Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dq_VceAD0E3-8Z_0ZFoPq5wz3b8.roa
File: dq_VceAD0E3-8Z_0ZFoPq5wz3b8.roa (raw, json)
Hash identifier: WPGedEDuy1GyGfE5/h3vJb/I8SMMtmvLz1DKKCWqbps=
Subject key identifier: 76:AF:D5:71:E0:03:D0:4D:FE:F1:9F:F4:64:5A:0F:AB:9C:33:DD:BF
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197BF7DCF9A67091E111DEB063BFA57280A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dq_VceAD0E3-8Z_0ZFoPq5wz3b8.roa
Signing time: Mon 30 Jun 2025 06:19:42 +0000
ROA not before: Mon 30 Jun 2025 06:19:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.28.0/22 maxlen: 24
31.56.32.0/24 maxlen: 24
31.56.44.0/24 maxlen: 24
31.56.48.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.112.0/24 maxlen: 24
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.146.0/24 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.192.0/22 maxlen: 22
31.56.196.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.204.0/22 maxlen: 22
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.216.0/22 maxlen: 22
31.56.228.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.57.12.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.48.0/22 maxlen: 24
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.92.0/22 maxlen: 22
31.57.92.0/23 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.200.0/24 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.231.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.171.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.58.226.0/24 maxlen: 24
31.59.70.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.128.0/24 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.136.0/24 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.212.0/22 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 30 Jun 2025 14:05:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:7d:cf:9a:67:09:1e:11:1d:eb:06:3b:fa:57:28:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 30 06:19:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76afd571e003d04dfef19ff4645a0fab9c33ddbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:11:65:ec:f9:a2:74:f7:16:83:ed:8f:12:19:
f0:bd:a2:db:35:78:b1:5d:38:12:34:bb:fe:65:f8:
43:04:22:d4:e8:4f:8c:e3:3a:0d:9f:b6:fd:d4:38:
fb:c2:e2:d6:cd:08:c7:c7:51:23:93:51:8b:f0:14:
92:d5:a4:35:93:7c:3d:81:37:b2:cc:8e:6e:b4:2b:
ed:6c:f2:e5:69:16:75:ab:e3:02:31:a2:be:fb:92:
ef:8f:f8:bc:61:ec:bd:ca:e2:df:33:8a:84:cd:d6:
73:0a:c3:f3:c8:41:b9:3e:51:82:18:cf:10:35:7b:
77:d3:56:10:f7:dd:00:92:5e:0d:40:ef:d5:32:13:
ce:c7:71:53:65:12:c1:cd:4e:5d:1f:f9:32:9d:46:
20:42:52:b0:d2:a6:d4:a6:81:d6:b4:52:73:6e:2a:
e9:44:1b:18:a0:1e:15:ae:8f:3f:59:26:05:39:73:
48:b9:20:a4:dd:ca:f1:83:ca:a6:f0:de:e1:db:a7:
9c:34:a9:1b:de:0d:a6:ce:8e:76:bf:cf:79:98:4d:
0e:43:26:b1:6b:6f:3e:10:5b:3e:09:2f:2a:dd:bb:
9f:87:b0:1d:cf:06:4e:08:c5:04:e6:44:72:08:44:
18:a7:6a:bc:c9:a2:fb:eb:24:bd:92:cc:08:7a:2a:
a3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:AF:D5:71:E0:03:D0:4D:FE:F1:9F:F4:64:5A:0F:AB:9C:33:DD:BF
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dq_VceAD0E3-8Z_0ZFoPq5wz3b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.28.0-31.56.32.255
31.56.44.0/24
31.56.48.0/24
31.56.57.0/24
31.56.77.0/24
31.56.90.0/23
31.56.104.0-31.56.112.255
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.146.0/24
31.56.180.0/22
31.56.188.0-31.56.219.255
31.56.228.0/22
31.56.236.0/22
31.57.12.0/23
31.57.36.0/22
31.57.48.0/20
31.57.92.0/22
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.231.0-31.57.235.255
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.171.0-31.58.175.255
31.58.220.0-31.58.227.255
31.59.70.0/24
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.128.0/24
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.212.0/22
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:a5:7f:7a:5c:93:1e:1f:3d:f5:6f:45:de:84:65:66:26:0c:
d7:f3:f6:59:ad:41:98:fb:99:24:35:0d:b6:92:f3:bd:aa:16:
a3:03:39:2c:aa:6d:4a:19:8b:e0:cb:bf:75:dc:69:2b:d2:52:
d2:c0:bf:9e:7e:ec:23:34:65:c9:69:16:a8:d9:bb:63:8c:99:
26:49:37:cf:ba:37:21:09:2f:6a:22:06:27:a0:bc:b4:f5:04:
91:e6:7d:60:33:ea:4e:49:72:3e:b9:01:c2:1d:a2:86:1a:16:
ff:b6:fd:61:4e:6f:eb:c9:df:13:82:5e:64:08:5f:90:b1:e8:
76:37:c4:aa:f2:23:0b:3f:ea:58:d6:da:92:da:91:91:b0:e4:
40:66:90:32:eb:d7:3f:78:8a:af:15:4f:48:ea:d6:33:2d:f3:
e6:42:09:81:02:31:1f:92:af:d1:c4:b0:34:54:20:4d:34:ed:
d2:48:a7:8f:dc:d7:3c:81:f5:2c:23:69:d1:76:35:2d:ef:18:
fd:26:16:7f:5f:da:a7:cd:69:65:7f:53:30:af:df:a7:71:b9:
5f:8e:9a:ea:ca:ed:99:8a:dd:41:60:1e:ca:73:c0:e6:89:2a:
d2:ab:68:26:58:d6:03:53:1a:cb:b6:c7:a1:2b:53:b0:42:a8:
4b:d6:cf:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:41:29 2025 by rpki-client