
Subject key identifier: 23:F1:8B:FD:1E:CB:6C:0E:7A:02:48:3B:31:2E:A9:A8:B5:58:07:9D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197F497F5E1D4882A9905D7A40997C4DB22
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/I_GL_R7LbA56Akg7MS6pqLVYB50.roa
Signing time: Thu 10 Jul 2025 13:48:09 +0000
ROA not before: Thu 10 Jul 2025 13:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.28.0/22 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.59.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.180.0/23 maxlen: 23
31.56.188.0/22 maxlen: 24
31.56.190.0/23 maxlen: 23
31.56.198.0/23 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/23 maxlen: 23
31.56.224.0/23 maxlen: 23
31.56.228.0/22 maxlen: 24
31.56.230.0/23 maxlen: 23
31.56.236.0/22 maxlen: 24
31.56.236.0/23 maxlen: 23
31.57.10.0/24 maxlen: 24
31.57.12.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.94.0/23 maxlen: 23
31.57.104.0/21 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.120.0/23 maxlen: 23
31.57.124.0/22 maxlen: 24
31.57.126.0/23 maxlen: 23
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.186.0/23 maxlen: 23
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.231.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.87.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.152.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.220.0/23 maxlen: 23
31.58.224.0/22 maxlen: 24
31.58.226.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.96.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.136.0/21 maxlen: 24
31.59.136.0/24 maxlen: 24
31.59.138.0/23 maxlen: 23
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.174.0/23 maxlen: 23
31.59.212.0/22 maxlen: 24
31.59.212.0/24 maxlen: 24
31.59.213.0/24 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 12 Jul 2025 13:14:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f4:97:f5:e1:d4:88:2a:99:05:d7:a4:09:97:c4:db:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 10 13:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23f18bfd1ecb6c0e7a02483b312ea9a8b558079d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d1:48:6f:b5:9a:71:58:fe:fa:26:fb:ba:79:
9a:a4:22:11:b4:77:97:de:4e:b2:c6:c3:7b:c8:02:
1d:14:fa:7c:6e:d8:45:79:5d:e5:bd:eb:4f:1d:b2:
96:ea:16:15:ec:c7:d8:16:59:73:a2:6f:51:5c:43:
50:99:e5:f0:ac:74:e2:15:34:af:ce:b8:21:8d:5d:
68:bc:d6:54:a2:27:48:3b:b1:29:b8:e9:3f:17:3b:
82:0a:48:c3:9f:ea:48:b1:4e:1a:ac:47:4b:a4:3b:
12:27:92:a0:5d:74:97:77:65:ca:2c:d0:39:0d:b2:
d0:b0:c2:a8:3d:49:8d:f1:f2:95:b1:f2:74:b7:f8:
6a:1d:13:36:ad:2a:8a:1c:93:41:d4:7d:6b:21:d0:
83:eb:4b:aa:11:b8:68:90:ff:96:ff:d4:d9:10:e6:
20:49:fd:f4:6d:d3:c6:d4:ef:7c:b9:f4:c8:01:05:
e1:09:0a:30:b0:4f:51:49:3c:69:bd:71:94:eb:f5:
ea:88:cf:43:62:01:04:4b:bf:69:1a:12:0f:6e:34:
74:7e:f5:59:44:07:27:51:aa:15:21:3d:dc:d2:89:
20:be:44:55:f7:5e:96:bf:cc:b0:1e:1e:81:68:32:
4c:2f:fa:af:9b:68:4a:cd:77:3e:11:3e:c4:83:5a:
ff:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F1:8B:FD:1E:CB:6C:0E:7A:02:48:3B:31:2E:A9:A8:B5:58:07:9D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/I_GL_R7LbA56Akg7MS6pqLVYB50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.28.0/22
31.56.57.0/24
31.56.59.0/24
31.56.77.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0/22
31.56.198.0-31.56.203.255
31.56.208.0/21
31.56.220.0/23
31.56.224.0/23
31.56.228.0/22
31.56.236.0/22
31.57.10.0/24
31.57.12.0/23
31.57.36.0/22
31.57.52.0-31.57.63.255
31.57.94.0/23
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.231.0-31.57.235.255
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.174.0/23
31.59.212.0/22
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:de:05:2a:c8:d4:c2:8b:98:1b:32:b3:31:64:9a:ea:78:17:
3b:61:85:fb:b2:c7:08:4f:7d:bb:7b:fc:9c:13:75:d7:70:00:
a3:b4:86:63:27:4c:bd:08:c9:c8:45:39:6c:79:29:1b:7e:4e:
23:91:a0:fc:b1:00:94:82:38:ac:5f:2f:c2:7f:0f:f4:02:3b:
f8:36:2d:7d:6a:b0:ac:5b:2a:97:0e:52:4b:32:d2:7a:8a:70:
7a:d2:5f:e3:42:d5:93:b6:49:40:b3:0f:19:4c:b9:7e:74:d8:
1c:01:3a:4a:aa:e2:fd:20:97:30:03:65:4b:93:4d:b7:fe:dd:
1a:e1:4e:ae:7d:60:6d:b9:d5:6a:98:38:0c:9d:09:3e:db:27:
b0:b2:d4:67:ed:b4:72:23:e6:7d:2b:bf:83:68:1e:b0:20:46:
b8:1f:30:c6:ca:e3:12:93:21:4e:70:fd:47:20:20:05:ae:aa:
fe:70:90:28:4a:35:06:92:ab:9a:be:c1:77:2f:fe:89:bb:bd:
02:57:4e:42:57:a2:5e:aa:b9:cb:1c:b2:01:b6:d6:7a:0d:bd:
dd:c1:37:d9:41:41:db:b6:ed:9d:dd:7e:a1:62:e6:c9:27:63:
58:c2:20:ae:89:13:ad:d7:4e:2e:1d:a9:5e:76:ba:c5:67:e1:
55:5f:3a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:41:28 2025 by rpki-client