Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TQdyXVY8l-EmWPZLx78c5_Nek-U.roa
File: TQdyXVY8l-EmWPZLx78c5_Nek-U.roa (raw, json)
Hash identifier: CV4GFek7j02k/In6C2lGfP2Uxnjh2JaysMkQiXTuIy0=
Subject key identifier: 4D:07:72:5D:56:3C:97:E1:26:58:F6:4B:C7:BF:1C:E7:F3:5E:93:E5
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01979D1E92058208966F01EB91ADAEC391DF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TQdyXVY8l-EmWPZLx78c5_Nek-U.roa
Signing time: Mon 23 Jun 2025 14:08:35 +0000
ROA not before: Mon 23 Jun 2025 14:08:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.48.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.146.0/24 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.196.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.204.0/22 maxlen: 22
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.57.12.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.60.0/22 maxlen: 24
31.57.92.0/22 maxlen: 22
31.57.92.0/23 maxlen: 24
31.57.99.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.183.0/24 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.50.0/24 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.134.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.171.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.58.226.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.212.0/22 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 24 Jun 2025 18:08:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9d:1e:92:05:82:08:96:6f:01:eb:91:ad:ae:c3:91:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 23 14:08:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d07725d563c97e12658f64bc7bf1ce7f35e93e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f1:6b:41:9a:ad:e2:98:14:4b:0d:9b:89:bf:
4c:d0:f3:77:de:94:20:19:df:c3:23:61:cf:21:12:
06:7e:9a:17:e9:87:20:77:fc:f7:9c:6d:73:fd:72:
80:f8:0d:91:0e:e7:ab:ae:8f:c9:00:5a:70:a1:85:
62:60:aa:5a:83:5f:72:63:fd:5e:47:87:31:f1:4c:
b7:66:ba:a4:a0:8f:6b:aa:4e:b5:c9:a6:47:fc:29:
54:2a:2a:9f:7c:78:ec:a1:8e:47:fb:fc:90:ae:18:
0d:a4:7c:e4:75:fa:10:34:8e:73:21:06:f4:3c:81:
96:b8:c5:26:bc:09:37:50:e0:e4:ab:14:80:5f:0b:
70:b3:c1:4f:fc:82:26:48:83:65:d3:fc:89:47:e3:
6c:2c:a6:b3:56:41:b9:56:0c:b5:60:9a:d7:fb:10:
1d:4b:93:03:2e:35:21:1c:de:eb:88:43:81:c2:a4:
fb:05:10:3b:19:b6:28:20:d6:ef:39:e8:e2:0f:ac:
ed:42:bc:ba:45:28:43:e1:65:e4:74:4b:2c:62:55:
12:75:a5:30:88:84:76:06:b9:11:d4:47:4a:22:50:
1a:19:d2:9c:a2:38:31:4d:43:d9:30:4e:10:80:21:
8d:56:59:c0:c0:7f:78:c7:10:d4:fc:d4:01:d2:0e:
8b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:07:72:5D:56:3C:97:E1:26:58:F6:4B:C7:BF:1C:E7:F3:5E:93:E5
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TQdyXVY8l-EmWPZLx78c5_Nek-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.48.0/24
31.56.57.0/24
31.56.77.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.146.0/24
31.56.180.0/22
31.56.188.0/22
31.56.196.0-31.56.215.255
31.56.228.0/22
31.56.236.0/22
31.57.12.0/23
31.57.36.0/22
31.57.60.0/22
31.57.92.0/22
31.57.99.0/24
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.134.0/24
31.58.152.0/22
31.58.171.0-31.58.175.255
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.212.0/22
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
64:c1:6e:f9:97:68:a4:e3:09:27:6b:0f:c5:bd:56:77:9d:cd:
3e:c7:01:b7:87:0f:9d:8e:8c:7a:ff:3f:47:39:64:e3:2b:f4:
79:e1:04:c7:cf:f0:13:09:5c:c4:a6:36:30:d2:f4:d6:86:e3:
cf:42:f8:10:b4:16:d0:78:4e:b0:d9:5c:d5:c2:92:65:bb:f1:
76:5b:c3:62:0c:c7:7a:ce:62:e9:d1:66:96:1e:cc:e2:cf:06:
b1:8d:0c:0d:32:80:26:de:51:01:a8:56:bb:77:eb:d7:67:28:
e0:94:b0:d9:73:25:dc:ab:a4:9b:06:60:8d:fe:8d:57:56:a0:
fb:17:3d:f8:02:40:eb:52:f4:b5:30:70:bd:d5:f2:c8:38:41:
15:78:8f:5b:b2:6d:6e:8e:f6:ff:bb:6d:2b:f9:6f:74:30:c2:
4b:60:76:c3:60:2a:30:99:01:f8:ce:87:c3:cc:a5:61:a0:b3:
ac:db:4c:7b:55:ba:6f:53:4d:9f:c7:4f:03:29:e3:c2:9d:e8:
f0:90:16:96:21:d1:22:5d:bc:bf:b2:01:51:22:64:c1:10:37:
40:3d:80:ee:be:49:be:92:5f:83:84:4f:13:c1:1c:10:38:af:
59:07:26:cc:f2:c1:a8:75:c4:39:f6:94:0f:ea:33:67:af:46:
2f:20:b9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:35:29 2025 by rpki-client