Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TAZsD5YypM2svGruqpuA7w6Bi9I.roa
File: TAZsD5YypM2svGruqpuA7w6Bi9I.roa (raw, json)
Hash identifier: 8zQEtuXmVeURK1vHcydlZ79rkU737seR84jgDBhxDIo=
Subject key identifier: 4C:06:6C:0F:96:32:A4:CD:AC:BC:6A:EE:AA:9B:80:EF:0E:81:8B:D2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0198391AAC4E6D8DEBE080A096383D978B76
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TAZsD5YypM2svGruqpuA7w6Bi9I.roa
Signing time: Wed 23 Jul 2025 21:05:06 +0000
ROA not before: Wed 23 Jul 2025 21:05:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.28.0/22 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.59.0/24 maxlen: 24
31.56.76.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.107.0/24 maxlen: 24
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.180.0/23 maxlen: 23
31.56.188.0/22 maxlen: 24
31.56.190.0/23 maxlen: 23
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/23 maxlen: 23
31.56.224.0/23 maxlen: 23
31.56.228.0/22 maxlen: 24
31.56.230.0/23 maxlen: 23
31.56.236.0/22 maxlen: 24
31.56.236.0/23 maxlen: 23
31.57.12.0/23 maxlen: 24
31.57.14.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.94.0/23 maxlen: 23
31.57.104.0/21 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.120.0/23 maxlen: 23
31.57.124.0/22 maxlen: 24
31.57.126.0/23 maxlen: 23
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.186.0/23 maxlen: 23
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.87.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.152.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.220.0/23 maxlen: 23
31.58.224.0/22 maxlen: 24
31.58.226.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.96.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.136.0/21 maxlen: 24
31.59.136.0/24 maxlen: 24
31.59.138.0/23 maxlen: 23
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/23 maxlen: 23
31.59.174.0/23 maxlen: 23
31.59.224.0/22 maxlen: 22
31.59.230.0/24 maxlen: 24
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 24 Jul 2025 10:40:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:39:1a:ac:4e:6d:8d:eb:e0:80:a0:96:38:3d:97:8b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 23 21:05:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c066c0f9632a4cdacbc6aeeaa9b80ef0e818bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d7:30:d0:88:8b:9d:00:0f:e6:ab:20:12:82:
5d:25:11:5f:3f:ae:f8:22:34:0c:81:ab:0c:d3:0e:
61:d7:63:38:c2:26:1f:dd:ef:44:17:d5:92:51:5b:
ba:b3:7e:4f:d6:00:fe:8b:af:3f:12:e9:f3:5f:62:
94:1f:fb:bf:5e:d1:f5:f9:d9:a4:4e:58:b8:57:76:
e2:90:f9:78:f6:d8:1a:62:14:ca:bd:44:fe:5f:f7:
f5:33:8f:db:2a:0c:f1:e1:01:41:b2:ec:7d:6b:25:
f6:6d:81:3e:27:f4:6e:35:e9:1c:05:73:cc:ec:86:
7a:55:d6:f8:5e:51:a5:88:d5:e4:1b:12:f2:e8:b3:
2d:e6:d4:31:ba:70:fe:5a:d0:e8:a3:e1:23:d6:43:
fd:ed:72:52:0f:f2:59:5c:ef:c7:93:50:ff:25:b5:
17:71:0e:a7:a3:ec:88:db:ae:7d:68:88:1d:f4:4d:
73:9e:7f:fe:fb:8b:e7:17:99:ca:7a:31:94:aa:fa:
8d:0e:87:48:02:c3:d7:f4:e9:b8:10:b8:8f:b6:09:
8d:c8:1b:7a:cb:0e:69:3c:3e:6b:62:de:5e:29:ae:
03:e5:dc:73:72:96:2b:a8:1f:be:ae:74:8d:ce:a2:
63:d7:b1:52:4d:5b:81:8f:0d:54:9e:18:99:74:39:
4b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:06:6C:0F:96:32:A4:CD:AC:BC:6A:EE:AA:9B:80:EF:0E:81:8B:D2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TAZsD5YypM2svGruqpuA7w6Bi9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.28.0/22
31.56.57.0/24
31.56.59.0/24
31.56.76.0/23
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0/22
31.56.200.0/22
31.56.208.0/21
31.56.220.0/23
31.56.224.0/23
31.56.228.0/22
31.56.236.0/22
31.57.12.0/22
31.57.36.0/22
31.57.52.0-31.57.63.255
31.57.94.0/23
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.136.0-31.59.151.255
31.59.160.0-31.59.169.255
31.59.174.0/23
31.59.224.0/22
31.59.230.0/24
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:96:47:d5:68:44:66:a8:c3:00:e3:21:60:41:79:67:20:9e:
d9:5c:38:7a:29:4e:ce:47:cc:10:04:05:55:18:0a:0e:70:a7:
b9:b2:c9:d0:b8:cd:1f:7c:20:ca:d5:b2:23:ca:38:40:da:31:
6e:c9:0d:49:fb:6d:ee:30:4b:35:cc:0d:d2:4d:a5:7b:68:be:
8e:71:e4:f6:27:8f:71:f3:83:12:81:0e:73:7f:a0:8c:44:3a:
9c:3e:d4:d9:20:09:ba:cf:81:27:29:1b:dc:7c:19:21:7f:f8:
2b:85:e8:e8:e8:fa:10:b2:25:20:51:58:a1:0c:41:fd:85:82:
30:0e:8b:90:b5:a9:93:df:cc:6b:d5:01:7d:9e:19:68:10:d1:
e6:49:c4:da:bb:67:d1:aa:0f:be:a4:ae:27:3c:6c:f4:22:0b:
75:fb:fb:d9:94:cb:a3:0f:49:bb:16:5f:25:0e:0c:49:30:74:
f1:db:55:5d:93:2a:1c:7e:50:c2:71:41:33:9b:65:8a:c1:0c:
de:f8:86:e5:12:99:f7:a4:2b:f2:75:a6:6e:d6:09:56:33:7f:
ac:e1:83:d0:d4:e4:c1:90:3a:c1:a2:26:82:9d:eb:c2:f7:a2:
2b:93:9d:2c:df:08:b9:5a:30:bd:17:2f:bf:39:fe:dd:21:a1:
c5:ba:17:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:38:10 2025 by rpki-client