Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wmJBWNmY4NdjcDIS5ce-531DBSk.roa
File: wmJBWNmY4NdjcDIS5ce-531DBSk.roa (raw, json)
Hash identifier: opU14L6KDXag8I2IQkG1eWP/2BOlc3RkL1xVEF5j+qo=
Subject key identifier: C2:62:41:58:D9:98:E0:D7:63:70:32:12:E5:C7:BE:E7:7D:43:05:29
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197B08CBD2F760449B4CA4E3A42608CECCC
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wmJBWNmY4NdjcDIS5ce-531DBSk.roa
Signing time: Fri 27 Jun 2025 08:41:42 +0000
ROA not before: Fri 27 Jun 2025 08:41:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.32.0/24 maxlen: 24
31.56.48.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.146.0/24 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.196.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.204.0/22 maxlen: 22
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.57.12.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.60.0/22 maxlen: 24
31.57.92.0/22 maxlen: 22
31.57.92.0/23 maxlen: 24
31.57.95.0/24 maxlen: 24
31.57.99.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.162.0/23 maxlen: 23
31.57.164.0/23 maxlen: 23
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.183.0/24 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.200.0/24 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.171.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.58.226.0/24 maxlen: 24
31.59.70.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.128.0/24 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.136.0/24 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.212.0/22 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 27 Jun 2025 16:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b0:8c:bd:2f:76:04:49:b4:ca:4e:3a:42:60:8c:ec:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 27 08:41:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2624158d998e0d763703212e5c7bee77d430529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:94:4e:af:31:ec:87:d2:a7:a9:c0:bb:d2:71:
02:f2:0e:09:fc:59:a7:1e:1f:c3:e2:8d:1f:95:9d:
ae:9c:c1:45:1e:db:5a:cf:72:c7:58:c5:15:c3:cf:
25:4d:bc:d0:de:39:18:ec:dc:8d:4c:20:6a:d2:4f:
b7:9d:b1:6c:78:33:ff:47:41:68:b2:7c:47:80:c0:
a9:69:3b:a9:d9:f1:16:e6:53:80:68:24:5b:7c:c7:
cc:03:99:dc:6f:33:9a:48:ac:80:10:c7:50:cb:9d:
5d:52:e8:5a:70:20:95:ea:63:94:5b:8d:1c:e9:0b:
ac:49:4b:fb:32:ca:c4:3f:bf:e6:50:6f:92:83:2a:
8e:5b:c1:8c:44:7b:54:a2:da:c4:2d:b9:b2:1e:ed:
99:f8:1b:b4:30:44:d6:79:af:16:00:3d:81:e1:d6:
be:7b:30:69:fb:03:c2:bf:e5:88:c8:00:02:32:18:
d3:a0:8e:51:1d:36:c8:67:bd:e5:3f:ec:2f:c8:54:
c8:95:d3:7b:94:e3:ee:c5:7a:e2:3e:49:67:7c:30:
d8:4f:49:66:46:a8:9e:4e:a9:ac:23:33:e0:ea:eb:
89:da:08:70:2a:4e:31:02:91:f8:07:91:19:19:a0:
67:c0:c6:e7:a6:26:b9:2d:fd:d6:f8:30:7e:ec:9e:
1f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:62:41:58:D9:98:E0:D7:63:70:32:12:E5:C7:BE:E7:7D:43:05:29
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wmJBWNmY4NdjcDIS5ce-531DBSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.32.0/24
31.56.48.0/24
31.56.57.0/24
31.56.77.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.146.0/24
31.56.180.0/22
31.56.188.0/22
31.56.196.0-31.56.215.255
31.56.228.0/22
31.56.236.0/22
31.57.12.0/23
31.57.36.0/22
31.57.60.0/22
31.57.92.0/22
31.57.99.0/24
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.162.0-31.57.165.255
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.171.0-31.58.175.255
31.58.220.0-31.58.227.255
31.59.70.0/24
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.128.0/24
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.212.0/22
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
87:14:1b:31:e3:95:1a:8c:10:bf:64:de:19:43:cf:28:92:43:
1a:9b:80:b8:ee:c8:cc:1a:10:0f:9a:d4:cc:0c:93:0c:e9:d4:
cc:c9:4f:e6:15:0c:a9:c3:4d:c4:02:1a:3a:b4:24:c6:ca:c2:
83:b1:4f:23:27:5b:a1:07:17:9b:41:a1:ed:4d:a7:45:10:94:
87:a6:6b:09:49:b2:dc:a2:13:62:af:ae:37:6b:fa:e4:65:20:
7e:bc:8a:f7:e4:2b:f2:ec:3a:77:ce:b2:ea:73:f6:a4:d7:21:
20:11:09:e4:53:43:ad:d1:5c:c8:21:30:0c:26:fd:8a:f0:6f:
2b:03:b6:f5:6c:d1:8e:4f:6c:59:a8:af:07:02:ab:c7:85:9e:
dd:5e:5b:6f:94:5b:71:b4:7c:14:ee:b4:34:4c:fa:50:9e:0e:
7f:8f:09:d2:1f:2a:04:2f:7c:cb:8d:cb:a1:69:b6:d9:73:66:
8a:0e:ec:5d:c4:84:76:98:85:f8:86:f6:c7:15:f6:9c:23:d3:
7b:c9:a1:40:e1:99:17:1f:8a:15:69:5b:1b:8f:bd:d5:39:3c:
50:f1:6d:09:4b:49:8e:3f:63:e2:ac:90:03:2f:3e:f8:10:9f:
bc:55:a7:7e:14:71:33:5d:48:bf:11:16:5d:e8:31:7b:a6:e3:
84:09:0b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:28:38 2025 by rpki-client