Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QZ1jnA1eXy0iG7akxTlKZ0rbgr4.roa
File: QZ1jnA1eXy0iG7akxTlKZ0rbgr4.roa (raw, json)
Hash identifier: J80ZciJUiSApbLREfItu2f1qKisYDANoxDLzHmerRDs=
Subject key identifier: 41:9D:63:9C:0D:5E:5F:2D:22:1B:B6:A4:C5:39:4A:67:4A:DB:82:BE
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019823821B5E01AAA18924B9F3857F7ECD41
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QZ1jnA1eXy0iG7akxTlKZ0rbgr4.roa
Signing time: Sat 19 Jul 2025 16:26:25 +0000
ROA not before: Sat 19 Jul 2025 16:26:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.28.0/22 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.59.0/24 maxlen: 24
31.56.76.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.107.0/24 maxlen: 24
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.180.0/23 maxlen: 23
31.56.188.0/22 maxlen: 24
31.56.190.0/23 maxlen: 23
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/23 maxlen: 23
31.56.224.0/23 maxlen: 23
31.56.228.0/22 maxlen: 24
31.56.230.0/23 maxlen: 23
31.56.236.0/22 maxlen: 24
31.56.236.0/23 maxlen: 23
31.57.12.0/23 maxlen: 24
31.57.14.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.94.0/23 maxlen: 23
31.57.104.0/21 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.120.0/23 maxlen: 23
31.57.124.0/22 maxlen: 24
31.57.126.0/23 maxlen: 23
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.183.0/24 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.186.0/23 maxlen: 23
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.231.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.87.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.152.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.220.0/23 maxlen: 23
31.58.224.0/22 maxlen: 24
31.58.226.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.96.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.136.0/21 maxlen: 24
31.59.136.0/24 maxlen: 24
31.59.138.0/23 maxlen: 23
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/23 maxlen: 23
31.59.174.0/23 maxlen: 23
31.59.212.0/22 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.230.0/24 maxlen: 24
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 20 Jul 2025 18:46:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:23:82:1b:5e:01:aa:a1:89:24:b9:f3:85:7f:7e:cd:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 19 16:26:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=419d639c0d5e5f2d221bb6a4c5394a674adb82be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:44:62:a7:62:6e:f0:7f:f1:54:7e:07:da:27:
12:2d:99:04:6a:64:ca:7c:63:0d:6b:a2:6b:0a:c8:
5f:84:09:89:71:c1:68:52:fd:bd:ce:3f:fc:76:60:
bd:d6:e1:98:f9:5f:1f:aa:43:31:30:16:ea:54:65:
68:bf:20:3e:e4:e0:e1:1a:c8:36:cb:c6:f9:a2:56:
d3:c9:6f:2d:2a:3c:07:3c:98:73:09:be:df:2d:4c:
f5:10:76:4d:a9:a2:28:38:03:92:10:d9:d1:89:81:
0c:a0:6b:b2:38:2c:72:4f:2f:c9:ea:cb:38:6a:39:
f0:92:e8:1a:63:83:19:c8:19:c7:2c:c1:0c:81:30:
fd:f2:ce:20:e5:2b:36:3e:bd:44:d4:0e:98:3e:68:
b7:c9:88:17:56:52:59:fa:71:e3:6e:1a:d7:68:68:
3c:8b:90:e2:a1:0b:0e:f7:6a:54:77:3d:7f:e8:ca:
a7:01:94:6b:1e:9c:fb:7e:63:8c:f1:e3:b7:6f:ba:
9d:1f:5f:bc:c4:b0:af:de:53:90:60:3a:fa:e5:39:
9b:57:ab:99:b3:c1:80:b7:d5:86:9f:c8:16:e2:74:
84:4c:9e:3e:5c:00:70:99:40:26:1f:e8:dd:92:b8:
de:c7:59:ed:7d:4e:31:c1:20:7f:f7:32:18:73:cf:
cf:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9D:63:9C:0D:5E:5F:2D:22:1B:B6:A4:C5:39:4A:67:4A:DB:82:BE
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QZ1jnA1eXy0iG7akxTlKZ0rbgr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.28.0/22
31.56.57.0/24
31.56.59.0/24
31.56.76.0/23
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0/22
31.56.200.0/22
31.56.208.0/21
31.56.220.0/23
31.56.224.0/23
31.56.228.0/22
31.56.236.0/22
31.57.12.0/22
31.57.36.0/22
31.57.52.0-31.57.63.255
31.57.94.0/23
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.231.0-31.57.235.255
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.136.0-31.59.151.255
31.59.160.0-31.59.169.255
31.59.174.0/23
31.59.212.0/22
31.59.224.0/22
31.59.230.0/24
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
85:2c:1d:32:c9:e6:d4:74:04:eb:77:0b:43:e2:77:31:6b:12:
f7:7e:a4:5e:d3:d7:ef:04:f5:08:b5:9c:88:c6:d7:d1:9a:a1:
22:c3:76:18:4b:d1:ea:12:9d:17:ec:76:0c:67:e2:30:43:17:
27:5c:65:e3:6b:29:59:fd:37:d5:4f:92:c5:8c:83:88:e4:07:
5d:1f:b2:63:c6:7f:60:77:71:93:90:0f:04:5b:63:25:4c:28:
b7:c8:29:44:bd:d3:cc:50:f7:f3:e8:b0:6d:2e:0b:fc:da:2a:
e3:b8:75:9e:73:41:f8:90:9e:7f:00:ec:8e:02:1a:7d:fe:72:
75:d0:d3:81:63:58:d5:d6:ac:07:97:65:76:27:90:18:8e:a5:
fd:8f:84:7e:ec:34:0d:41:38:4a:6a:5d:0d:74:6d:0c:4a:56:
dd:3b:2d:a5:eb:af:5e:6b:6e:cf:0e:b0:f0:2b:3f:89:d7:c8:
d4:d3:f8:72:2d:5f:26:ce:af:33:cd:0a:b4:ff:1b:f2:dc:61:
fb:7d:3c:c5:9b:61:49:25:b4:cd:73:c3:36:49:a9:4c:63:11:
e1:e7:6f:9b:54:e6:76:7f:94:7b:7b:ba:91:2c:e1:7a:7f:3e:
8f:70:1c:62:3c:ff:f7:5c:7e:67:03:60:f7:77:11:3a:6f:2d:
2d:06:ae:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:49:48 2025 by rpki-client