Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QARO0xNMFnH2gp3wxiK5BhKAum4.roa
File: QARO0xNMFnH2gp3wxiK5BhKAum4.roa (raw, json)
Hash identifier: gHqSLzRWsiY/ioC5GBEmSl+w5xeG2/yZiPoUby/RrS4=
Subject key identifier: 40:04:4E:D3:13:4C:16:71:F6:82:9D:F0:C6:22:B9:06:12:80:BA:6E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197FEC58D1892B11DE986C290684972234E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QARO0xNMFnH2gp3wxiK5BhKAum4.roa
Signing time: Sat 12 Jul 2025 13:14:08 +0000
ROA not before: Sat 12 Jul 2025 13:14:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.28.0/22 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.59.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.180.0/23 maxlen: 23
31.56.188.0/22 maxlen: 24
31.56.190.0/23 maxlen: 23
31.56.198.0/23 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.207.0/24 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/23 maxlen: 23
31.56.224.0/23 maxlen: 23
31.56.228.0/22 maxlen: 24
31.56.230.0/23 maxlen: 23
31.56.236.0/22 maxlen: 24
31.56.236.0/23 maxlen: 23
31.57.10.0/24 maxlen: 24
31.57.12.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.94.0/23 maxlen: 23
31.57.104.0/21 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.120.0/23 maxlen: 23
31.57.124.0/22 maxlen: 24
31.57.126.0/23 maxlen: 23
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.183.0/24 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.186.0/23 maxlen: 23
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.231.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.87.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.152.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.220.0/23 maxlen: 23
31.58.224.0/22 maxlen: 24
31.58.226.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.96.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.136.0/21 maxlen: 24
31.59.136.0/24 maxlen: 24
31.59.138.0/23 maxlen: 23
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.174.0/23 maxlen: 23
31.59.212.0/22 maxlen: 24
31.59.212.0/24 maxlen: 24
31.59.213.0/24 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 13 Jul 2025 09:07:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:fe:c5:8d:18:92:b1:1d:e9:86:c2:90:68:49:72:23:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 12 13:14:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40044ed3134c1671f6829df0c622b9061280ba6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f5:a3:15:5f:f3:60:13:d6:2b:bf:20:63:6d:
ed:5b:08:0b:be:8f:6b:6b:a0:87:02:1f:81:be:74:
ad:23:d7:6a:8e:45:4c:f3:bb:e6:dd:43:ee:fd:6d:
d4:34:8f:c7:9a:12:03:b8:a5:19:ef:61:f2:a8:6d:
ce:79:1e:34:4c:61:3b:4e:ba:04:ff:6c:f7:2a:ef:
94:30:43:88:8d:f1:2c:92:bc:0e:8b:c4:1d:33:7d:
4e:30:12:98:38:3a:95:29:67:02:b6:81:7e:ac:ac:
67:04:9c:4b:a4:ec:15:5c:a6:54:c9:8b:73:e6:94:
ba:6b:5a:0d:40:d5:aa:60:5f:b5:fc:8e:55:55:22:
8f:60:8d:d6:22:57:aa:e7:27:22:cf:d0:f6:51:ca:
d8:c6:24:f3:53:40:fe:89:da:c5:b4:0e:aa:6a:75:
16:de:ef:16:63:cd:4e:78:8a:ff:39:37:58:35:72:
b2:20:2f:91:a7:78:51:39:73:a0:af:07:f4:5c:b4:
38:0b:1b:5b:d2:e7:22:9b:48:96:58:26:b9:1c:60:
67:7b:75:ec:39:d7:ef:1a:e6:a7:a2:fd:0a:af:fa:
21:0a:cd:b7:7e:bf:77:2b:5f:f5:69:6c:20:a0:d4:
20:b1:7b:15:73:fc:a3:c3:32:86:8d:57:97:1c:a8:
14:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:04:4E:D3:13:4C:16:71:F6:82:9D:F0:C6:22:B9:06:12:80:BA:6E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QARO0xNMFnH2gp3wxiK5BhKAum4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.28.0/22
31.56.57.0/24
31.56.59.0/24
31.56.77.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0/22
31.56.198.0-31.56.203.255
31.56.207.0-31.56.215.255
31.56.220.0/23
31.56.224.0/23
31.56.228.0/22
31.56.236.0/22
31.57.10.0/24
31.57.12.0/23
31.57.36.0/22
31.57.52.0-31.57.63.255
31.57.94.0/23
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.231.0-31.57.235.255
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.174.0/23
31.59.212.0/22
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:c3:14:a6:f5:22:09:7a:c8:e7:4d:e6:b7:7d:c0:69:45:f7:
ce:82:1b:c0:96:d7:2a:d1:41:ca:6e:9e:bf:a1:1c:cd:2a:72:
8b:00:24:1e:20:96:f4:ec:3e:1e:ba:79:f5:ea:f8:2e:e7:2c:
c9:92:d1:28:fb:22:b4:f7:85:1d:6c:40:10:52:b9:d3:89:74:
32:6f:96:2c:bd:71:a9:7a:f2:b2:f5:e0:db:75:18:99:23:be:
31:cd:2e:18:8f:c3:96:06:34:3f:57:77:54:e9:6f:e5:16:d1:
10:63:10:89:14:ea:99:42:c3:bf:f3:8a:f6:58:10:7c:4d:7a:
29:a1:85:c4:d8:1a:a0:af:67:1c:97:87:48:09:c4:6e:11:9e:
9e:13:c2:a9:90:0f:d3:1c:27:8f:8e:eb:bd:1b:af:9f:97:2f:
fa:34:24:3d:24:f1:0b:60:15:4c:1a:c8:82:fe:bb:09:c3:17:
ca:7b:e8:fc:85:53:37:37:b6:57:cd:3c:12:c8:2e:e1:98:0e:
44:2a:97:45:99:52:b8:67:10:49:a3:25:d2:75:2e:25:0d:3a:
49:94:26:66:4f:55:bf:41:a3:35:25:c2:65:30:b1:7d:58:26:
8d:10:64:9f:ef:0e:f5:31:57:06:a3:ee:d0:3c:0a:db:b8:3f:
37:c8:68:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:36:25 2025 by rpki-client