Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gUkO-kxBu9YrFh7B81uPHhA01eA.roa
File: gUkO-kxBu9YrFh7B81uPHhA01eA.roa (raw, json)
Hash identifier: UePy8oQH6xLtN2Q4z2/q6qQ20kJodNF6twNDN3gyU9g=
Subject key identifier: 81:49:0E:FA:4C:41:BB:D6:2B:16:1E:C1:F3:5B:8F:1E:10:34:D5:E0
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197F3B6BE07009126366F5BB249E9CAC0B3
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gUkO-kxBu9YrFh7B81uPHhA01eA.roa
Signing time: Thu 10 Jul 2025 09:42:09 +0000
ROA not before: Thu 10 Jul 2025 09:42:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.28.0/22 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.59.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.180.0/23 maxlen: 23
31.56.188.0/22 maxlen: 24
31.56.190.0/23 maxlen: 23
31.56.198.0/23 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/23 maxlen: 23
31.56.224.0/23 maxlen: 23
31.56.228.0/22 maxlen: 24
31.56.230.0/23 maxlen: 23
31.56.236.0/22 maxlen: 24
31.56.236.0/23 maxlen: 23
31.57.12.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.94.0/23 maxlen: 23
31.57.104.0/21 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.120.0/23 maxlen: 23
31.57.124.0/22 maxlen: 24
31.57.126.0/23 maxlen: 23
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.147.0/24 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.186.0/23 maxlen: 23
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.231.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.87.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.220.0/23 maxlen: 23
31.58.224.0/22 maxlen: 24
31.58.226.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.96.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.136.0/21 maxlen: 24
31.59.136.0/24 maxlen: 24
31.59.138.0/23 maxlen: 23
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.174.0/23 maxlen: 23
31.59.212.0/22 maxlen: 24
31.59.212.0/24 maxlen: 24
31.59.213.0/24 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 10 Jul 2025 13:45:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f3:b6:be:07:00:91:26:36:6f:5b:b2:49:e9:ca:c0:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 10 09:42:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81490efa4c41bbd62b161ec1f35b8f1e1034d5e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:17:e6:f3:27:66:62:7c:fc:b0:df:8e:39:3b:
e9:d9:34:8f:85:64:45:dc:89:92:33:e0:9d:3c:92:
99:b8:d9:c1:f4:63:9f:43:f7:cb:d6:f9:4b:e0:42:
80:e9:4c:fe:21:58:85:1b:60:4d:d2:69:3f:57:8b:
e8:7b:6d:7d:77:98:6a:94:db:5e:91:cb:33:78:ad:
fe:e8:02:9d:13:8c:3d:dc:f1:ce:8d:73:06:80:41:
98:72:b1:35:4e:83:7f:93:84:77:81:45:37:82:ba:
cf:f7:0a:ae:c7:16:dc:0a:64:b2:59:9b:31:1c:0c:
3e:71:b6:9e:c4:e2:ac:bf:03:40:12:9a:f7:6d:fa:
36:e9:21:f3:f5:94:4f:00:b6:f5:8e:7c:f8:bd:e7:
ea:7a:76:5e:d8:3a:51:fb:2d:3d:83:c7:c5:19:5c:
d9:67:3d:70:c6:7b:58:58:30:f0:ac:4a:26:07:79:
92:d2:27:34:56:43:2c:f8:10:ee:c9:f7:a2:0b:b9:
b8:2a:41:aa:6f:05:52:58:72:93:67:50:60:f6:82:
67:d9:9a:a7:d1:c4:dc:cf:36:ca:54:81:8a:e6:60:
a2:35:64:e5:da:a1:d4:24:3e:70:8a:05:9b:f8:c6:
00:24:f6:cb:86:a8:3c:e7:82:68:02:b3:bc:7e:60:
8b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:49:0E:FA:4C:41:BB:D6:2B:16:1E:C1:F3:5B:8F:1E:10:34:D5:E0
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gUkO-kxBu9YrFh7B81uPHhA01eA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.28.0/22
31.56.57.0/24
31.56.59.0/24
31.56.77.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0/22
31.56.198.0-31.56.203.255
31.56.208.0/21
31.56.220.0/23
31.56.224.0/23
31.56.228.0/22
31.56.236.0/22
31.57.12.0/23
31.57.36.0/22
31.57.52.0-31.57.63.255
31.57.94.0/23
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.231.0-31.57.235.255
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.174.0/23
31.59.212.0/22
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:b9:88:b0:40:a8:01:b7:50:d4:b3:c0:ad:1a:b7:a0:18:da:
ea:80:9b:f5:d7:02:40:2b:ca:7d:06:3f:0b:8f:0b:bc:9a:27:
9e:54:b3:d1:12:c9:33:ef:94:83:48:b6:bb:c2:d7:d6:d9:73:
d0:41:fb:b8:57:5c:7a:63:0b:db:aa:fc:41:0c:80:fc:1d:e3:
9e:68:d7:d5:c3:6f:7b:db:1d:72:76:9d:41:92:30:54:fc:bf:
39:ab:cd:4e:94:92:2e:60:fb:7c:37:77:68:58:5c:ec:13:f3:
0d:84:97:21:5b:eb:91:4a:e4:b5:ae:05:9c:df:24:ad:68:be:
15:25:75:e7:a6:f5:67:b8:47:0d:b5:d0:eb:dd:0e:d5:53:ea:
e7:87:62:8e:20:a2:59:06:63:fb:a1:7f:1a:1e:f9:41:25:b3:
4b:10:95:7c:3b:1a:69:04:06:21:7b:bd:1a:76:91:32:18:2b:
f1:3e:d1:a3:9e:19:dc:6d:f2:95:88:08:b2:d7:af:ee:23:68:
63:88:fd:ba:b6:8b:a2:11:5b:69:08:07:d8:76:d9:e9:94:03:
92:94:06:0e:34:d0:32:c9:c4:85:bd:9b:60:22:1a:a3:ff:d0:
1e:d2:5a:2c:81:f7:af:34:e3:19:17:bf:1a:b0:33:6c:b4:4f:
94:78:49:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:47:33 2025 by rpki-client