Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/e-d9Kme0EJn0zryjGx9vEppgjvM.roa
File: e-d9Kme0EJn0zryjGx9vEppgjvM.roa (raw, json)
Hash identifier: Q/b1NJP/gds/U2JoKZp4GxfDNbjTTYK/q8UDY6TE4vA=
Subject key identifier: 7B:E7:7D:2A:67:B4:10:99:F4:CE:BC:A3:1B:1F:6F:12:9A:60:8E:F3
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197F3060BD46E9500071E9B31713AFE4216
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/e-d9Kme0EJn0zryjGx9vEppgjvM.roa
Signing time: Thu 10 Jul 2025 06:29:08 +0000
ROA not before: Thu 10 Jul 2025 06:29:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.1.0/24 maxlen: 24
31.56.4.0/23 maxlen: 23
31.56.28.0/22 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.59.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.180.0/23 maxlen: 23
31.56.188.0/22 maxlen: 24
31.56.190.0/23 maxlen: 23
31.56.198.0/23 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/23 maxlen: 23
31.56.224.0/23 maxlen: 23
31.56.228.0/22 maxlen: 24
31.56.230.0/23 maxlen: 23
31.56.236.0/22 maxlen: 24
31.56.236.0/23 maxlen: 23
31.57.12.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.94.0/23 maxlen: 23
31.57.104.0/21 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.120.0/23 maxlen: 23
31.57.124.0/22 maxlen: 24
31.57.126.0/23 maxlen: 23
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.147.0/24 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.186.0/23 maxlen: 23
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.231.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.87.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.220.0/23 maxlen: 23
31.58.224.0/22 maxlen: 24
31.58.226.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.96.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.136.0/21 maxlen: 24
31.59.136.0/24 maxlen: 24
31.59.138.0/23 maxlen: 23
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.174.0/23 maxlen: 23
31.59.212.0/22 maxlen: 24
31.59.212.0/24 maxlen: 24
31.59.213.0/24 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 10 Jul 2025 09:42:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f3:06:0b:d4:6e:95:00:07:1e:9b:31:71:3a:fe:42:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 10 06:29:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7be77d2a67b41099f4cebca31b1f6f129a608ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a0:f1:e3:f4:05:c1:3a:f1:da:ae:1f:c8:99:
83:fc:95:20:ea:24:f6:3c:64:45:64:04:d1:c0:91:
23:32:fd:36:38:54:2c:a1:44:ac:88:ab:25:a4:6b:
bd:bb:63:72:02:d6:6c:0d:05:8c:2c:3e:1c:31:d6:
dd:3a:11:31:35:4b:33:e2:61:9a:b1:ea:2d:a9:44:
fe:24:3c:22:e1:ca:36:d3:63:ee:68:11:47:ce:ba:
6b:f7:34:80:8d:95:bc:0c:a0:54:36:af:5c:e7:2f:
60:2a:ae:e3:ee:68:c9:ed:5d:88:8d:50:44:39:09:
5f:2a:00:30:a0:78:79:91:8e:d2:f2:b4:76:ac:1a:
e0:51:c4:eb:02:d6:e1:db:17:92:a4:19:da:4f:85:
9d:b7:0f:10:2b:41:bc:de:24:28:00:3e:d6:a5:4e:
01:16:52:c7:05:bb:f4:7c:58:f9:89:98:39:f3:f5:
aa:21:a0:cf:1a:91:47:0c:a3:95:04:d7:22:81:0b:
39:76:b1:aa:0c:d1:c5:4b:36:56:d7:dd:5e:67:65:
aa:40:c3:02:c2:04:aa:20:49:f4:40:d5:e0:e0:dc:
dc:d3:01:33:7f:6b:e7:ce:63:be:fb:8f:41:e6:d8:
91:9f:43:a1:fa:fb:a8:16:df:f5:97:5e:24:0e:8a:
2b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E7:7D:2A:67:B4:10:99:F4:CE:BC:A3:1B:1F:6F:12:9A:60:8E:F3
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/e-d9Kme0EJn0zryjGx9vEppgjvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.1.0/24
31.56.4.0/23
31.56.28.0/22
31.56.57.0/24
31.56.59.0/24
31.56.77.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0/22
31.56.198.0-31.56.203.255
31.56.208.0/21
31.56.220.0/23
31.56.224.0/23
31.56.228.0/22
31.56.236.0/22
31.57.12.0/23
31.57.36.0/22
31.57.52.0-31.57.63.255
31.57.94.0/23
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.231.0-31.57.235.255
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.174.0/23
31.59.212.0/22
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
34:d6:55:b2:84:a1:cb:08:26:77:35:57:2a:6c:62:85:cb:3c:
b6:59:17:02:ef:a6:76:ae:eb:16:6c:e6:dc:5e:8a:5b:64:1a:
4f:a6:5e:6b:e1:b2:17:52:1d:7a:17:26:29:cf:9f:65:48:30:
e0:36:94:f6:a0:d5:a2:55:8d:cf:c1:8c:4b:9e:68:74:a7:90:
a7:5d:20:62:c1:bc:87:71:08:4a:95:71:2a:46:35:55:e0:43:
a8:df:67:3d:1c:81:f8:ab:49:42:51:67:da:3a:be:b8:b3:02:
15:37:12:7d:18:c4:1b:84:06:ff:2a:86:e6:bf:0a:6f:8b:97:
55:2f:c0:a6:db:ef:b7:1d:71:e4:e2:bd:6e:de:e5:c1:66:15:
af:a5:c0:88:c5:df:40:84:14:af:a3:18:25:51:d9:b5:71:0a:
52:67:6e:1d:26:9e:db:e1:78:80:17:ba:26:65:67:c9:aa:70:
a9:37:93:45:2f:bd:74:82:33:ab:62:76:c3:bf:f7:d0:08:b8:
3b:8c:23:3b:6e:6b:ef:c5:6a:62:85:5a:e5:5b:e4:48:5e:61:
72:c5:3c:02:f6:c7:9e:2d:ae:87:8c:8b:41:51:33:ba:d2:fd:
d3:d4:fc:6d:a6:60:84:c0:c8:df:e5:a4:8c:83:69:64:e5:e6:
24:9f:4f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:34:35 2025 by rpki-client