Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xrhKiUQvSZiDcJKBvauJUe6imcA.roa
File: xrhKiUQvSZiDcJKBvauJUe6imcA.roa (raw, json)
Hash identifier: PpJltOPN6YpBuGGAlASIovU8F8ADZU2EoTiTEDou1HU=
Subject key identifier: C6:B8:4A:89:44:2F:49:98:83:70:92:81:BD:AB:89:51:EE:A2:99:C0
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01983C04D27AFEF3DE0C85E52594E73E668B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xrhKiUQvSZiDcJKBvauJUe6imcA.roa
Signing time: Thu 24 Jul 2025 10:40:05 +0000
ROA not before: Thu 24 Jul 2025 10:40:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.28.0/22 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.59.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.107.0/24 maxlen: 24
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.180.0/23 maxlen: 23
31.56.188.0/22 maxlen: 24
31.56.190.0/23 maxlen: 23
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/23 maxlen: 23
31.56.224.0/23 maxlen: 23
31.56.228.0/22 maxlen: 24
31.56.230.0/23 maxlen: 23
31.56.236.0/22 maxlen: 24
31.56.236.0/23 maxlen: 23
31.57.12.0/23 maxlen: 24
31.57.14.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.94.0/23 maxlen: 23
31.57.104.0/21 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.120.0/23 maxlen: 23
31.57.124.0/22 maxlen: 24
31.57.126.0/23 maxlen: 23
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.186.0/23 maxlen: 23
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.87.0/24 maxlen: 24
31.58.134.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.152.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.220.0/23 maxlen: 23
31.58.224.0/22 maxlen: 24
31.58.226.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.96.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.136.0/21 maxlen: 24
31.59.136.0/24 maxlen: 24
31.59.138.0/23 maxlen: 23
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/23 maxlen: 23
31.59.174.0/23 maxlen: 23
31.59.224.0/22 maxlen: 22
31.59.230.0/24 maxlen: 24
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 26 Jul 2025 18:09:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3c:04:d2:7a:fe:f3:de:0c:85:e5:25:94:e7:3e:66:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 24 10:40:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6b84a89442f499883709281bdab8951eea299c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ed:d9:13:f2:b8:bb:7c:79:d8:24:cb:bc:98:
58:69:bb:71:28:c9:91:fa:01:56:ef:86:50:6e:2a:
65:24:80:35:71:07:b7:ad:a0:bc:84:d6:16:c9:45:
e0:d4:70:cf:09:3f:c2:e9:0f:d5:d8:cf:0b:65:10:
9e:a1:fe:4d:40:db:cf:79:57:49:17:a2:66:ad:cc:
68:ee:6f:1f:30:e8:fd:0b:1b:dc:cc:7a:5e:ac:74:
5a:d0:b9:f8:f4:63:50:4b:7a:85:8f:12:c3:3c:64:
ef:27:c3:c7:6a:6e:ff:4e:aa:3c:97:60:cb:0d:0b:
7a:50:8a:89:a6:37:85:0c:8c:50:38:ad:e5:94:e2:
f2:f7:a0:ae:c0:51:06:a0:44:6c:68:90:88:b7:2e:
39:6a:bb:80:d3:07:6c:d9:1b:95:fa:7c:70:75:e5:
96:b9:8c:a3:01:6b:d4:5e:4f:58:af:5a:0c:52:bf:
de:90:ed:50:59:2e:f5:f3:49:4f:d8:e0:43:e4:41:
53:d5:38:97:67:dc:b6:04:df:0e:94:18:cb:17:eb:
7a:61:a3:74:11:ba:e6:4d:83:cc:0f:62:4e:5c:98:
94:7e:55:b5:10:21:b1:df:d3:8d:eb:e8:70:cc:9f:
99:b6:47:5c:84:9f:83:52:f3:63:9d:65:e9:90:42:
13:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B8:4A:89:44:2F:49:98:83:70:92:81:BD:AB:89:51:EE:A2:99:C0
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xrhKiUQvSZiDcJKBvauJUe6imcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.28.0/22
31.56.57.0/24
31.56.59.0/24
31.56.77.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0/22
31.56.200.0/22
31.56.208.0/21
31.56.220.0/23
31.56.224.0/23
31.56.228.0/22
31.56.236.0/22
31.57.12.0/22
31.57.36.0/22
31.57.52.0-31.57.63.255
31.57.94.0/23
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.134.0/24
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.136.0-31.59.151.255
31.59.160.0-31.59.169.255
31.59.174.0/23
31.59.224.0/22
31.59.230.0/24
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:d5:b8:22:e6:72:51:53:04:7d:b4:5b:9a:0a:51:38:8c:9f:
00:fb:ec:59:e1:70:96:8b:70:04:d3:b1:7e:56:74:17:b3:8a:
ed:25:52:f2:d6:9a:9f:28:3d:01:22:41:78:64:c7:c2:f8:13:
b6:29:9e:05:8b:fb:2c:72:47:43:13:8f:0c:8a:18:53:79:88:
ee:57:b8:3b:6f:af:d0:b1:54:41:86:3b:15:1f:be:03:aa:12:
0d:b4:bc:fc:dd:bf:0d:91:6b:7b:18:da:0f:44:ce:3d:aa:77:
a6:d5:f4:33:23:9d:91:77:8c:7b:24:dc:ff:c1:c3:61:1f:58:
d3:94:87:b5:70:7e:65:f0:77:f2:fc:94:97:f2:07:8a:d8:19:
cc:f0:4b:b3:86:a1:04:d3:92:68:52:b6:e1:c7:57:7d:ef:59:
4e:9b:0a:9f:9f:60:e8:51:e4:7b:e5:1a:7e:94:7a:1d:c2:1b:
35:24:3e:dd:37:62:ad:71:ac:6a:36:86:59:f6:ee:38:e7:49:
c9:74:72:a5:56:b5:8f:0b:b5:16:cb:fd:fe:f0:59:50:f2:a5:
01:26:9f:ec:0a:6a:74:59:a6:dc:f1:17:e2:18:11:c7:57:e1:
e9:05:29:93:7c:ba:bb:a0:c1:15:63:42:db:94:45:b7:7c:ed:
ad:ff:72:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:40:46 2025 by rpki-client