Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/elAnV6eWkg7cHIE5t4JxxoUBwj4.roa
File:                     elAnV6eWkg7cHIE5t4JxxoUBwj4.roa (raw, json)
Hash identifier:          xwAOztxiOm5RgjFkLAJitUQ6VDxU55kpVAn1ynxnFhw=
Subject key identifier:   7A:50:27:57:A7:96:92:0E:DC:1C:81:39:B7:82:71:C6:85:01:C2:3E
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       0198324CBACBB0D78E252A687A81791F1618
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/elAnV6eWkg7cHIE5t4JxxoUBwj4.roa
Signing time:             Tue 22 Jul 2025 13:22:25 +0000
ROA not before:           Tue 22 Jul 2025 13:22:25 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     834
IP address blocks:        31.56.4.0/23 maxlen: 23
                          31.56.28.0/22 maxlen: 24
                          31.56.57.0/24 maxlen: 24
                          31.56.59.0/24 maxlen: 24
                          31.56.76.0/24 maxlen: 24
                          31.56.77.0/24 maxlen: 24
                          31.56.90.0/23 maxlen: 23
                          31.56.104.0/22 maxlen: 22
                          31.56.107.0/24 maxlen: 24
                          31.56.108.0/22 maxlen: 22
                          31.56.114.0/23 maxlen: 24
                          31.56.118.0/23 maxlen: 24
                          31.56.120.0/22 maxlen: 24
                          31.56.180.0/22 maxlen: 24
                          31.56.180.0/23 maxlen: 23
                          31.56.188.0/22 maxlen: 24
                          31.56.190.0/23 maxlen: 23
                          31.56.200.0/22 maxlen: 24
                          31.56.208.0/22 maxlen: 24
                          31.56.212.0/22 maxlen: 24
                          31.56.220.0/23 maxlen: 23
                          31.56.224.0/23 maxlen: 23
                          31.56.228.0/22 maxlen: 24
                          31.56.230.0/23 maxlen: 23
                          31.56.236.0/22 maxlen: 24
                          31.56.236.0/23 maxlen: 23
                          31.57.12.0/23 maxlen: 24
                          31.57.14.0/23 maxlen: 24
                          31.57.36.0/23 maxlen: 24
                          31.57.38.0/23 maxlen: 23
                          31.57.52.0/22 maxlen: 24
                          31.57.56.0/22 maxlen: 24
                          31.57.60.0/22 maxlen: 24
                          31.57.94.0/23 maxlen: 23
                          31.57.104.0/21 maxlen: 24
                          31.57.120.0/22 maxlen: 24
                          31.57.120.0/23 maxlen: 23
                          31.57.124.0/22 maxlen: 24
                          31.57.126.0/23 maxlen: 23
                          31.57.132.0/23 maxlen: 23
                          31.57.136.0/21 maxlen: 24
                          31.57.146.0/23 maxlen: 24
                          31.57.161.0/24 maxlen: 24
                          31.57.168.0/22 maxlen: 24
                          31.57.176.0/21 maxlen: 21
                          31.57.183.0/24 maxlen: 24
                          31.57.184.0/22 maxlen: 24
                          31.57.186.0/23 maxlen: 23
                          31.57.192.0/22 maxlen: 24
                          31.57.200.0/23 maxlen: 24
                          31.57.208.0/20 maxlen: 24
                          31.57.216.0/24 maxlen: 24
                          31.57.217.0/24 maxlen: 24
                          31.57.224.0/22 maxlen: 22
                          31.57.232.0/22 maxlen: 24
                          31.57.250.0/24 maxlen: 24
                          31.57.251.0/24 maxlen: 24
                          31.57.252.0/22 maxlen: 24
                          31.58.34.0/23 maxlen: 24
                          31.58.50.0/23 maxlen: 24
                          31.58.64.0/23 maxlen: 24
                          31.58.68.0/22 maxlen: 24
                          31.58.84.0/22 maxlen: 24
                          31.58.87.0/24 maxlen: 24
                          31.58.152.0/22 maxlen: 24
                          31.58.152.0/24 maxlen: 24
                          31.58.172.0/22 maxlen: 24
                          31.58.220.0/22 maxlen: 22
                          31.58.220.0/23 maxlen: 23
                          31.58.224.0/22 maxlen: 24
                          31.58.226.0/24 maxlen: 24
                          31.59.76.0/22 maxlen: 24
                          31.59.96.0/22 maxlen: 22
                          31.59.96.0/24 maxlen: 24
                          31.59.112.0/22 maxlen: 22
                          31.59.136.0/21 maxlen: 24
                          31.59.136.0/24 maxlen: 24
                          31.59.138.0/23 maxlen: 23
                          31.59.144.0/21 maxlen: 24
                          31.59.160.0/21 maxlen: 24
                          31.59.168.0/23 maxlen: 23
                          31.59.174.0/23 maxlen: 23
                          31.59.224.0/22 maxlen: 22
                          31.59.230.0/24 maxlen: 24
                          31.59.232.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Wed 23 Jul 2025 05:21:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:32:4c:ba:cb:b0:d7:8e:25:2a:68:7a:81:79:1f:16:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Jul 22 13:22:25 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7a502757a796920edc1c8139b78271c68501c23e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1b:0a:6a:96:b9:2d:4b:3e:0f:50:57:1e:e9:
                    17:3a:e5:32:97:c2:03:a2:07:d4:3b:f2:94:3e:ef:
                    1e:f5:93:33:6e:ab:d5:cb:66:97:35:20:21:7f:6a:
                    41:e8:f9:be:9e:e3:44:62:b6:c6:3f:e0:6b:49:f4:
                    49:e5:09:bb:dd:d9:a4:be:b1:96:5d:af:70:05:d7:
                    c6:7f:da:e9:36:e2:df:d9:76:d4:30:b0:db:d4:b8:
                    cc:0c:a8:00:3f:f4:7c:98:db:17:9e:2e:a4:98:b2:
                    75:1b:1d:c9:b9:f9:81:32:e2:28:6f:16:63:e7:03:
                    b0:60:8b:fe:e6:97:d0:63:c4:3d:72:e8:80:be:89:
                    a2:38:6f:c3:36:39:54:10:e9:8c:f3:e0:ae:b1:58:
                    5a:64:aa:53:21:5d:a1:b6:a8:43:5e:f1:7e:90:5f:
                    e6:a6:d3:55:c0:b0:aa:c8:97:b9:77:6e:a6:24:fe:
                    82:81:21:2b:22:7e:87:5a:20:de:14:f1:43:e1:8e:
                    41:41:16:e3:2e:30:4d:c9:3d:52:60:57:60:fd:7a:
                    bd:4f:04:80:ae:4d:33:c5:71:d1:57:ca:36:ba:71:
                    6f:19:ac:62:67:5a:2f:44:e4:c5:50:0c:37:69:2e:
                    cd:65:9d:b5:6e:e0:8c:d4:da:71:d3:14:36:f4:ab:
                    49:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:50:27:57:A7:96:92:0E:DC:1C:81:39:B7:82:71:C6:85:01:C2:3E
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/elAnV6eWkg7cHIE5t4JxxoUBwj4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.56.4.0/23
                  31.56.28.0/22
                  31.56.57.0/24
                  31.56.59.0/24
                  31.56.76.0/23
                  31.56.90.0/23
                  31.56.104.0/21
                  31.56.114.0/23
                  31.56.118.0-31.56.123.255
                  31.56.180.0/22
                  31.56.188.0/22
                  31.56.200.0/22
                  31.56.208.0/21
                  31.56.220.0/23
                  31.56.224.0/23
                  31.56.228.0/22
                  31.56.236.0/22
                  31.57.12.0/22
                  31.57.36.0/22
                  31.57.52.0-31.57.63.255
                  31.57.94.0/23
                  31.57.104.0/21
                  31.57.120.0/21
                  31.57.132.0/23
                  31.57.136.0/21
                  31.57.146.0/23
                  31.57.161.0/24
                  31.57.168.0/22
                  31.57.176.0-31.57.187.255
                  31.57.192.0/22
                  31.57.200.0/23
                  31.57.208.0-31.57.227.255
                  31.57.232.0/22
                  31.57.250.0-31.57.255.255
                  31.58.34.0/23
                  31.58.50.0/23
                  31.58.64.0/23
                  31.58.68.0/22
                  31.58.84.0/22
                  31.58.152.0/22
                  31.58.172.0/22
                  31.58.220.0-31.58.227.255
                  31.59.76.0/22
                  31.59.96.0/22
                  31.59.112.0/22
                  31.59.136.0-31.59.151.255
                  31.59.160.0-31.59.169.255
                  31.59.174.0/23
                  31.59.224.0/22
                  31.59.230.0/24
                  31.59.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:40:5e:8f:dc:30:7e:d3:a7:5d:f1:b4:45:da:79:28:ad:d0:
         87:e5:b3:d7:0c:d6:69:5c:98:96:cc:7f:19:40:e2:90:4f:c9:
         58:ff:58:88:25:1d:ce:d8:fb:4e:80:4c:c9:a7:0b:8f:66:62:
         3c:23:48:87:a4:30:25:ea:5e:c2:f7:61:d3:48:c4:04:2e:03:
         7e:62:60:9a:17:44:d7:7b:59:5f:c5:de:23:38:97:0e:f5:76:
         e6:b3:54:39:b8:6e:d9:ba:2c:74:f3:a3:11:e5:c6:40:db:90:
         22:4b:e2:d1:38:d7:2e:f8:fa:6c:95:fe:7e:6a:ad:7a:54:e3:
         de:6c:55:48:47:20:92:88:79:86:ae:5f:98:63:0e:75:9d:68:
         28:1e:85:7a:b1:f7:69:a0:4e:b4:49:22:1c:a5:d4:b8:68:a2:
         3c:57:cd:33:e3:f0:e5:fa:e0:52:52:6e:08:b5:fb:9e:14:ac:
         6c:c9:de:15:15:cf:09:b1:92:2f:ba:a3:dc:4f:11:a7:4b:e6:
         2c:76:74:2d:71:2a:b6:81:16:87:db:54:a2:42:7d:3b:33:d5:
         2a:91:90:e9:84:ef:ff:a2:e3:be:06:b3:ed:b7:c8:33:3a:eb:
         5f:25:29:37:31:2a:33:1e:93:b5:89:70:ff:78:b0:ce:86:a3:
         87:82:6b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:38:54 2025 by rpki-client