Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ybvjZD4K8BZH9ZPuwNFYbnktTPM.roa
File: ybvjZD4K8BZH9ZPuwNFYbnktTPM.roa (raw, json)
Hash identifier: 6xGpUufYp8qxzZ8uy0BtJ3C1SDhpKnjo15UcJyN8t6w=
Subject key identifier: C9:BB:E3:64:3E:0A:F0:16:47:F5:93:EE:C0:D1:58:6E:79:2D:4C:F3
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019812FF3928D1B669850A152C935D1E95EB
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ybvjZD4K8BZH9ZPuwNFYbnktTPM.roa
Signing time: Wed 16 Jul 2025 11:29:32 +0000
ROA not before: Wed 16 Jul 2025 11:29:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.28.0/22 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.59.0/24 maxlen: 24
31.56.76.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.180.0/23 maxlen: 23
31.56.188.0/22 maxlen: 24
31.56.190.0/23 maxlen: 23
31.56.200.0/22 maxlen: 24
31.56.207.0/24 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/23 maxlen: 23
31.56.224.0/23 maxlen: 23
31.56.228.0/22 maxlen: 24
31.56.230.0/23 maxlen: 23
31.56.236.0/22 maxlen: 24
31.56.236.0/23 maxlen: 23
31.57.10.0/24 maxlen: 24
31.57.12.0/23 maxlen: 24
31.57.14.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.94.0/23 maxlen: 23
31.57.104.0/21 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.120.0/23 maxlen: 23
31.57.124.0/22 maxlen: 24
31.57.126.0/23 maxlen: 23
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.183.0/24 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.186.0/23 maxlen: 23
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.231.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.87.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.152.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.220.0/23 maxlen: 23
31.58.224.0/22 maxlen: 24
31.58.226.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.96.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.136.0/21 maxlen: 24
31.59.136.0/24 maxlen: 24
31.59.138.0/23 maxlen: 23
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.174.0/23 maxlen: 23
31.59.212.0/22 maxlen: 24
31.59.212.0/24 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.230.0/24 maxlen: 24
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 16 Jul 2025 15:39:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:12:ff:39:28:d1:b6:69:85:0a:15:2c:93:5d:1e:95:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 16 11:29:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9bbe3643e0af01647f593eec0d1586e792d4cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:40:47:c1:ca:1b:66:bc:42:b9:3b:ef:2b:de:
89:26:3e:56:7b:f7:ed:d0:fa:f8:5f:64:34:b6:2a:
9b:17:70:46:b4:1f:33:cd:4c:b4:2f:19:5f:a1:ff:
e1:fb:b6:9c:84:4b:f3:a8:f4:90:73:83:5b:d0:8a:
7a:74:e9:5b:38:f3:75:e8:cd:f8:2e:64:26:86:2f:
f2:ec:36:86:fe:5e:22:2c:77:3e:d7:cc:65:b3:aa:
ee:0f:d1:e9:2b:99:2f:65:39:b9:7f:1c:b2:cd:2c:
e7:8f:33:35:38:49:5e:79:a0:03:0e:83:68:cb:cd:
81:89:87:2b:32:9e:ec:8a:60:b6:90:d8:3a:be:c8:
ce:6b:ec:3f:4d:be:87:80:17:33:5e:b0:df:33:1a:
04:ea:49:57:ec:3b:82:e0:db:12:44:6c:33:78:dc:
5b:e0:b1:c1:40:8b:04:5f:41:3d:ce:70:51:fa:2f:
8a:83:a3:b8:0f:fd:61:f0:06:e5:03:4c:fb:6a:73:
75:fa:42:d0:72:a1:bc:cf:2a:6d:49:b1:1d:96:2d:
42:45:a4:f5:b2:86:12:79:e8:38:43:ea:13:cf:84:
0d:89:cd:59:72:03:ae:7b:d6:31:a1:0b:e6:a7:20:
b0:b4:a7:2c:58:47:6d:db:c9:7c:51:9e:3b:97:47:
7c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BB:E3:64:3E:0A:F0:16:47:F5:93:EE:C0:D1:58:6E:79:2D:4C:F3
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ybvjZD4K8BZH9ZPuwNFYbnktTPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.28.0/22
31.56.57.0/24
31.56.59.0/24
31.56.76.0/23
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0/22
31.56.200.0/22
31.56.207.0-31.56.215.255
31.56.220.0/23
31.56.224.0/23
31.56.228.0/22
31.56.236.0/22
31.57.10.0/24
31.57.12.0/22
31.57.36.0/22
31.57.52.0-31.57.63.255
31.57.94.0/23
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.231.0-31.57.235.255
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.174.0/23
31.59.212.0/22
31.59.224.0/22
31.59.230.0/24
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:2d:eb:c1:37:09:94:7d:9c:79:fe:db:6b:80:fa:d8:27:ca:
15:3c:15:99:a1:dd:ca:bf:d6:26:e4:dc:17:d7:14:8d:7e:07:
b1:7b:52:62:1c:23:8d:73:3c:0c:d0:9f:50:92:2e:71:aa:ff:
90:c2:e9:81:45:d2:69:63:78:d1:a0:f3:05:4c:60:bf:0a:45:
cd:b6:02:db:b9:94:76:d4:47:e1:79:b4:f7:e0:e8:8e:26:9e:
e9:a0:5e:c0:93:b7:97:8f:d3:e0:43:14:d8:0a:3c:4b:0e:d3:
c1:ff:27:c6:93:5b:97:ef:95:b2:39:6d:ee:4f:dd:75:75:7e:
15:a4:ce:27:52:7e:df:46:02:6e:9c:50:49:0f:f0:3f:aa:94:
1d:6c:cf:0c:b4:2d:33:b5:40:2b:fc:80:35:90:c8:c7:67:b6:
19:ec:76:33:ea:78:73:d4:27:03:30:6d:08:a3:f0:a2:9d:4f:
d0:25:30:bb:ee:6d:9d:2a:a1:9f:d3:c4:5d:c8:ac:64:ec:1c:
62:02:60:2a:f9:e3:9c:91:92:d7:f7:04:e3:27:7e:4d:c7:5b:
db:a9:33:fa:6f:bd:f5:10:08:6d:65:86:74:28:12:89:54:7f:
4b:90:ec:ed:57:f1:c4:c4:7d:a0:bb:e5:8e:7c:0c:85:59:25:
7e:2c:58:c8
-----BEGIN CERTIFICATE-----
MIIGgDCCBWigAwIBAgISAZgS/zko0bZphQoVLJNdHpXrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNzE2MTEyOTMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOWJiZTM2NDNlMGFmMDE2NDdmNTkzZWVjMGQxNTg2ZTc5MmQ0Y2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUBHwcobZrxCuTvvK96JJj5We/ft
0Pr4X2Q0tiqbF3BGtB8zzUy0Lxlfof/h+7achEvzqPSQc4Nb0Ip6dOlbOPN16M34
LmQmhi/y7DaG/l4iLHc+18xls6ruD9HpK5kvZTm5fxyyzSznjzM1OEleeaADDoNo
y82BiYcrMp7simC2kNg6vsjOa+w/Tb6HgBczXrDfMxoE6klX7DuC4NsSRGwzeNxb
4LHBQIsEX0E9znBR+i+Kg6O4D/1h8AblA0z7anN1+kLQcqG8zyptSbEdli1CRaT1
soYSeeg4Q+oTz4QNic1ZcgOue9YxoQvmpyCwtKcsWEdt28l8UZ47l0d8JQIDAQAB
o4IDjDCCA4gwHQYDVR0OBBYEFMm742Q+CvAWR/WT7sDRWG55LUzzMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEveWJ2alpENEs4QlpIOVpQdXdORllibmt0VFBNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBoAYIKwYBBQUHAQcBAf8EggGPMIIBizCCAYcEAgABMIIB
fwMEAR84BAMEAh84HAMEAB84OQMEAB84OwMEAR84TAMEAR84WgMEAx84aAMEAR84
cjAMAwQBHzh2AwQCHzh4AwQCHzi0AwQCHzi8AwQCHzjIMAwDBAAfOM8DBAMfONAD
BAEfONwDBAEfOOADBAIfOOQDBAIfOOwDBAAfOQoDBAIfOQwDBAIfOSQwDAMEAh85
NAMEBh85AAMEAR85XgMEAx85aAMEAx85eAMEAR85hAMEAx85iAMEAR85kgMEAh85
qDAMAwQEHzmwAwQCHzm4AwQCHznAAwQBHznIMAwDBAQfOdADBAIfOeAwDAMEAB85
5wMEAh856DALAwQBHzn6AwMBHzgDBAEfOiIDBAEfOjIDBAEfOkADBAIfOkQDBAIf
OlQDBAIfOpgDBAIfOqwwDAMEAh863AMEAh864AMEAh87TAMEAh87YAMEAh87cDAM
AwQDHzuIAwQDHzuQAwQDHzugAwQBHzuuAwQCHzvUAwQCHzvgAwQAHzvmAwQCHzvo
MA0GCSqGSIb3DQEBCwUAA4IBAQC3LevBNwmUfZx5/ttrgPrYJ8oVPBWZod3Kv9Ym
5NwX1xSNfgexe1JiHCONczwM0J9Qki5xqv+QwumBRdJpY3jRoPMFTGC/CkXNtgLb
uZR21EfhebT34OiOJp7poF7Ak7eXj9PgQxTYCjxLDtPB/yfGk1uX75WyOW3uT911
dX4VpM4nUn7fRgJunFBJD/A/qpQdbM8MtC0ztUAr/IA1kMjHZ7YZ7HYz6nhz1CcD
MG0Io/CinU/QJTC77m2dKqGf08RdyKxk7BxiAmAq+eOckZLX9wTjJ35Nx1vbqTP6
b731EAhtZYZ0KBKJVH9LkOztV/HExH2gu+WOfAyFWSV+LFjI
-----END CERTIFICATE-----
Generated at Tue Jul 29 07:44:16 2025 by rpki-client