
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nNNYXoPHK7na7aqMiagiOvuhriU.roa
File: nNNYXoPHK7na7aqMiagiOvuhriU.roa (raw, json)
Hash identifier: PPvDy8wj+udGXvcZogfo90W/ZRUeirRoPUPx3pxIzsY=
Subject key identifier: 9C:D3:58:5E:83:C7:2B:B9:DA:ED:AA:8C:89:A8:22:3A:FB:A1:AE:25
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197D40FEE252973970FB35486EEA65BF4FA
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nNNYXoPHK7na7aqMiagiOvuhriU.roa
Signing time: Fri 04 Jul 2025 06:11:42 +0000
ROA not before: Fri 04 Jul 2025 06:11:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.28.0/22 maxlen: 24
31.56.32.0/24 maxlen: 24
31.56.44.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.112.0/24 maxlen: 24
31.56.114.0/23 maxlen: 24
31.56.117.0/24 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.180.0/23 maxlen: 23
31.56.188.0/22 maxlen: 24
31.56.190.0/23 maxlen: 23
31.56.198.0/23 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/23 maxlen: 23
31.56.224.0/23 maxlen: 23
31.56.228.0/22 maxlen: 24
31.56.230.0/23 maxlen: 23
31.56.233.0/24 maxlen: 24
31.56.236.0/22 maxlen: 24
31.56.236.0/23 maxlen: 23
31.57.12.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.60.0/24 maxlen: 24
31.57.94.0/23 maxlen: 23
31.57.104.0/21 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.120.0/23 maxlen: 23
31.57.124.0/22 maxlen: 24
31.57.126.0/23 maxlen: 23
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.186.0/23 maxlen: 23
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.225.0/24 maxlen: 24
31.57.231.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.58.226.0/24 maxlen: 24
31.59.70.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.128.0/24 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.136.0/24 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.212.0/22 maxlen: 24
31.59.212.0/24 maxlen: 24
31.59.213.0/24 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
31.59.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Jul 2025 10:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d4:0f:ee:25:29:73:97:0f:b3:54:86:ee:a6:5b:f4:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 4 06:11:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9cd3585e83c72bb9daedaa8c89a8223afba1ae25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:34:ef:29:a4:d3:ca:d3:af:2b:33:4e:91:94:
b6:71:e5:5d:2b:a0:84:5d:32:40:f2:1e:8a:52:f0:
01:55:70:6e:9a:b1:f5:15:cf:a8:ac:3b:fa:b1:23:
11:ef:cf:e2:18:48:58:b6:32:d6:3f:9c:62:a0:5e:
81:49:ff:2a:6c:dd:52:a0:58:01:2d:67:be:6f:07:
b4:dd:08:16:3a:45:aa:ef:ec:09:a2:f4:45:f1:1b:
6f:bd:97:13:1d:33:5d:5e:f4:1d:59:6c:63:ea:ab:
55:77:2e:1a:eb:ad:dc:ac:fc:8d:c4:01:a7:bd:48:
9b:c3:cc:39:78:fb:39:cc:84:cf:80:87:29:06:4e:
94:62:b2:9a:d6:c0:d2:46:ab:ba:f8:d4:d6:9a:d9:
fc:a1:08:6b:5f:88:1f:8d:3c:4d:25:a3:4b:bd:29:
fe:ef:ba:86:af:f3:bd:59:a9:7e:59:2f:21:83:c0:
de:10:13:a3:1e:41:c0:f0:e1:53:74:c4:00:89:1d:
2b:b0:d1:8b:b1:c9:57:50:d2:ed:92:04:54:91:3e:
6b:ce:0c:e9:c3:6e:25:8b:62:bd:6a:d1:00:f9:ce:
bc:52:4c:2d:6a:46:4b:5f:6b:29:be:cf:71:c6:56:
af:25:12:00:43:0c:63:1d:05:dd:e5:31:b5:64:3d:
f3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D3:58:5E:83:C7:2B:B9:DA:ED:AA:8C:89:A8:22:3A:FB:A1:AE:25
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nNNYXoPHK7na7aqMiagiOvuhriU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.28.0-31.56.32.255
31.56.44.0/24
31.56.57.0/24
31.56.77.0/24
31.56.90.0/23
31.56.104.0-31.56.112.255
31.56.114.0/23
31.56.117.0-31.56.123.255
31.56.180.0/22
31.56.188.0/22
31.56.198.0-31.56.203.255
31.56.208.0/21
31.56.220.0/23
31.56.224.0/23
31.56.228.0/22
31.56.233.0/24
31.56.236.0/22
31.57.12.0/23
31.57.36.0/22
31.57.52.0-31.57.63.255
31.57.94.0/23
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.231.0-31.57.235.255
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.70.0/24
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.128.0/24
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.212.0/22
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:4d:59:f8:d2:4e:6b:fc:a9:c6:9c:b1:f6:43:29:a5:bf:16:
70:3b:1a:1b:1c:21:db:08:80:9d:cc:d7:8c:7d:09:d5:db:e7:
96:37:67:61:de:63:a4:4c:d8:54:92:2e:51:57:9b:43:d3:53:
41:3f:0a:98:ad:58:fc:35:da:a0:c0:39:fb:74:33:56:d8:7c:
0a:09:10:ea:9e:60:34:85:83:6f:4e:84:13:dd:a2:d6:9a:69:
b6:a0:b2:46:79:9d:92:26:24:d2:55:4d:97:79:91:d4:38:8c:
28:94:b7:4d:cf:33:11:99:28:39:0f:9c:44:6d:fa:af:f1:89:
23:99:a1:d6:fd:47:b5:fc:db:33:33:9c:7f:e0:7b:27:d1:12:
54:c9:19:ab:4c:c0:fa:78:90:a4:0e:be:36:f2:1c:63:3e:10:
26:e5:ca:80:7a:c4:a9:15:79:38:56:93:5e:ed:a3:e4:53:2e:
c8:9f:91:da:95:38:31:f3:bb:33:06:46:14:d9:9a:cb:36:90:
63:f2:fc:46:e3:f7:95:4a:10:b1:47:1a:62:f1:e9:30:4e:c3:
67:2b:e1:b8:89:6f:5c:4b:80:8f:9d:89:a9:35:e6:b7:91:ea:
cf:41:1a:9d:23:79:f8:d6:69:49:c9:47:7d:01:a6:4e:e9:2b:
eb:00:5b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:38:52 2025 by rpki-client