Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QPRo-VKXXLa_IUOrTLlCqMNXnw0.roa
File: QPRo-VKXXLa_IUOrTLlCqMNXnw0.roa (raw, json)
Hash identifier: p1Be5rpZFFmx9F54hDw7j8U0j0IDV/KEnRX8QIYXUIs=
Subject key identifier: 40:F4:68:F9:52:97:5C:B6:BF:21:43:AB:4C:B9:42:A8:C3:57:9F:0D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197440EEC76CFCAFE04A0F0288CF3DA2993
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QPRo-VKXXLa_IUOrTLlCqMNXnw0.roa
Signing time: Fri 06 Jun 2025 07:05:18 +0000
ROA not before: Fri 06 Jun 2025 07:05:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.57.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.146.0/24 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.196.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.57.12.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.60.0/22 maxlen: 24
31.57.92.0/22 maxlen: 22
31.57.104.0/21 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.244.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.134.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.212.0/22 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 07 Jun 2025 07:24:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:44:0e:ec:76:cf:ca:fe:04:a0:f0:28:8c:f3:da:29:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 6 07:05:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40f468f952975cb6bf2143ab4cb942a8c3579f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:94:96:82:c4:d9:f4:17:e7:84:7a:e6:f5:39:
2d:d0:d6:78:54:5f:e5:32:32:d6:65:f6:aa:6c:5b:
c1:09:f9:f5:53:15:4a:f7:8f:fe:29:e6:bf:ec:2d:
6b:3b:c5:50:3e:a2:14:6f:76:a8:0e:fe:c2:b4:70:
7f:ec:2d:e2:25:47:cc:4d:e7:39:9d:58:2f:22:33:
8e:92:7b:f5:80:11:16:c5:10:91:7c:87:aa:ac:92:
7a:af:09:4b:d0:64:d8:3b:8d:ab:9f:17:6e:8a:c0:
af:f9:9c:02:8d:75:d6:26:3b:06:04:c2:9d:ec:ef:
b1:d7:60:3c:f0:60:16:17:33:89:d9:41:a5:75:9c:
3c:e4:55:5f:b7:4c:83:66:f7:65:49:52:1d:a7:bf:
a5:8e:cb:c5:83:3f:c3:5d:2d:ab:ed:55:60:66:c2:
c2:dd:2a:4b:ef:d3:e3:d8:8d:ba:0e:4a:61:1c:59:
25:c7:4b:39:ff:e8:00:c5:d2:b8:a1:69:d6:90:98:
a0:cb:1b:25:d9:cf:8a:c3:e1:dc:1a:34:b8:0b:2b:
91:75:3d:4b:82:ae:6f:ad:d4:4d:96:ae:f6:20:ba:
f9:1d:b0:c6:0c:e6:56:68:c1:94:c0:d2:c8:0e:0f:
84:33:c0:3d:5f:b2:21:31:02:5d:20:24:93:42:93:
d5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F4:68:F9:52:97:5C:B6:BF:21:43:AB:4C:B9:42:A8:C3:57:9F:0D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QPRo-VKXXLa_IUOrTLlCqMNXnw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.57.0/24
31.56.77.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.146.0/24
31.56.180.0/22
31.56.188.0/22
31.56.196.0-31.56.203.255
31.56.208.0/21
31.56.228.0/22
31.56.236.0/22
31.57.12.0/23
31.57.36.0/22
31.57.60.0/22
31.57.92.0/22
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.244.0/24
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.134.0/24
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.212.0/22
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
57:b6:23:43:6c:96:fe:fe:03:fe:69:67:e5:dc:5d:00:18:13:
f9:65:31:f4:5b:08:5d:55:b1:bf:b5:bd:76:40:55:3b:7d:3f:
9a:56:44:31:7b:c8:0e:22:70:bb:5e:d8:4a:30:ad:ec:98:ad:
23:75:5c:f6:66:58:04:17:57:a0:6e:34:ef:a4:3f:cc:5e:66:
fe:72:40:30:5e:58:34:66:6d:f9:b0:33:c5:6e:a9:6a:f7:84:
f8:c1:95:4e:95:57:ce:6c:de:d8:af:a8:bf:cd:a3:bb:01:bc:
bd:41:13:05:24:c1:2e:f7:ea:60:b4:8f:18:81:a2:4a:aa:0f:
3d:99:a0:81:c5:2b:32:5e:f2:7e:f7:61:b8:e5:f1:ad:f7:2e:
d0:49:13:de:9b:2b:dd:f6:25:8b:3b:be:c7:a2:69:c5:5e:41:
cb:64:73:28:9f:fa:d6:6c:8d:79:83:b1:13:a8:b6:e6:4f:8e:
fa:a6:3a:b0:df:ab:3a:7b:a2:2c:5c:ad:a0:ad:80:d0:71:9c:
71:32:3d:2f:7d:4c:da:0e:0c:76:32:e3:f0:d1:b9:84:7c:06:
87:55:4e:de:49:2d:bf:1c:e0:fd:c6:ac:22:b6:30:cf:c8:99:
bb:ee:89:72:bf:49:d3:a1:05:c6:35:2b:1f:d2:88:74:e5:be:
a4:81:2f:b8
-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgISAZdEDux2z8r+BKDwKIzz2imTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNjA2MDcwNTE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MGY0NjhmOTUyOTc1Y2I2YmYyMTQzYWI0Y2I5NDJhOGMzNTc5ZjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZSWgsTZ9BfnhHrm9Tkt0NZ4VF/l
MjLWZfaqbFvBCfn1UxVK94/+Kea/7C1rO8VQPqIUb3aoDv7CtHB/7C3iJUfMTec5
nVgvIjOOknv1gBEWxRCRfIeqrJJ6rwlL0GTYO42rnxduisCv+ZwCjXXWJjsGBMKd
7O+x12A88GAWFzOJ2UGldZw85FVft0yDZvdlSVIdp7+ljsvFgz/DXS2r7VVgZsLC
3SpL79Pj2I26DkphHFklx0s5/+gAxdK4oWnWkJigyxsl2c+Kw+HcGjS4CyuRdT1L
gq5vrdRNlq72ILr5HbDGDOZWaMGUwNLIDg+EM8A9X7IhMQJdICSTQpPVrwIDAQAB
o4IDZDCCA2AwHQYDVR0OBBYEFED0aPlSl1y2vyFDq0y5QqjDV58NMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvUVBSby1WS1hYTGFfSVVPclRMbENxTU5YbncwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBeAYIKwYBBQUHAQcBAf8EggFnMIIBYzCCAV8EAgABMIIB
VwMEAR84BAMEAB84OQMEAB84TQMEAR84WgMEAx84aAMEAR84cjAMAwQBHzh2AwQC
Hzh4AwQAHziSAwQCHzi0AwQCHzi8MAwDBAIfOMQDBAIfOMgDBAMfONADBAIfOOQD
BAIfOOwDBAEfOQwDBAIfOSQDBAIfOTwDBAIfOVwDBAMfOWgDBAMfOXgDBAEfOYQD
BAMfOYgDBAEfOZIDBAIfOagwDAMEBB85sAMEAh85uAMEAh85wAMEAR85yDAMAwQE
HznQAwQCHzngAwQCHznoAwQAHzn0MAsDBAEfOfoDAwEfOAMEAR86IgMEAR86MgME
AR86QAMEAh86RAMEAh86VAMEAB86hgMEAh86mAMEAh86rDAMAwQCHzrcAwQCHzrg
AwQCHztMAwQCHztgAwQCHztwMAwDBAMfO4gDBAMfO5ADBAMfO6ADBAIfO9QDBAIf
O+ADBAIfO+gwDQYJKoZIhvcNAQELBQADggEBAFe2I0Nslv7+A/5pZ+XcXQAYE/ll
MfRbCF1Vsb+1vXZAVTt9P5pWRDF7yA4icLte2EowreyYrSN1XPZmWAQXV6BuNO+k
P8xeZv5yQDBeWDRmbfmwM8VuqWr3hPjBlU6VV85s3tivqL/No7sBvL1BEwUkwS73
6mC0jxiBokqqDz2ZoIHFKzJe8n73Ybjl8a33LtBJE96bK932JYs7vseiacVeQctk
cyif+tZsjXmDsROotuZPjvqmOrDfqzp7oixcraCtgNBxnHEyPS99TNoODHYy4/DR
uYR8BodVTt5JLb8c4P3GrCK2MM/ImbvuiXK/SdOhBcY1Kx/SiHTlvqSBL7g=
-----END CERTIFICATE-----
Generated at Tue Jul 29 07:42:17 2025 by rpki-client