Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kvvT8tKM3LnEaZB20hh33Z40RGI.roa
File: kvvT8tKM3LnEaZB20hh33Z40RGI.roa (raw, json)
Hash identifier: kT9JmCtGcpo7G3Wu5DcjKkd+heyF/XDdwCrc9Kub9a4=
Subject key identifier: 92:FB:D3:F2:D2:8C:DC:B9:C4:69:90:76:D2:18:77:DD:9E:34:44:62
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197E46B8D70789D09055BCF21973376CFAD
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kvvT8tKM3LnEaZB20hh33Z40RGI.roa
Signing time: Mon 07 Jul 2025 10:25:43 +0000
ROA not before: Mon 07 Jul 2025 10:25:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.1.0/24 maxlen: 24
31.56.4.0/23 maxlen: 23
31.56.28.0/22 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.117.0/24 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.180.0/23 maxlen: 23
31.56.188.0/22 maxlen: 24
31.56.190.0/23 maxlen: 23
31.56.198.0/23 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/23 maxlen: 23
31.56.224.0/23 maxlen: 23
31.56.228.0/22 maxlen: 24
31.56.230.0/23 maxlen: 23
31.56.233.0/24 maxlen: 24
31.56.236.0/22 maxlen: 24
31.56.236.0/23 maxlen: 23
31.57.12.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.60.0/24 maxlen: 24
31.57.94.0/23 maxlen: 23
31.57.104.0/21 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.120.0/23 maxlen: 23
31.57.124.0/22 maxlen: 24
31.57.126.0/23 maxlen: 23
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.147.0/24 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.186.0/23 maxlen: 23
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.225.0/24 maxlen: 24
31.57.231.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.220.0/23 maxlen: 23
31.58.224.0/22 maxlen: 24
31.58.226.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.96.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.136.0/21 maxlen: 24
31.59.136.0/24 maxlen: 24
31.59.138.0/23 maxlen: 23
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.174.0/23 maxlen: 23
31.59.212.0/22 maxlen: 24
31.59.212.0/24 maxlen: 24
31.59.213.0/24 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 08 Jul 2025 06:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e4:6b:8d:70:78:9d:09:05:5b:cf:21:97:33:76:cf:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 7 10:25:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92fbd3f2d28cdcb9c4699076d21877dd9e344462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:25:cd:6f:8c:ca:79:94:81:17:68:e1:4e:ad:
38:6d:fb:a0:29:4d:34:57:76:c3:36:79:7c:35:53:
aa:0c:8f:b0:f5:73:e4:40:82:fc:36:0f:b8:ab:ed:
09:c1:fa:4c:98:61:a4:ab:28:38:01:46:39:7a:20:
0a:e2:3d:1e:4e:ff:8c:40:aa:85:e2:95:9b:af:1a:
c6:ae:0c:d7:2f:13:40:0f:d7:67:df:56:16:dc:54:
7a:08:e6:55:51:71:6f:86:34:e6:e3:81:df:6a:f5:
f5:f9:5a:ea:c3:98:2c:70:3e:7c:6b:92:ab:3f:82:
18:ca:77:08:2f:55:29:82:d1:ba:8e:e5:3b:65:10:
00:67:e1:14:95:e2:d7:9f:0b:55:1c:86:cc:67:f4:
b7:d8:6a:d1:51:eb:5e:d8:73:fe:e9:f0:37:59:4d:
02:e1:b5:80:e8:8f:45:5e:7b:f7:9f:56:64:49:45:
75:e5:3b:ba:86:9c:eb:37:58:25:bd:8c:17:7e:80:
d3:20:8f:a4:b3:26:db:73:2d:ac:d3:35:d3:52:6c:
db:9a:a2:90:00:36:db:02:07:50:19:63:38:29:83:
a3:fb:c8:e1:6c:14:93:77:ce:dc:ad:ed:b8:87:af:
45:e8:73:de:56:28:be:89:40:49:ec:ce:7c:3e:0b:
e3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:FB:D3:F2:D2:8C:DC:B9:C4:69:90:76:D2:18:77:DD:9E:34:44:62
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kvvT8tKM3LnEaZB20hh33Z40RGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.1.0/24
31.56.4.0/23
31.56.28.0/22
31.56.57.0/24
31.56.77.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.117.0-31.56.123.255
31.56.180.0/22
31.56.188.0/22
31.56.198.0-31.56.203.255
31.56.208.0/21
31.56.220.0/23
31.56.224.0/23
31.56.228.0/22
31.56.233.0/24
31.56.236.0/22
31.57.12.0/23
31.57.36.0/22
31.57.52.0-31.57.63.255
31.57.94.0/23
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.231.0-31.57.235.255
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.174.0/23
31.59.212.0/22
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:2e:e3:4c:a2:75:a6:e3:5c:ae:a4:8a:5a:c6:33:ee:6b:39:
77:f9:65:53:6b:c8:6c:c1:7d:0b:2f:d6:34:1f:4f:29:19:a9:
04:1a:d3:26:9b:ca:ea:1d:a5:36:d9:06:ef:f3:ba:ef:bf:f7:
15:f8:24:7d:84:dd:f3:d5:89:bc:a0:20:02:48:fd:5a:46:bb:
9c:2e:33:95:50:0c:7d:81:b8:63:0e:f1:85:e6:fd:aa:2c:ec:
89:6f:c1:84:bf:5d:d6:66:95:13:6c:30:fc:a7:20:b3:c0:54:
69:7c:1f:d9:eb:2e:fa:95:4d:96:6b:45:33:92:e8:ad:ac:a8:
c4:e1:d8:09:23:6b:67:c1:3a:44:04:94:88:62:fd:3b:25:10:
b7:fc:68:ae:71:c1:f9:05:46:b7:4d:88:a9:bc:e4:66:05:95:
8c:0f:01:95:84:0c:14:38:0c:59:b9:4b:fd:c6:e8:39:fa:6a:
18:e4:c8:52:21:2a:2b:32:db:47:48:31:10:cd:4a:02:1d:dd:
d6:65:10:a4:2f:a1:8f:fa:59:c7:92:1d:ef:8a:f9:24:47:ad:
79:10:e5:2b:51:a2:b2:af:2b:e4:09:99:e6:c7:ca:23:eb:c9:
f7:21:99:6f:ab:cd:92:d9:cd:76:b0:c0:d4:e1:c0:87:ac:ef:
b6:ac:ea:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:44:54 2025 by rpki-client