Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Vj-MfU2P60boFseGkUiAlI5Lbak.roa
File: Vj-MfU2P60boFseGkUiAlI5Lbak.roa (raw, json)
Hash identifier: t6TQFozXUQiLP8xzuuRLTu4QTylIIhGg30uq7pkpj+Y=
Subject key identifier: 56:3F:8C:7D:4D:8F:EB:46:E8:16:C7:86:91:48:80:94:8E:4B:6D:A9
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197C4ED6976C2A6BFEB237B8D902B94B416
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Vj-MfU2P60boFseGkUiAlI5Lbak.roa
Signing time: Tue 01 Jul 2025 07:39:42 +0000
ROA not before: Tue 01 Jul 2025 07:39:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.28.0/22 maxlen: 24
31.56.32.0/24 maxlen: 24
31.56.44.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.112.0/24 maxlen: 24
31.56.114.0/23 maxlen: 24
31.56.117.0/24 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.192.0/22 maxlen: 22
31.56.198.0/23 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.216.0/22 maxlen: 22
31.56.220.0/23 maxlen: 23
31.56.224.0/23 maxlen: 23
31.56.228.0/22 maxlen: 24
31.56.230.0/23 maxlen: 23
31.56.236.0/22 maxlen: 24
31.56.236.0/23 maxlen: 23
31.57.12.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.48.0/22 maxlen: 24
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.94.0/23 maxlen: 23
31.57.104.0/21 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.225.0/24 maxlen: 24
31.57.231.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.58.226.0/24 maxlen: 24
31.59.70.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.128.0/24 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.136.0/24 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.212.0/22 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 01 Jul 2025 11:40:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:ed:69:76:c2:a6:bf:eb:23:7b:8d:90:2b:94:b4:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 1 07:39:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=563f8c7d4d8feb46e816c786914880948e4b6da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5f:c4:55:c8:16:f6:22:07:46:c1:32:c1:03:
a2:23:e1:9c:39:a4:4a:cb:e6:19:e7:f5:1e:6c:2f:
97:ab:65:3d:6f:b6:aa:9e:b7:47:c7:aa:26:c3:a0:
77:89:ac:4e:25:bb:56:8e:20:94:3b:5e:f4:f5:cb:
1e:ea:9e:31:f6:36:51:9a:84:46:2c:8c:f0:5b:05:
c8:ac:87:02:c7:c5:2f:67:4a:d7:91:a9:d8:e4:de:
9c:30:e6:6e:42:9f:2c:61:d9:64:fe:70:cc:69:44:
fd:75:00:aa:c5:64:d5:08:81:e6:7a:7f:90:59:37:
44:a4:e4:ab:71:ae:d2:43:8a:a5:ed:4b:04:70:e0:
70:e4:75:db:32:18:87:74:6a:f7:f7:f9:60:73:bd:
40:06:67:dd:6e:c0:0c:a0:51:f3:97:4f:b4:5e:98:
c3:ef:a3:5e:2a:04:bd:38:3d:6f:83:35:f1:d3:34:
0a:4b:07:0a:aa:c1:b6:99:66:a7:10:39:72:5e:11:
b3:74:ab:94:ae:43:c8:b5:11:7d:86:bf:a6:60:87:
b9:57:1b:fa:59:cb:d4:be:24:8d:6d:59:dd:81:3d:
05:bc:88:a4:fd:11:6a:51:bb:4e:21:90:6b:b0:97:
0e:6a:9c:41:17:e3:4c:4c:76:02:37:66:73:b7:e5:
1d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3F:8C:7D:4D:8F:EB:46:E8:16:C7:86:91:48:80:94:8E:4B:6D:A9
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Vj-MfU2P60boFseGkUiAlI5Lbak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.28.0-31.56.32.255
31.56.44.0/24
31.56.57.0/24
31.56.77.0/24
31.56.90.0/23
31.56.104.0-31.56.112.255
31.56.114.0/23
31.56.117.0-31.56.123.255
31.56.180.0/22
31.56.188.0-31.56.195.255
31.56.198.0-31.56.203.255
31.56.208.0-31.56.221.255
31.56.224.0/23
31.56.228.0/22
31.56.236.0/22
31.57.12.0/23
31.57.36.0/22
31.57.48.0/20
31.57.94.0/23
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.231.0-31.57.235.255
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.70.0/24
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.128.0/24
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.212.0/22
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:9e:bf:e1:f0:96:27:9b:45:e7:67:a3:d1:74:a8:a7:16:3f:
26:08:dd:4f:00:52:61:9f:bd:15:55:f5:67:62:44:91:22:ad:
5a:22:70:4c:96:30:5f:36:09:72:e7:6e:c2:dd:7a:a7:84:52:
e2:2a:a4:aa:0b:3d:90:f6:7b:06:c4:ae:cd:5b:47:d0:57:23:
07:78:2b:89:fa:f1:e3:67:4d:ef:72:84:87:c0:34:24:51:06:
52:f0:24:ce:d1:fd:df:82:d8:78:33:9a:45:87:9a:af:9b:64:
4b:ee:a0:9a:26:ab:c6:7f:3e:a4:77:10:87:26:cd:d3:4d:d7:
f6:9d:c5:c5:37:05:0d:f0:0a:57:fc:37:ae:48:cb:b3:78:3e:
67:4b:a1:ef:04:74:31:8b:45:f9:5b:9e:eb:f0:cd:e5:ed:83:
1a:66:97:bf:45:40:04:01:ad:3f:01:45:c2:49:8e:61:bd:7b:
04:42:e0:e7:54:4a:26:20:8d:07:72:c4:39:f6:13:a6:9a:2e:
0e:cb:f6:40:ba:7e:ef:29:74:8e:a9:80:72:4f:a6:bd:b2:9d:
cb:f9:d5:04:b7:68:91:9d:69:18:84:76:87:5c:f6:90:06:d7:
d8:ca:c9:5d:d1:90:57:0e:09:da:e9:93:9f:30:7b:8c:af:e5:
fe:b6:57:39
-----BEGIN CERTIFICATE-----
MIIGjDCCBXSgAwIBAgISAZfE7Wl2wqa/6yN7jZArlLQWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNzAxMDczOTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjNmOGM3ZDRkOGZlYjQ2ZTgxNmM3ODY5MTQ4ODA5NDhlNGI2ZGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsl/EVcgW9iIHRsEywQOiI+GcOaRK
y+YZ5/UebC+Xq2U9b7aqnrdHx6omw6B3iaxOJbtWjiCUO1709cse6p4x9jZRmoRG
LIzwWwXIrIcCx8UvZ0rXkanY5N6cMOZuQp8sYdlk/nDMaUT9dQCqxWTVCIHmen+Q
WTdEpOSrca7SQ4ql7UsEcOBw5HXbMhiHdGr39/lgc71ABmfdbsAMoFHzl0+0XpjD
76NeKgS9OD1vgzXx0zQKSwcKqsG2mWanEDlyXhGzdKuUrkPItRF9hr+mYIe5Vxv6
WcvUviSNbVndgT0FvIik/RFqUbtOIZBrsJcOapxBF+NMTHYCN2Zzt+Ud0wIDAQAB
o4IDmDCCA5QwHQYDVR0OBBYEFFY/jH1Nj+tG6BbHhpFIgJSOS22pMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvVmotTWZVMlA2MGJvRnNlR2tVaUFsSTVMYmFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBrAYIKwYBBQUHAQcBAf8EggGbMIIBlzCCAZMEAgABMIIB
iwMEAR84BDAMAwQCHzgcAwQAHzggAwQAHzgsAwQAHzg5AwQAHzhNAwQBHzhaMAwD
BAMfOGgDBAAfOHADBAEfOHIwDAMEAB84dQMEAh84eAMEAh84tDAMAwQCHzi8AwQC
HzjAMAwDBAEfOMYDBAIfOMgwDAMEBB840AMEAR843AMEAR844AMEAh845AMEAh84
7AMEAR85DAMEAh85JAMEBB85MAMEAR85XgMEAx85aAMEAx85eAMEAR85hAMEAx85
iAMEAR85kgMEAh85qDAMAwQEHzmwAwQCHzm4AwQCHznAAwQBHznIMAwDBAQfOdAD
BAIfOeAwDAMEAB855wMEAh856DALAwQBHzn6AwMBHzgDBAEfOiIDBAEfOjIDBAEf
OkADBAIfOkQDBAIfOlQDBAIfOpgDBAIfOqwwDAMEAh863AMEAh864AMEAB87RgME
Ah87TAMEAh87YAMEAh87cAMEAB87gDAMAwQDHzuIAwQDHzuQAwQDHzugAwQCHzvU
AwQCHzvgAwQCHzvoMA0GCSqGSIb3DQEBCwUAA4IBAQC0nr/h8JYnm0XnZ6PRdKin
Fj8mCN1PAFJhn70VVfVnYkSRIq1aInBMljBfNgly527C3XqnhFLiKqSqCz2Q9nsG
xK7NW0fQVyMHeCuJ+vHjZ03vcoSHwDQkUQZS8CTO0f3fgth4M5pFh5qvm2RL7qCa
JqvGfz6kdxCHJs3TTdf2ncXFNwUN8ApX/DeuSMuzeD5nS6HvBHQxi0X5W57r8M3l
7YMaZpe/RUAEAa0/AUXCSY5hvXsEQuDnVEomII0HcsQ59hOmmi4Oy/ZAun7vKXSO
qYByT6a9sp3L+dUEt2iRnWkYhHaHXPaQBtfYysld0ZBXDgna6ZOfMHuMr+X+tlc5
-----END CERTIFICATE-----
Generated at Tue Jul 29 07:31:50 2025 by rpki-client