Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/M6dBMOJu2geyQse6oZZvg-Hv70Q.roa
File: M6dBMOJu2geyQse6oZZvg-Hv70Q.roa (raw, json)
Hash identifier: uyhXb29RXTtmwlUYhSwapBuS16jJO8yQBMeYKpTJn0s=
Subject key identifier: 33:A7:41:30:E2:6E:DA:07:B2:42:C7:BA:A1:96:6F:83:E1:EF:EF:44
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01981CDA4FA5ED5CC1D0D7453FAF8709EFF5
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/M6dBMOJu2geyQse6oZZvg-Hv70Q.roa
Signing time: Fri 18 Jul 2025 09:25:25 +0000
ROA not before: Fri 18 Jul 2025 09:25:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.28.0/22 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.59.0/24 maxlen: 24
31.56.76.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.107.0/24 maxlen: 24
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.180.0/23 maxlen: 23
31.56.188.0/22 maxlen: 24
31.56.190.0/23 maxlen: 23
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/23 maxlen: 23
31.56.224.0/23 maxlen: 23
31.56.228.0/22 maxlen: 24
31.56.230.0/23 maxlen: 23
31.56.236.0/22 maxlen: 24
31.56.236.0/23 maxlen: 23
31.57.12.0/23 maxlen: 24
31.57.14.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.94.0/23 maxlen: 23
31.57.104.0/21 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.120.0/23 maxlen: 23
31.57.124.0/22 maxlen: 24
31.57.126.0/23 maxlen: 23
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.183.0/24 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.186.0/23 maxlen: 23
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.231.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.87.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.152.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.220.0/23 maxlen: 23
31.58.224.0/22 maxlen: 24
31.58.226.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.96.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.136.0/21 maxlen: 24
31.59.136.0/24 maxlen: 24
31.59.138.0/23 maxlen: 23
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/23 maxlen: 23
31.59.174.0/23 maxlen: 23
31.59.212.0/22 maxlen: 24
31.59.212.0/24 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.230.0/24 maxlen: 24
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 19 Jul 2025 16:26:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1c:da:4f:a5:ed:5c:c1:d0:d7:45:3f:af:87:09:ef:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 18 09:25:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33a74130e26eda07b242c7baa1966f83e1efef44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a8:ff:90:40:f3:55:75:cd:51:df:d0:e8:45:
08:8e:9f:1f:eb:28:49:41:60:fe:80:03:01:3d:52:
ff:6a:9f:12:35:8e:df:48:96:cc:a5:4c:a9:5a:a0:
2e:b0:4c:60:d2:dc:4e:e7:d3:6d:3f:4a:8e:cc:35:
a6:b5:08:88:66:a1:21:3e:91:95:de:ce:7d:86:a5:
b7:07:4a:4e:c2:5e:8d:b8:1c:a2:3c:0d:2c:df:ea:
4c:34:fa:24:9c:4b:f1:41:29:c9:69:ad:61:1e:bc:
f4:a5:03:f4:ef:dc:24:10:2c:fb:19:b0:78:aa:86:
e6:56:14:f5:fd:31:95:fe:c7:22:bf:2b:3c:99:9a:
32:c2:de:d6:46:ff:dc:00:a5:f2:4f:a5:79:6f:c1:
1c:18:9d:7b:ef:ed:11:3a:a8:e9:dc:64:33:d3:33:
c0:60:2a:4c:b5:ba:39:ad:59:47:3e:f8:56:c4:f4:
11:4a:ee:9d:fa:0d:32:e9:4c:e9:26:a6:dd:ff:fe:
a8:26:45:90:35:53:10:bc:8b:71:b7:0a:4f:da:5e:
1e:f2:63:0e:c3:6c:b2:4b:ba:2f:b0:62:13:cf:e4:
8f:09:bf:e6:cc:55:01:bb:19:0b:55:ef:0c:e7:25:
e6:57:7a:24:11:0d:2e:ce:76:b6:ea:31:93:09:35:
85:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A7:41:30:E2:6E:DA:07:B2:42:C7:BA:A1:96:6F:83:E1:EF:EF:44
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/M6dBMOJu2geyQse6oZZvg-Hv70Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.28.0/22
31.56.57.0/24
31.56.59.0/24
31.56.76.0/23
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0/22
31.56.200.0/22
31.56.208.0/21
31.56.220.0/23
31.56.224.0/23
31.56.228.0/22
31.56.236.0/22
31.57.12.0/22
31.57.36.0/22
31.57.52.0-31.57.63.255
31.57.94.0/23
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.231.0-31.57.235.255
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.136.0-31.59.151.255
31.59.160.0-31.59.169.255
31.59.174.0/23
31.59.212.0/22
31.59.224.0/22
31.59.230.0/24
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
06:2c:66:d5:01:a1:a2:e3:ef:a0:9f:a5:ec:39:5b:da:8c:29:
d2:48:e5:e0:8d:fc:a3:b8:c4:cd:b7:af:19:18:3b:ec:af:8a:
94:3c:da:28:4a:16:2d:50:e6:97:bd:c4:9c:89:5a:9b:44:5f:
44:e8:a6:e6:81:69:96:a5:63:f8:67:26:65:42:32:66:f5:07:
f0:de:d1:ad:e3:cf:6a:95:b1:a1:8f:99:38:cb:a3:00:58:77:
02:ea:bf:68:05:77:63:11:d1:d5:50:c9:c0:fa:6f:07:6d:e5:
1f:01:83:4c:9e:3e:12:c8:a6:d4:8f:ef:24:22:dd:fd:f4:61:
22:1f:f5:f9:f0:15:0b:a5:30:4f:da:d0:c7:d3:3f:76:d0:44:
78:92:86:18:cf:49:de:2c:35:a1:ad:35:7d:2c:46:d8:3a:f8:
55:e6:96:e2:d8:6f:3b:84:32:99:a3:2a:d5:5c:20:3a:b2:32:
11:94:20:87:43:4f:ec:e4:9e:7e:fc:77:56:75:af:c0:9f:ba:
af:fd:aa:bf:ef:23:7a:16:db:f0:07:68:d9:c9:e2:90:dc:53:
fe:bb:80:2e:a3:66:e8:b7:b8:8f:25:ba:31:b0:bf:bd:34:56:
c3:bc:22:ab:ea:bf:24:6e:5e:f6:36:85:bd:6c:8c:ff:74:21:
31:62:1c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:44:15 2025 by rpki-client