Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pqHLjObFMUDIkIVhdv9Tqno58I8.roa
File: pqHLjObFMUDIkIVhdv9Tqno58I8.roa (raw, json)
Hash identifier: 6xutp1wH6C4u1h9d70aUlgywv1oAx6ahHTuEi9EOmuU=
Subject key identifier: A6:A1:CB:8C:E6:C5:31:40:C8:90:85:61:76:FF:53:AA:7A:39:F0:8F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197CFB5BA4DA960CBCD707A890B59D93719
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pqHLjObFMUDIkIVhdv9Tqno58I8.roa
Signing time: Thu 03 Jul 2025 09:54:42 +0000
ROA not before: Thu 03 Jul 2025 09:54:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.28.0/22 maxlen: 24
31.56.32.0/24 maxlen: 24
31.56.44.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.112.0/24 maxlen: 24
31.56.114.0/23 maxlen: 24
31.56.117.0/24 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.180.0/23 maxlen: 23
31.56.188.0/22 maxlen: 24
31.56.190.0/23 maxlen: 23
31.56.192.0/22 maxlen: 22
31.56.198.0/23 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.216.0/22 maxlen: 22
31.56.220.0/23 maxlen: 23
31.56.224.0/23 maxlen: 23
31.56.228.0/22 maxlen: 24
31.56.230.0/23 maxlen: 23
31.56.233.0/24 maxlen: 24
31.56.236.0/22 maxlen: 24
31.56.236.0/23 maxlen: 23
31.57.12.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.94.0/23 maxlen: 23
31.57.104.0/21 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.120.0/23 maxlen: 23
31.57.124.0/22 maxlen: 24
31.57.126.0/23 maxlen: 23
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.225.0/24 maxlen: 24
31.57.231.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.58.226.0/24 maxlen: 24
31.59.70.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.128.0/24 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.136.0/24 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.212.0/22 maxlen: 24
31.59.212.0/24 maxlen: 24
31.59.213.0/24 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
31.59.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Jul 2025 13:53:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cf:b5:ba:4d:a9:60:cb:cd:70:7a:89:0b:59:d9:37:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 3 09:54:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6a1cb8ce6c53140c890856176ff53aa7a39f08f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:de:03:2a:8d:cb:71:ab:b1:bd:a0:4a:fb:a5:
6f:ef:30:f9:1f:78:dd:bc:ee:7d:9f:e1:58:3f:ec:
c1:1e:b8:d6:6c:78:46:f1:f5:b5:98:c2:fb:f3:85:
d8:61:d0:dc:36:f9:eb:b6:c5:af:6d:9b:6b:db:5f:
6f:ae:7d:18:ae:b5:35:60:a9:6b:e1:56:7a:13:cc:
9f:25:da:a4:06:6a:ee:72:cf:3f:22:bd:13:d5:4a:
ec:8a:a3:07:c1:cf:79:c8:f5:cb:0f:d1:67:69:d1:
b1:7d:a0:5d:78:7e:59:99:04:ef:5a:1a:7e:26:15:
5b:b4:d8:c7:38:c9:6d:a2:cb:fa:32:77:25:60:08:
79:50:1e:e0:63:08:55:29:c1:4a:63:68:a2:bf:ce:
b6:a5:7f:cc:7d:0b:cb:e4:32:f3:fc:da:af:c6:40:
9c:e5:0a:22:66:41:0f:c9:f5:b8:39:3b:6d:59:49:
83:02:94:55:e3:69:fd:bd:81:1a:63:db:9f:3d:e8:
2b:bd:e4:07:1b:b3:35:74:ba:14:d3:9d:13:1f:d6:
c9:cf:4b:1a:f9:59:44:a1:dd:85:42:2b:68:56:08:
41:a8:27:c1:e5:56:89:51:ad:dd:eb:7c:cc:77:a5:
b4:5f:fc:b4:da:3d:e5:97:55:47:fc:b8:b7:ea:79:
83:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A1:CB:8C:E6:C5:31:40:C8:90:85:61:76:FF:53:AA:7A:39:F0:8F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pqHLjObFMUDIkIVhdv9Tqno58I8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.28.0-31.56.32.255
31.56.44.0/24
31.56.57.0/24
31.56.77.0/24
31.56.90.0/23
31.56.104.0-31.56.112.255
31.56.114.0/23
31.56.117.0-31.56.123.255
31.56.180.0/22
31.56.188.0-31.56.195.255
31.56.198.0-31.56.203.255
31.56.208.0-31.56.221.255
31.56.224.0/23
31.56.228.0/22
31.56.233.0/24
31.56.236.0/22
31.57.12.0/23
31.57.36.0/22
31.57.52.0-31.57.63.255
31.57.94.0/23
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.231.0-31.57.235.255
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.70.0/24
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.128.0/24
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.212.0/22
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
78:7a:17:a0:ff:df:be:16:6b:8c:6d:bf:5a:9b:28:5f:3e:2d:
5f:97:cd:07:54:1b:2f:46:5f:15:a6:9e:b4:09:60:09:4a:4d:
d9:af:20:84:fc:16:d9:db:1b:f1:17:b6:29:b7:1d:f8:d8:10:
09:91:15:6a:b3:88:e0:86:9d:f7:be:49:79:14:5e:75:96:4a:
bb:b2:07:3d:b7:2f:51:2c:e6:38:94:35:c9:8f:f6:4c:b9:36:
da:b2:e4:02:91:8e:b5:8d:3f:2b:25:4b:db:42:17:e1:3c:20:
89:7f:88:b7:0a:2f:c7:f5:11:43:47:c6:63:b4:de:75:d4:a9:
7f:e3:6d:02:61:34:7e:ef:3a:c5:b0:ab:7d:b7:fb:88:12:aa:
3e:f6:15:56:52:e5:d0:4e:f4:1f:bc:a6:b2:25:23:b6:d7:0c:
4e:ea:a0:89:55:d5:e8:18:14:7c:74:a1:6b:84:71:a2:2d:5f:
75:c3:bc:89:77:3b:d1:42:91:c9:56:de:01:2a:fb:86:7b:b2:
ac:3b:ed:56:1a:43:3c:99:18:a1:07:f8:b4:d0:80:95:dc:ef:
ec:fb:ca:88:1d:e8:cb:12:57:8f:39:e8:f8:68:e5:be:7b:27:
9f:c7:f7:41:c4:c6:57:70:92:3f:cb:db:93:d5:25:b5:9f:e0:
9d:bb:56:b8
-----BEGIN CERTIFICATE-----
MIIGmjCCBYKgAwIBAgISAZfPtbpNqWDLzXB6iQtZ2TcZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNzAzMDk1NDQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNmExY2I4Y2U2YzUzMTQwYzg5MDg1NjE3NmZmNTNhYTdhMzlmMDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu94DKo3LcauxvaBK+6Vv7zD5H3jd
vO59n+FYP+zBHrjWbHhG8fW1mML784XYYdDcNvnrtsWvbZtr219vrn0YrrU1YKlr
4VZ6E8yfJdqkBmrucs8/Ir0T1UrsiqMHwc95yPXLD9FnadGxfaBdeH5ZmQTvWhp+
JhVbtNjHOMltosv6MnclYAh5UB7gYwhVKcFKY2iiv862pX/MfQvL5DLz/NqvxkCc
5QoiZkEPyfW4OTttWUmDApRV42n9vYEaY9ufPegrveQHG7M1dLoU050TH9bJz0sa
+VlEod2FQitoVghBqCfB5VaJUa3d63zMd6W0X/y02j3ll1VH/Li36nmDlQIDAQAB
o4IDpjCCA6IwHQYDVR0OBBYEFKahy4zmxTFAyJCFYXb/U6p6OfCPMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvcHFITGpPYkZNVURJa0lWaGR2OVRxbm81OEk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBugYIKwYBBQUHAQcBAf8EggGpMIIBpTCCAaEEAgABMIIB
mQMEAR84BDAMAwQCHzgcAwQAHzggAwQAHzgsAwQAHzg5AwQAHzhNAwQBHzhaMAwD
BAMfOGgDBAAfOHADBAEfOHIwDAMEAB84dQMEAh84eAMEAh84tDAMAwQCHzi8AwQC
HzjAMAwDBAEfOMYDBAIfOMgwDAMEBB840AMEAR843AMEAR844AMEAh845AMEAB84
6QMEAh847AMEAR85DAMEAh85JDAMAwQCHzk0AwQGHzkAAwQBHzleAwQDHzloAwQD
Hzl4AwQBHzmEAwQDHzmIAwQBHzmSAwQCHzmoMAwDBAQfObADBAIfObgDBAIfOcAD
BAEfOcgwDAMEBB850AMEAh854DAMAwQAHznnAwQCHznoMAsDBAEfOfoDAwEfOAME
AR86IgMEAR86MgMEAR86QAMEAh86RAMEAh86VAMEAh86mAMEAh86rDAMAwQCHzrc
AwQCHzrgAwQAHztGAwQCHztMAwQCHztgAwQCHztwAwQAHzuAMAwDBAMfO4gDBAMf
O5ADBAMfO6ADBAIfO9QDBAIfO+ADBAIfO+gwDQYJKoZIhvcNAQELBQADggEBAHh6
F6D/374Wa4xtv1qbKF8+LV+XzQdUGy9GXxWmnrQJYAlKTdmvIIT8FtnbG/EXtim3
HfjYEAmRFWqziOCGnfe+SXkUXnWWSruyBz23L1Es5jiUNcmP9ky5Ntqy5AKRjrWN
PyslS9tCF+E8IIl/iLcKL8f1EUNHxmO03nXUqX/jbQJhNH7vOsWwq323+4gSqj72
FVZS5dBO9B+8prIlI7bXDE7qoIlV1egYFHx0oWuEcaItX3XDvIl3O9FCkclW3gEq
+4Z7sqw77VYaQzyZGKEH+LTQgJXc7+z7yogd6MsSV4856Pho5b57J5/H90HExldw
kj/L25PVJbWf4J27Vrg=
-----END CERTIFICATE-----
Generated at Tue Jul 29 07:36:19 2025 by rpki-client