Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/b2NtTRL8I2CU_O10HoL5haXNpWg.roa
File: b2NtTRL8I2CU_O10HoL5haXNpWg.roa (raw, json)
Hash identifier: o8GNkDvjLus1amhD6d9kJ5Zejz3zOi5mjwUhEO9jWxQ=
Subject key identifier: 6F:63:6D:4D:12:FC:23:60:94:FC:ED:74:1E:82:F9:85:A5:CD:A5:68
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019753AA49434D865E63C322BC6E28952968
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/b2NtTRL8I2CU_O10HoL5haXNpWg.roa
Signing time: Mon 09 Jun 2025 07:49:18 +0000
ROA not before: Mon 09 Jun 2025 07:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.57.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.146.0/24 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.196.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.204.0/22 maxlen: 22
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.57.12.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.60.0/22 maxlen: 24
31.57.92.0/22 maxlen: 22
31.57.99.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.244.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.134.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.58.226.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.212.0/22 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 10 Jun 2025 10:28:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:aa:49:43:4d:86:5e:63:c3:22:bc:6e:28:95:29:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 9 07:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f636d4d12fc236094fced741e82f985a5cda568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6b:4e:56:4e:7c:6c:3f:ea:fb:63:ab:97:b2:
2b:15:a7:00:a9:e1:5b:8b:6a:9a:2e:36:70:38:72:
82:51:0b:de:18:cf:73:f8:47:58:ca:af:cf:df:6a:
fe:67:58:97:32:d3:6a:f6:26:b6:a7:a2:22:9d:06:
fa:8a:a3:10:4f:d9:e0:87:5b:39:52:64:3b:13:78:
37:4f:34:02:3d:09:e5:78:32:32:47:d5:ac:97:52:
25:08:5b:30:67:2e:f4:f4:d4:f0:5f:d0:81:55:08:
82:42:88:94:34:08:f4:3b:cc:b9:7d:19:12:9d:30:
48:5a:bc:3d:0d:a8:25:d8:56:57:62:e5:8a:8d:d5:
fa:dd:3a:bb:47:6b:27:ad:d1:55:b0:d0:4c:42:3f:
f8:57:57:13:d1:fc:8b:af:e8:5b:9c:e4:27:b9:fc:
f9:04:3a:21:e3:a6:54:36:af:8d:5f:ec:2b:3a:ec:
3c:7d:a0:65:93:27:84:21:b5:fa:8c:bf:94:e5:f3:
f7:a4:ae:90:9a:de:0a:2d:3f:cf:93:40:c5:ca:a9:
c7:86:49:2b:64:d3:e4:a1:0e:6b:86:59:4c:02:1f:
ef:4e:a9:ba:3a:53:73:b8:cf:57:b4:92:03:09:5e:
18:16:18:67:0e:3a:10:c9:bb:18:53:fe:05:09:5e:
4e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:63:6D:4D:12:FC:23:60:94:FC:ED:74:1E:82:F9:85:A5:CD:A5:68
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/b2NtTRL8I2CU_O10HoL5haXNpWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.57.0/24
31.56.77.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.146.0/24
31.56.180.0/22
31.56.188.0/22
31.56.196.0-31.56.215.255
31.56.228.0/22
31.56.236.0/22
31.57.12.0/23
31.57.36.0/22
31.57.60.0/22
31.57.92.0/22
31.57.99.0/24
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.244.0/24
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.134.0/24
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.212.0/22
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:10:d0:5b:ce:1c:61:e7:66:fe:d9:e1:c7:67:62:66:fe:6e:
14:b7:8b:91:f8:12:5d:a2:16:5b:c8:57:5a:67:c1:17:3f:03:
53:ff:5f:54:87:66:5e:2e:d2:6b:55:8e:5d:4d:8a:cd:bc:cc:
e2:18:2a:68:c4:ae:71:04:bf:02:aa:8e:0c:f9:3e:ea:23:67:
61:61:0d:8b:5e:9e:07:42:8d:65:a2:7b:1a:a7:ff:d5:68:8e:
e3:92:55:eb:0b:87:61:83:1d:3f:ca:4e:9e:bd:5a:52:df:7d:
eb:57:4b:35:25:de:de:e5:90:f0:cf:ef:88:85:ee:4e:49:f0:
3c:ec:23:95:8f:50:1e:f7:7f:fb:7d:08:c7:f1:b4:0c:56:6b:
76:fc:e4:a2:cd:4f:49:1d:ce:75:3e:77:36:9a:3f:d7:12:14:
2d:68:5e:32:4e:ab:24:5c:3d:9d:4c:ee:ed:b5:d3:50:42:90:
fc:a0:e6:97:91:e9:8b:9d:ed:61:e4:d3:28:f5:a5:10:3c:b4:
b7:32:b0:53:b6:5c:46:d8:8b:87:f1:cd:dd:db:5a:cf:cf:f3:
6b:fa:2e:f4:c2:f5:98:b2:68:4d:ce:76:67:1a:8e:71:4c:ea:
7f:7c:4d:73:0e:6b:9d:56:eb:6a:22:4a:99:4b:98:a7:fc:5f:
f5:29:89:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:29:08 2025 by rpki-client