Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nNmkolz3x7JZfMrjCHLBXuyNLeg.roa
File: nNmkolz3x7JZfMrjCHLBXuyNLeg.roa (raw, json)
Hash identifier: 2HXdIpw7yhwZLY4+9kIM9q7VejtT8xq+QZ+zis3xhPg=
Subject key identifier: 9C:D9:A4:A2:5C:F7:C7:B2:59:7C:CA:E3:08:72:C1:5E:EC:8D:2D:E8
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019813E41AF34ACAAC0B63C5931788651A6C
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nNmkolz3x7JZfMrjCHLBXuyNLeg.roa
Signing time: Wed 16 Jul 2025 15:39:32 +0000
ROA not before: Wed 16 Jul 2025 15:39:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.28.0/22 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.59.0/24 maxlen: 24
31.56.76.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.180.0/23 maxlen: 23
31.56.188.0/22 maxlen: 24
31.56.190.0/23 maxlen: 23
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/23 maxlen: 23
31.56.224.0/23 maxlen: 23
31.56.228.0/22 maxlen: 24
31.56.230.0/23 maxlen: 23
31.56.236.0/22 maxlen: 24
31.56.236.0/23 maxlen: 23
31.57.10.0/24 maxlen: 24
31.57.12.0/23 maxlen: 24
31.57.14.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.94.0/23 maxlen: 23
31.57.104.0/21 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.120.0/23 maxlen: 23
31.57.124.0/22 maxlen: 24
31.57.126.0/23 maxlen: 23
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.183.0/24 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.186.0/23 maxlen: 23
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.231.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.87.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.152.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.220.0/23 maxlen: 23
31.58.224.0/22 maxlen: 24
31.58.226.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.96.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.136.0/21 maxlen: 24
31.59.136.0/24 maxlen: 24
31.59.138.0/23 maxlen: 23
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.174.0/23 maxlen: 23
31.59.212.0/22 maxlen: 24
31.59.212.0/24 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.230.0/24 maxlen: 24
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 17 Jul 2025 08:22:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:13:e4:1a:f3:4a:ca:ac:0b:63:c5:93:17:88:65:1a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 16 15:39:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9cd9a4a25cf7c7b2597ccae30872c15eec8d2de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d5:18:8b:29:b2:37:46:04:3e:73:39:36:9a:
ff:2d:6c:f0:eb:d1:fb:04:a7:d8:bd:96:1d:9d:2c:
52:34:35:2d:2e:cb:ce:ce:03:78:4b:bb:c5:20:e3:
7d:e2:47:b0:f7:24:7d:83:2d:ab:a9:26:c7:91:39:
38:64:5e:9d:21:9f:cb:0d:e8:9f:76:95:63:12:01:
a9:c6:21:7e:37:86:00:4e:0f:91:31:14:c8:d0:3a:
47:08:5b:aa:03:6a:23:3e:bf:9e:97:95:ef:e0:5a:
f0:45:83:70:13:79:58:03:03:65:86:6a:70:86:d2:
5e:f7:8f:a0:96:30:42:36:19:32:a6:b4:c5:45:ca:
ee:b7:df:66:05:10:32:7c:ef:e2:b7:49:75:09:56:
26:ca:75:aa:57:2d:45:3e:17:44:4f:dc:79:b8:54:
c2:bd:f5:6e:8b:57:f5:11:5e:06:76:41:c1:c3:23:
33:1a:f6:f7:ce:a2:7c:e7:b5:bb:8f:45:33:b6:c1:
86:93:95:d9:d1:75:78:af:6d:14:39:8a:dd:5f:03:
02:29:ce:70:a2:c7:a7:da:b2:c8:9a:04:0b:79:4e:
69:7b:e7:1f:c0:9b:c1:a7:ed:c5:6f:2e:16:e8:56:
bd:ac:45:c7:15:55:9d:66:07:78:2b:35:b5:d7:e7:
d4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D9:A4:A2:5C:F7:C7:B2:59:7C:CA:E3:08:72:C1:5E:EC:8D:2D:E8
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nNmkolz3x7JZfMrjCHLBXuyNLeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.28.0/22
31.56.57.0/24
31.56.59.0/24
31.56.76.0/23
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0/22
31.56.200.0/22
31.56.208.0/21
31.56.220.0/23
31.56.224.0/23
31.56.228.0/22
31.56.236.0/22
31.57.10.0/24
31.57.12.0/22
31.57.36.0/22
31.57.52.0-31.57.63.255
31.57.94.0/23
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.231.0-31.57.235.255
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.174.0/23
31.59.212.0/22
31.59.224.0/22
31.59.230.0/24
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:ee:82:7e:75:51:f9:b5:f4:3e:5c:8a:cd:ea:e5:03:1a:b7:
ae:7f:2c:2e:ab:ea:f4:d2:f2:71:87:00:57:e2:3b:60:66:d1:
ff:6c:1b:13:52:18:f9:dd:04:3c:1d:92:81:bc:cb:8d:ce:74:
4d:f6:7b:15:25:fe:22:3e:e6:95:74:b8:ca:c5:36:9c:b2:b7:
51:c5:aa:f5:0c:db:a0:7c:51:97:6c:2f:a7:21:c9:c3:7c:1f:
c4:70:c0:d9:82:88:76:91:36:e4:14:fd:5e:40:26:8c:13:79:
fe:b5:76:ab:e9:55:39:72:1a:14:72:19:e1:a8:7f:38:ea:60:
cd:b3:53:a6:f5:1c:1a:98:bf:59:73:4b:6e:fb:a7:48:c5:8b:
6c:d2:32:d4:67:50:18:0d:f6:0a:aa:9e:65:c5:a0:e5:11:4c:
97:8a:ff:d8:41:63:43:3f:0c:b7:88:4f:9a:d5:1f:df:79:7e:
ec:ef:27:ae:17:12:73:64:7d:75:bb:fe:66:77:cb:c0:ce:62:
f5:62:37:ae:74:0a:a4:90:98:31:af:eb:a6:a5:12:e9:fc:3f:
50:4f:72:f1:e9:12:97:25:f0:48:2e:d0:63:04:99:66:92:47:
45:1c:9a:1a:99:12:cc:16:66:c6:c4:0d:83:a1:82:a4:01:a0:
15:35:0b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:37:01 2025 by rpki-client