Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/K70_PjbhRDrTsOEB1blpkvolsEo.roa
File: K70_PjbhRDrTsOEB1blpkvolsEo.roa (raw, json)
Hash identifier: UKkYQkWfVParZGbtex96t2BDaKB8J7ez1EJPFmh+M2o=
Subject key identifier: 2B:BD:3F:3E:36:E1:44:3A:D3:B0:E1:01:D5:B9:69:92:FA:25:B0:4A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197D0908A347FEFE0EF20CFC840E193BBDD
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/K70_PjbhRDrTsOEB1blpkvolsEo.roa
Signing time: Thu 03 Jul 2025 13:53:42 +0000
ROA not before: Thu 03 Jul 2025 13:53:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.28.0/22 maxlen: 24
31.56.32.0/24 maxlen: 24
31.56.44.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.112.0/24 maxlen: 24
31.56.114.0/23 maxlen: 24
31.56.117.0/24 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.180.0/23 maxlen: 23
31.56.188.0/22 maxlen: 24
31.56.190.0/23 maxlen: 23
31.56.198.0/23 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/23 maxlen: 23
31.56.224.0/23 maxlen: 23
31.56.228.0/22 maxlen: 24
31.56.230.0/23 maxlen: 23
31.56.233.0/24 maxlen: 24
31.56.236.0/22 maxlen: 24
31.56.236.0/23 maxlen: 23
31.57.12.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.94.0/23 maxlen: 23
31.57.104.0/21 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.120.0/23 maxlen: 23
31.57.124.0/22 maxlen: 24
31.57.126.0/23 maxlen: 23
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.225.0/24 maxlen: 24
31.57.231.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.58.226.0/24 maxlen: 24
31.59.70.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.128.0/24 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.136.0/24 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.212.0/22 maxlen: 24
31.59.212.0/24 maxlen: 24
31.59.213.0/24 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
31.59.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Jul 2025 06:10:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d0:90:8a:34:7f:ef:e0:ef:20:cf:c8:40:e1:93:bb:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 3 13:53:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2bbd3f3e36e1443ad3b0e101d5b96992fa25b04a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:da:90:1b:5b:a7:9a:ef:b1:d9:f3:e8:15:72:
1b:af:d5:e0:6d:e0:e0:fc:2c:af:7a:b9:ae:0a:83:
40:4e:68:51:14:d1:9f:91:d9:d0:c6:01:ea:e4:99:
57:6d:78:23:fd:69:dd:7d:23:44:18:17:7d:f1:d5:
d8:11:c1:43:bc:9a:14:33:34:01:fe:7e:63:93:5b:
c1:75:20:5f:9e:23:f9:37:f0:69:16:5c:24:f4:54:
53:e4:d6:4d:d0:03:67:ed:2a:51:49:cd:c4:32:cc:
22:27:5f:51:85:b9:61:71:7e:f2:79:c4:53:e8:9d:
14:05:53:20:45:14:e1:54:11:4f:f8:f9:2e:27:de:
8b:a1:3d:00:9c:12:d5:f6:fa:10:62:86:42:97:ff:
81:f3:48:32:a3:5b:41:10:32:d0:13:d4:c6:a7:a4:
22:7a:01:a8:f4:a6:33:f8:10:47:73:cb:bd:d5:ea:
08:5f:5b:5d:87:47:4a:24:87:45:53:75:17:42:b4:
b8:5d:19:e5:44:cb:a6:d2:0f:8b:21:f1:45:91:9d:
fb:01:ca:21:09:de:cd:f5:ad:dd:4d:73:8e:34:3d:
38:49:76:70:b1:e2:01:55:b2:da:12:8d:a7:28:06:
d1:06:9d:e7:12:49:2e:00:cd:f6:2d:06:74:36:30:
8e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BD:3F:3E:36:E1:44:3A:D3:B0:E1:01:D5:B9:69:92:FA:25:B0:4A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/K70_PjbhRDrTsOEB1blpkvolsEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.28.0-31.56.32.255
31.56.44.0/24
31.56.57.0/24
31.56.77.0/24
31.56.90.0/23
31.56.104.0-31.56.112.255
31.56.114.0/23
31.56.117.0-31.56.123.255
31.56.180.0/22
31.56.188.0/22
31.56.198.0-31.56.203.255
31.56.208.0/21
31.56.220.0/23
31.56.224.0/23
31.56.228.0/22
31.56.233.0/24
31.56.236.0/22
31.57.12.0/23
31.57.36.0/22
31.57.52.0-31.57.63.255
31.57.94.0/23
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.231.0-31.57.235.255
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.70.0/24
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.128.0/24
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.212.0/22
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:54:cf:81:8f:ad:ec:06:12:09:b4:b4:07:a0:8c:04:23:88:
81:be:15:5d:0f:b5:8f:2f:72:7d:d2:47:e8:9e:69:85:c8:7a:
61:b1:26:b1:5a:f6:0d:83:16:3d:77:36:5c:4d:8e:14:bb:bc:
05:59:bd:6d:12:48:27:fa:50:78:4c:bd:7d:84:92:f5:b3:0b:
9f:da:2b:ae:76:99:98:34:98:2f:32:98:5b:32:41:b2:81:a7:
56:f7:c9:67:1a:a0:2a:bd:78:79:18:05:3b:47:ca:70:fa:7f:
28:4c:8e:e0:d9:59:21:3a:cc:cb:20:c4:7c:1b:3e:6a:76:16:
67:75:bd:05:42:26:ec:a8:4d:fe:63:66:bf:ae:38:a9:23:7e:
74:e1:7c:17:e0:e9:01:03:ef:1b:9a:45:6f:10:39:1c:27:6b:
ca:0c:d4:ea:72:b4:84:e0:d6:11:ee:20:02:0c:e5:d1:56:e9:
e6:bf:0a:df:e2:96:20:18:6f:4d:4a:cc:1a:8e:af:b6:5d:e9:
6a:a0:ea:6c:0d:68:41:b8:ef:1e:70:2c:12:be:9c:d6:c1:82:
54:3c:75:38:34:7e:5a:1c:5f:bb:dc:9b:84:17:58:af:fb:76:
8d:2d:48:8a:84:76:50:d1:43:92:13:82:e6:68:7a:8b:ee:02:
b7:79:a8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:51:33 2025 by rpki-client