
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fHlQCEP3d4x30bK2tHzyJYIc-ik.roa
File: fHlQCEP3d4x30bK2tHzyJYIc-ik.roa (raw, json)
Hash identifier: 2nFYZq1JQHIGIHuhv3bjT8AO2og5D/Jb5DHffnPy2G0=
Subject key identifier: 7C:79:50:08:43:F7:77:8C:77:D1:B2:B6:B4:7C:F2:25:82:1C:FA:29
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019773B3943C7F36B436F49AD5C8D3530FF1
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fHlQCEP3d4x30bK2tHzyJYIc-ik.roa
Signing time: Sun 15 Jun 2025 13:07:18 +0000
ROA not before: Sun 15 Jun 2025 13:07:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.48.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.146.0/24 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.196.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.204.0/22 maxlen: 22
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.57.12.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.60.0/22 maxlen: 24
31.57.92.0/22 maxlen: 22
31.57.99.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.50.0/24 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.134.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.171.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.58.226.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.212.0/22 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 16 Jun 2025 09:07:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:b3:94:3c:7f:36:b4:36:f4:9a:d5:c8:d3:53:0f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 15 13:07:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c79500843f7778c77d1b2b6b47cf225821cfa29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:50:6d:d1:a6:74:eb:8e:59:01:88:28:b0:42:
31:86:fe:b6:6c:d2:52:3a:a1:c8:39:7c:3f:0e:c0:
76:6d:bf:ae:0b:52:28:9b:b3:4a:d5:17:32:07:f8:
52:43:e6:08:8b:ed:7b:e9:4a:d1:bd:d5:74:12:98:
e7:e2:55:c0:01:20:33:d9:cc:8c:7e:2f:4a:0c:dd:
ab:ef:ff:df:df:82:3f:f8:d7:87:ac:58:4b:45:a5:
e5:29:c9:c6:b4:fe:b4:ab:8b:6d:96:84:47:3d:56:
ba:f3:09:9d:84:6c:99:0c:0f:48:60:7d:b5:9a:34:
ad:a9:c1:21:76:15:0f:96:29:27:78:6a:09:4a:23:
7f:96:da:48:24:dd:5e:03:5f:26:0d:07:dd:90:24:
e4:77:8a:7a:67:be:4e:50:e0:95:06:a8:83:4a:06:
73:92:08:40:c2:0c:a6:d6:77:85:80:cd:7a:f6:7e:
3a:49:65:17:f3:8f:5c:ee:80:c7:fe:32:86:14:f2:
7d:02:bd:3b:8c:cc:dd:1a:b0:f3:d7:59:e5:f4:40:
a4:fb:69:bc:b1:51:ca:f7:ef:84:2a:1e:e6:67:c1:
cb:65:f0:7a:70:b9:5d:a2:42:ee:5e:45:d8:4c:cc:
15:02:a4:c3:8d:c2:f2:de:e0:d6:e6:00:5f:80:c3:
58:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:79:50:08:43:F7:77:8C:77:D1:B2:B6:B4:7C:F2:25:82:1C:FA:29
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fHlQCEP3d4x30bK2tHzyJYIc-ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.48.0/24
31.56.57.0/24
31.56.77.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.146.0/24
31.56.180.0/22
31.56.188.0/22
31.56.196.0-31.56.215.255
31.56.228.0/22
31.56.236.0/22
31.57.12.0/23
31.57.36.0/22
31.57.60.0/22
31.57.92.0/22
31.57.99.0/24
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.134.0/24
31.58.152.0/22
31.58.171.0-31.58.175.255
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.212.0/22
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:08:58:f9:84:aa:f6:96:92:c8:ab:9f:28:21:db:e5:31:c4:
a6:d7:67:93:1f:57:59:91:f0:f3:eb:bb:03:67:fc:f6:d0:c3:
6f:03:07:72:08:19:9b:7a:04:a2:bb:c5:9b:f3:d0:12:86:45:
0b:07:f7:e8:9a:5e:1f:ce:ff:0a:cb:08:09:71:a6:1b:56:74:
44:a2:c0:79:0f:aa:38:3d:86:e7:62:99:ae:23:b6:28:ef:b5:
9b:68:65:bd:f9:eb:9a:c9:e5:e9:58:11:bb:60:f6:5a:d2:45:
bd:6c:51:04:ab:65:2a:1e:50:cc:a7:6a:27:88:95:da:d8:24:
09:e0:34:c0:33:d0:d9:16:15:c4:70:08:7c:35:3f:45:54:dd:
aa:fb:98:1c:d0:27:b7:80:94:ed:9a:47:14:30:c4:c6:f1:78:
fd:73:53:b9:21:f2:e9:42:44:d2:82:08:84:ab:89:b7:49:e0:
fc:dd:d7:6c:ac:5c:c8:a1:10:98:2a:e4:9a:73:f8:12:ab:e1:
70:c6:99:79:9f:87:18:27:39:8e:c8:5d:12:71:65:41:29:31:
e0:d5:1a:7b:c0:e5:db:2b:f5:4f:dd:83:e3:ab:4d:97:81:77:
8b:24:31:64:dc:48:a2:97:4f:65:bf:1e:ef:fe:9f:2b:0f:36:
23:53:56:cd
-----BEGIN CERTIFICATE-----
MIIGYDCCBUigAwIBAgISAZdzs5Q8fza0NvSa1cjTUw/xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNjE1MTMwNzE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Yzc5NTAwODQzZjc3NzhjNzdkMWIyYjZiNDdjZjIyNTgyMWNmYTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVBt0aZ0645ZAYgosEIxhv62bNJS
OqHIOXw/DsB2bb+uC1Iom7NK1RcyB/hSQ+YIi+176UrRvdV0Epjn4lXAASAz2cyM
fi9KDN2r7//f34I/+NeHrFhLRaXlKcnGtP60q4ttloRHPVa68wmdhGyZDA9IYH21
mjStqcEhdhUPlikneGoJSiN/ltpIJN1eA18mDQfdkCTkd4p6Z75OUOCVBqiDSgZz
kghAwgym1neFgM169n46SWUX849c7oDH/jKGFPJ9Ar07jMzdGrDz11nl9ECk+2m8
sVHK9++EKh7mZ8HLZfB6cLldokLuXkXYTMwVAqTDjcLy3uDW5gBfgMNY1QIDAQAB
o4IDbDCCA2gwHQYDVR0OBBYEFHx5UAhD93eMd9GytrR88iWCHPopMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvZkhsUUNFUDNkNHgzMGJLMnRIenlKWUljLWlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBgAYIKwYBBQUHAQcBAf8EggFvMIIBazCCAWcEAgABMIIB
XwMEAR84BAMEAB84MAMEAB84OQMEAB84TQMEAR84WgMEAx84aAMEAR84cjAMAwQB
Hzh2AwQCHzh4AwQAHziSAwQCHzi0AwQCHzi8MAwDBAIfOMQDBAMfONADBAIfOOQD
BAIfOOwDBAEfOQwDBAIfOSQDBAIfOTwDBAIfOVwDBAAfOWMDBAMfOWgDBAMfOXgD
BAEfOYQDBAMfOYgDBAEfOZIDBAIfOagwDAMEBB85sAMEAh85uAMEAh85wAMEAR85
yDAMAwQEHznQAwQCHzngAwQCHznoMAsDBAEfOfoDAwEfOAMEAR86IgMEAR86MgME
AR86QAMEAh86RAMEAh86VAMEAB86hgMEAh86mDAMAwQAHzqrAwQEHzqgMAwDBAIf
OtwDBAIfOuADBAIfO0wDBAIfO2ADBAIfO3AwDAMEAx87iAMEAx87kAMEAx87oAME
Ah871AMEAh874AMEAh876DANBgkqhkiG9w0BAQsFAAOCAQEArAhY+YSq9paSyKuf
KCHb5THEptdnkx9XWZHw8+u7A2f89tDDbwMHcggZm3oEorvFm/PQEoZFCwf36Jpe
H87/CssICXGmG1Z0RKLAeQ+qOD2G52KZriO2KO+1m2hlvfnrmsnl6VgRu2D2WtJF
vWxRBKtlKh5QzKdqJ4iV2tgkCeA0wDPQ2RYVxHAIfDU/RVTdqvuYHNAnt4CU7ZpH
FDDExvF4/XNTuSHy6UJE0oIIhKuJt0ng/N3XbKxcyKEQmCrkmnP4EqvhcMaZeZ+H
GCc5jshdEnFlQSkx4NUae8Dl2yv1T92D46tNl4F3iyQxZNxIopdPZb8e7/6fKw82
I1NWzQ==
-----END CERTIFICATE-----
Generated at Tue Jul 29 07:30:28 2025 by rpki-client