Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sKwbsrRuthM1gveV3pv2hF9Ootw.roa
File: sKwbsrRuthM1gveV3pv2hF9Ootw.roa (raw, json)
Hash identifier: TM/cybrU5ImuR5ihLJPzTv/y64PDZV3TuiNgHNemdDg=
Subject key identifier: B0:AC:1B:B2:B4:6E:B6:13:35:82:F7:95:DE:9B:F6:84:5F:4E:A2:DC
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01982928A3D244E4A10D765A58DA715916E9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sKwbsrRuthM1gveV3pv2hF9Ootw.roa
Signing time: Sun 20 Jul 2025 18:46:25 +0000
ROA not before: Sun 20 Jul 2025 18:46:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.28.0/22 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.59.0/24 maxlen: 24
31.56.76.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.107.0/24 maxlen: 24
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.180.0/23 maxlen: 23
31.56.188.0/22 maxlen: 24
31.56.190.0/23 maxlen: 23
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/23 maxlen: 23
31.56.224.0/23 maxlen: 23
31.56.228.0/22 maxlen: 24
31.56.230.0/23 maxlen: 23
31.56.236.0/22 maxlen: 24
31.56.236.0/23 maxlen: 23
31.57.12.0/23 maxlen: 24
31.57.14.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.94.0/23 maxlen: 23
31.57.104.0/21 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.120.0/23 maxlen: 23
31.57.124.0/22 maxlen: 24
31.57.126.0/23 maxlen: 23
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.183.0/24 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.186.0/23 maxlen: 23
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.231.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.87.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.152.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.220.0/23 maxlen: 23
31.58.224.0/22 maxlen: 24
31.58.226.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.96.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.136.0/21 maxlen: 24
31.59.136.0/24 maxlen: 24
31.59.138.0/23 maxlen: 23
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/23 maxlen: 23
31.59.174.0/23 maxlen: 23
31.59.224.0/22 maxlen: 22
31.59.230.0/24 maxlen: 24
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 22 Jul 2025 08:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:29:28:a3:d2:44:e4:a1:0d:76:5a:58:da:71:59:16:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 20 18:46:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0ac1bb2b46eb6133582f795de9bf6845f4ea2dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d3:5d:6f:40:bb:57:61:9a:7b:14:73:ba:76:
2a:9b:08:56:a7:7b:2a:a7:11:67:19:ef:6e:93:df:
45:1e:95:71:e0:8c:87:cf:c9:01:7d:b1:94:6a:3e:
43:3d:13:a8:a1:b6:25:44:7d:0e:3d:c8:b7:0c:ac:
99:dd:76:4d:d9:d3:8d:05:e3:16:b1:3e:6a:9b:bf:
76:ee:ed:3d:a0:9e:27:f7:23:62:28:45:05:c9:64:
9d:89:6a:04:5b:a6:6b:f4:37:7e:b3:2f:cd:12:09:
cc:03:4a:9c:6f:54:50:f0:55:a1:06:f3:5c:98:37:
62:de:38:89:35:50:e2:73:62:bb:e9:2f:9b:a2:ed:
bf:70:bf:11:a9:d7:71:5b:12:62:e4:10:72:15:55:
60:c5:5e:71:77:e0:51:4e:4f:01:95:67:e8:3d:b9:
d4:7a:e6:3e:c0:3f:35:af:e3:e8:fd:fc:c8:71:8f:
9e:f5:f1:c0:33:67:90:14:ae:68:8a:50:1e:46:15:
f7:ff:cc:29:fe:8f:f0:6d:68:f7:46:38:03:48:80:
70:c2:c3:3f:41:95:eb:62:9a:4c:6b:06:6f:75:50:
49:d5:bc:75:bf:c7:d0:5b:8b:7d:26:71:11:b1:c2:
99:85:75:df:02:b6:cb:0a:41:73:e9:5e:a2:99:9e:
01:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AC:1B:B2:B4:6E:B6:13:35:82:F7:95:DE:9B:F6:84:5F:4E:A2:DC
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sKwbsrRuthM1gveV3pv2hF9Ootw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.28.0/22
31.56.57.0/24
31.56.59.0/24
31.56.76.0/23
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0/22
31.56.200.0/22
31.56.208.0/21
31.56.220.0/23
31.56.224.0/23
31.56.228.0/22
31.56.236.0/22
31.57.12.0/22
31.57.36.0/22
31.57.52.0-31.57.63.255
31.57.94.0/23
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.231.0-31.57.235.255
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.136.0-31.59.151.255
31.59.160.0-31.59.169.255
31.59.174.0/23
31.59.224.0/22
31.59.230.0/24
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:13:3e:c3:0b:97:d9:b0:b3:e3:b2:d6:97:39:86:04:6e:21:
ea:45:79:ff:ca:e1:dc:37:8c:26:3b:08:33:6a:65:ec:0c:79:
30:43:39:19:f7:27:1a:0e:17:8f:5d:9b:dd:b6:77:ab:e1:65:
6e:b4:b3:42:16:ca:4f:55:0f:dc:47:b2:45:77:9c:fb:95:05:
91:cb:24:ab:b8:15:cd:fd:12:fd:d8:05:cb:5f:10:99:7c:c0:
0f:5a:3c:59:6a:bc:29:e9:dc:6f:24:a9:f7:c5:c4:b6:aa:e0:
41:6c:fa:fa:89:a9:65:34:89:0c:f8:ad:bf:d2:72:5b:4c:b6:
80:bf:88:68:bb:c5:e5:a1:b1:1d:4e:0f:6a:78:b9:0b:e0:8b:
9a:40:0e:40:48:c3:ba:f6:81:ec:e9:57:9b:6b:3d:5c:5c:04:
46:dc:ef:81:70:7e:3b:eb:65:77:12:18:59:59:76:26:51:35:
c5:c2:fa:58:1f:7b:03:a4:92:0b:d7:e1:5b:50:8a:e4:66:57:
85:6f:de:bc:53:99:ce:70:88:08:3e:71:bc:d4:65:e5:2a:49:
e7:90:e9:7a:3b:67:13:7c:5e:47:14:cb:09:76:47:24:00:23:
92:3e:2a:de:7a:43:a9:ad:55:2e:b3:f1:03:05:05:cd:0e:b0:
ec:3a:cd:46
-----BEGIN CERTIFICATE-----
MIIGdDCCBVygAwIBAgISAZgpKKPSROShDXZaWNpxWRbpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNzIwMTg0NjI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMGFjMWJiMmI0NmViNjEzMzU4MmY3OTVkZTliZjY4NDVmNGVhMmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tNdb0C7V2GaexRzunYqmwhWp3sq
pxFnGe9uk99FHpVx4IyHz8kBfbGUaj5DPROoobYlRH0OPci3DKyZ3XZN2dONBeMW
sT5qm7927u09oJ4n9yNiKEUFyWSdiWoEW6Zr9Dd+sy/NEgnMA0qcb1RQ8FWhBvNc
mDdi3jiJNVDic2K76S+bou2/cL8RqddxWxJi5BByFVVgxV5xd+BRTk8BlWfoPbnU
euY+wD81r+Po/fzIcY+e9fHAM2eQFK5oilAeRhX3/8wp/o/wbWj3RjgDSIBwwsM/
QZXrYppMawZvdVBJ1bx1v8fQW4t9JnERscKZhXXfArbLCkFz6V6imZ4BqQIDAQAB
o4IDgDCCA3wwHQYDVR0OBBYEFLCsG7K0brYTNYL3ld6b9oRfTqLcMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvc0t3YnNyUnV0aE0xZ3ZlVjNwdjJoRjlPb3R3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBlAYIKwYBBQUHAQcBAf8EggGDMIIBfzCCAXsEAgABMIIB
cwMEAR84BAMEAh84HAMEAB84OQMEAB84OwMEAR84TAMEAR84WgMEAx84aAMEAR84
cjAMAwQBHzh2AwQCHzh4AwQCHzi0AwQCHzi8AwQCHzjIAwQDHzjQAwQBHzjcAwQB
HzjgAwQCHzjkAwQCHzjsAwQCHzkMAwQCHzkkMAwDBAIfOTQDBAYfOQADBAEfOV4D
BAMfOWgDBAMfOXgDBAEfOYQDBAMfOYgDBAEfOZIDBAIfOagwDAMEBB85sAMEAh85
uAMEAh85wAMEAR85yDAMAwQEHznQAwQCHzngMAwDBAAfOecDBAIfOegwCwMEAR85
+gMDAR84AwQBHzoiAwQBHzoyAwQBHzpAAwQCHzpEAwQCHzpUAwQCHzqYAwQCHzqs
MAwDBAIfOtwDBAIfOuADBAIfO0wDBAIfO2ADBAIfO3AwDAMEAx87iAMEAx87kDAM
AwQFHzugAwQBHzuoAwQBHzuuAwQCHzvgAwQAHzvmAwQCHzvoMA0GCSqGSIb3DQEB
CwUAA4IBAQC0Ez7DC5fZsLPjstaXOYYEbiHqRXn/yuHcN4wmOwgzamXsDHkwQzkZ
9ycaDhePXZvdtner4WVutLNCFspPVQ/cR7JFd5z7lQWRyySruBXN/RL92AXLXxCZ
fMAPWjxZarwp6dxvJKn3xcS2quBBbPr6iallNIkM+K2/0nJbTLaAv4hou8XlobEd
Tg9qeLkL4IuaQA5ASMO69oHs6Vebaz1cXARG3O+BcH4762V3EhhZWXYmUTXFwvpY
H3sDpJIL1+FbUIrkZleFb968U5nOcIgIPnG81GXlKknnkOl6O2cTfF5HFMsJdkck
ACOSPireekOprVUus/EDBQXNDrDsOs1G
-----END CERTIFICATE-----
Generated at Tue Jul 29 07:37:20 2025 by rpki-client