Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TNpJ0TuA6kAVvHl9p88A7Gr25OM.roa
File: TNpJ0TuA6kAVvHl9p88A7Gr25OM.roa (raw, json)
Hash identifier: ddHmgyHVeRqxg4FPodg1ys/ex4dzI4tvKtXH0bObDCs=
Subject key identifier: 4C:DA:49:D1:3B:80:EA:40:15:BC:79:7D:A7:CF:00:EC:6A:F6:E4:E3
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01983749944E171560813F3EFB77DA5B3631
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TNpJ0TuA6kAVvHl9p88A7Gr25OM.roa
Signing time: Wed 23 Jul 2025 12:37:05 +0000
ROA not before: Wed 23 Jul 2025 12:37:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.28.0/22 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.59.0/24 maxlen: 24
31.56.76.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.107.0/24 maxlen: 24
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.180.0/23 maxlen: 23
31.56.188.0/22 maxlen: 24
31.56.190.0/23 maxlen: 23
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/23 maxlen: 23
31.56.224.0/23 maxlen: 23
31.56.228.0/22 maxlen: 24
31.56.230.0/23 maxlen: 23
31.56.236.0/22 maxlen: 24
31.56.236.0/23 maxlen: 23
31.57.12.0/23 maxlen: 24
31.57.14.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.64.0/24 maxlen: 24
31.57.94.0/23 maxlen: 23
31.57.104.0/21 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.120.0/23 maxlen: 23
31.57.124.0/22 maxlen: 24
31.57.126.0/23 maxlen: 23
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.186.0/23 maxlen: 23
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.87.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.152.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.220.0/23 maxlen: 23
31.58.224.0/22 maxlen: 24
31.58.226.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.96.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.136.0/21 maxlen: 24
31.59.136.0/24 maxlen: 24
31.59.138.0/23 maxlen: 23
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/23 maxlen: 23
31.59.174.0/23 maxlen: 23
31.59.224.0/22 maxlen: 22
31.59.230.0/24 maxlen: 24
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 23 Jul 2025 21:05:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:37:49:94:4e:17:15:60:81:3f:3e:fb:77:da:5b:36:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 23 12:37:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4cda49d13b80ea4015bc797da7cf00ec6af6e4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a0:e1:da:5b:09:71:12:33:e6:a1:56:0c:14:
ca:ed:86:b6:12:4a:fc:f3:53:c1:41:16:45:10:5d:
5d:5e:db:6b:4b:b2:b1:cb:ff:e4:e2:73:42:4c:4c:
f4:4c:20:eb:e6:71:19:c1:e7:68:14:ef:32:8e:65:
53:48:be:a0:b8:96:c3:9b:d9:9a:3d:1e:7d:46:d8:
a5:19:94:a6:af:31:4e:41:9e:d3:a8:68:a0:2f:ab:
ad:94:e3:59:69:72:99:1d:28:26:12:f3:ef:c0:12:
ce:5e:b1:37:39:99:a5:a5:8e:f8:58:4a:bf:20:1e:
a0:74:3c:2d:1d:5f:7c:e4:26:52:79:80:57:8c:a5:
f5:8a:5e:08:70:63:a5:d0:bc:0e:73:36:8c:1d:c4:
6a:b2:d7:38:bb:7f:f8:de:8b:84:c0:8e:9f:39:ec:
af:5a:97:d0:6e:bf:93:0c:20:7e:3d:49:80:06:00:
c5:fd:d3:88:05:5c:fa:9f:fd:6a:6a:5c:34:95:e3:
a2:45:25:ae:f4:51:bd:29:ed:bf:a8:59:7a:fa:03:
cc:7d:b9:e1:a2:e6:12:2c:70:b2:4a:01:d4:98:e9:
59:f7:e1:a9:ec:ed:3d:6c:b0:06:85:d9:7f:19:31:
ea:b8:ba:c0:bf:5d:aa:6b:2e:3b:01:68:2e:14:02:
b0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DA:49:D1:3B:80:EA:40:15:BC:79:7D:A7:CF:00:EC:6A:F6:E4:E3
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TNpJ0TuA6kAVvHl9p88A7Gr25OM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.28.0/22
31.56.57.0/24
31.56.59.0/24
31.56.76.0/23
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0/22
31.56.200.0/22
31.56.208.0/21
31.56.220.0/23
31.56.224.0/23
31.56.228.0/22
31.56.236.0/22
31.57.12.0/22
31.57.36.0/22
31.57.52.0-31.57.64.255
31.57.94.0/23
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.136.0-31.59.151.255
31.59.160.0-31.59.169.255
31.59.174.0/23
31.59.224.0/22
31.59.230.0/24
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
29:fc:b1:e6:23:11:7d:ec:9d:70:6a:8c:28:a8:5f:0c:d4:26:
b2:13:73:39:0b:1d:15:e8:79:94:8a:13:89:4c:ad:68:9e:d0:
d9:20:80:fa:de:0e:33:92:6f:75:8f:49:83:f3:fe:61:3a:4a:
d9:55:75:63:36:6a:a1:8d:89:d7:d5:05:a6:63:fb:e3:42:5f:
21:25:cb:29:49:a8:96:ac:61:44:55:d0:82:cf:6d:b0:e7:28:
d6:a5:c4:fc:ad:fd:e9:81:87:ec:2e:48:52:64:c7:e5:a1:da:
30:f8:87:fa:8b:fa:98:6c:e0:7e:62:20:43:4e:53:63:23:26:
a8:fc:87:99:a8:94:94:69:71:47:98:f4:57:1f:aa:5a:5f:ff:
02:9d:ec:19:a3:68:3d:f9:55:ad:69:74:6e:a9:89:2d:46:b3:
77:96:74:c4:40:a4:12:b0:70:17:6a:62:93:82:d2:d0:dd:9a:
78:06:00:59:e4:e0:53:0d:cf:c3:de:8e:cc:64:08:bd:a6:44:
f8:b6:99:e5:12:82:8b:66:11:14:51:3f:67:0a:55:29:cd:3c:
23:76:ff:ce:7c:f5:a1:91:bf:1c:f7:8f:62:0e:55:41:69:aa:
9d:39:e9:1a:d3:6a:90:8e:60:cb:a2:fe:30:d7:95:fe:15:40:
56:d4:73:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:46:20 2025 by rpki-client