Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/s3LJLshjeVYY49uStqbmbVPh8aA.roa
File: s3LJLshjeVYY49uStqbmbVPh8aA.roa (raw, json)
Hash identifier: LYt2XmXfE5hAcnxXSBDXuSrimRM0LGwJx3LjYBhlads=
Subject key identifier: B3:72:C9:2E:C8:63:79:56:18:E3:DB:92:B6:A6:E6:6D:53:E1:F1:A0
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01980E3327279D628B18225A47B508A4F971
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/s3LJLshjeVYY49uStqbmbVPh8aA.roa
Signing time: Tue 15 Jul 2025 13:08:10 +0000
ROA not before: Tue 15 Jul 2025 13:08:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.28.0/22 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.59.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.180.0/23 maxlen: 23
31.56.188.0/22 maxlen: 24
31.56.190.0/23 maxlen: 23
31.56.200.0/22 maxlen: 24
31.56.207.0/24 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/23 maxlen: 23
31.56.224.0/23 maxlen: 23
31.56.228.0/22 maxlen: 24
31.56.230.0/23 maxlen: 23
31.56.236.0/22 maxlen: 24
31.56.236.0/23 maxlen: 23
31.57.10.0/24 maxlen: 24
31.57.12.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.94.0/23 maxlen: 23
31.57.104.0/21 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.120.0/23 maxlen: 23
31.57.124.0/22 maxlen: 24
31.57.126.0/23 maxlen: 23
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.183.0/24 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.186.0/23 maxlen: 23
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.231.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.87.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.152.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.220.0/23 maxlen: 23
31.58.224.0/22 maxlen: 24
31.58.226.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.96.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.136.0/21 maxlen: 24
31.59.136.0/24 maxlen: 24
31.59.138.0/23 maxlen: 23
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.174.0/23 maxlen: 23
31.59.212.0/22 maxlen: 24
31.59.212.0/24 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.230.0/24 maxlen: 24
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 16 Jul 2025 07:15:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0e:33:27:27:9d:62:8b:18:22:5a:47:b5:08:a4:f9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 15 13:08:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b372c92ec863795618e3db92b6a6e66d53e1f1a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5f:db:2d:ee:88:43:8f:dc:c8:6d:2e:3e:a1:
a1:f6:f5:e3:9a:49:18:f3:cf:53:2d:50:a8:b1:5a:
da:60:02:ce:9b:1b:46:d0:01:2d:96:15:94:b0:8f:
db:0d:e8:fe:3c:42:20:eb:30:4a:6f:c8:c4:c0:d4:
e2:74:95:c0:ef:67:2d:5e:6e:21:15:8b:f7:43:30:
9f:26:51:5b:77:c0:c0:15:45:3d:ef:29:fd:b6:b7:
39:49:5e:5f:de:1e:39:e2:90:e4:0a:d1:4b:fd:45:
29:b5:fc:56:02:ef:bc:41:88:ee:42:c2:e7:83:d7:
f4:9a:c2:c4:3f:e8:26:28:d2:a0:f4:fc:f9:e8:97:
3f:b8:b0:b4:2f:2d:5e:72:f8:8d:55:14:38:65:b8:
39:da:c5:c2:9c:cc:72:0a:83:f5:d2:c5:78:74:7c:
17:d8:12:2e:0b:d0:c9:b8:ea:88:23:99:d6:b1:2e:
3c:25:1d:e8:c6:d7:69:8f:22:ce:f4:3a:e5:be:27:
71:b5:58:1e:ba:db:8d:5e:40:28:c3:ed:f0:f0:fc:
a7:45:85:4c:1c:ca:b3:b7:33:39:a9:4d:51:8c:fb:
9a:9a:3d:a6:36:ee:f6:08:f2:4c:5f:69:76:69:ff:
66:5e:2b:92:35:bd:88:9a:f5:10:93:1f:e1:4e:24:
92:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:72:C9:2E:C8:63:79:56:18:E3:DB:92:B6:A6:E6:6D:53:E1:F1:A0
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/s3LJLshjeVYY49uStqbmbVPh8aA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.28.0/22
31.56.57.0/24
31.56.59.0/24
31.56.77.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0/22
31.56.200.0/22
31.56.207.0-31.56.215.255
31.56.220.0/23
31.56.224.0/23
31.56.228.0/22
31.56.236.0/22
31.57.10.0/24
31.57.12.0/23
31.57.36.0/22
31.57.52.0-31.57.63.255
31.57.94.0/23
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.231.0-31.57.235.255
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.174.0/23
31.59.212.0/22
31.59.224.0/22
31.59.230.0/24
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
63:0d:cb:78:d6:9a:68:ed:ed:31:a6:4e:72:d7:4a:58:fc:61:
95:c3:f7:5a:b0:ac:20:a1:cb:e8:d3:5a:96:93:b1:ad:cf:93:
80:9d:ed:d2:6f:07:45:bd:8b:f4:86:69:d9:bc:35:15:06:01:
4d:b0:f5:7b:6d:bf:56:6a:49:de:fb:37:eb:3d:b7:33:7e:64:
1a:12:d2:ea:ec:7d:0d:2a:71:bf:e3:76:f7:bf:97:e3:18:ba:
ad:0f:8e:7a:ec:55:15:ee:1d:3d:4f:5b:70:01:92:40:73:87:
6c:80:90:d1:9c:b7:6c:8e:53:d0:e5:63:5d:71:ea:be:9d:a8:
58:82:2c:9e:0b:6d:a6:23:1d:72:fe:33:97:15:b8:7e:df:fc:
5a:0b:47:6b:fd:32:66:f1:c3:39:b9:82:df:fa:19:f7:47:82:
65:59:4f:24:8f:07:7c:f0:a3:b2:02:f5:2b:ba:64:a0:d7:53:
05:76:5d:0c:fe:30:d2:a4:41:c1:d9:30:ff:f7:12:b8:85:2a:
75:92:00:00:bb:32:e6:72:63:40:5e:5c:00:f1:a7:3c:10:de:
41:69:68:ae:d2:ab:73:ff:39:5b:04:05:48:d8:2a:9e:fb:71:
f3:11:bb:f4:e7:de:05:12:32:13:ae:d4:cc:77:c0:f8:1c:20:
54:41:53:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:35:33 2025 by rpki-client