Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ywmOMG6RqTcskaIB4j3gkaD_lUY.roa
File: ywmOMG6RqTcskaIB4j3gkaD_lUY.roa (raw, json)
Hash identifier: OpFKtv4/20lZUNQ9eXVZbj9yldhIheoxVeXwMiLUh8g=
Subject key identifier: CB:09:8E:30:6E:91:A9:37:2C:91:A2:01:E2:3D:E0:91:A0:FF:95:46
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197CF041D4859DCE6CBDEDDE150B09187F4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ywmOMG6RqTcskaIB4j3gkaD_lUY.roa
Signing time: Thu 03 Jul 2025 06:40:42 +0000
ROA not before: Thu 03 Jul 2025 06:40:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.28.0/22 maxlen: 24
31.56.32.0/24 maxlen: 24
31.56.44.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.112.0/24 maxlen: 24
31.56.114.0/23 maxlen: 24
31.56.117.0/24 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.180.0/23 maxlen: 23
31.56.188.0/22 maxlen: 24
31.56.190.0/23 maxlen: 23
31.56.192.0/22 maxlen: 22
31.56.198.0/23 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.216.0/22 maxlen: 22
31.56.220.0/23 maxlen: 23
31.56.224.0/23 maxlen: 23
31.56.228.0/22 maxlen: 24
31.56.230.0/23 maxlen: 23
31.56.233.0/24 maxlen: 24
31.56.236.0/22 maxlen: 24
31.56.236.0/23 maxlen: 23
31.57.12.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.48.0/22 maxlen: 24
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.94.0/23 maxlen: 23
31.57.104.0/21 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.120.0/23 maxlen: 23
31.57.124.0/22 maxlen: 24
31.57.126.0/23 maxlen: 23
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.225.0/24 maxlen: 24
31.57.231.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.58.226.0/24 maxlen: 24
31.59.70.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.128.0/24 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.136.0/24 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.212.0/22 maxlen: 24
31.59.212.0/24 maxlen: 24
31.59.213.0/24 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
31.59.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Jul 2025 09:54:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cf:04:1d:48:59:dc:e6:cb:de:dd:e1:50:b0:91:87:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 3 06:40:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb098e306e91a9372c91a201e23de091a0ff9546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a3:6d:82:b6:a1:a6:72:5b:6f:fa:27:00:54:
7b:a5:dc:a0:07:f7:60:28:a6:35:91:30:6a:fa:27:
97:e7:ac:88:23:26:78:23:6d:34:f4:56:0e:e2:44:
76:52:fc:2d:90:78:1a:07:e8:90:8f:11:39:fa:d9:
e0:ea:8c:38:0c:99:0b:7c:2e:d6:bc:f5:f0:6a:04:
d4:65:93:3e:50:ac:37:54:02:1c:fb:97:12:20:ba:
43:84:54:fb:38:43:da:30:1b:93:a4:75:9f:a4:bf:
79:59:32:81:21:1a:32:1e:68:17:6d:65:5d:e1:40:
43:12:a0:11:04:26:a6:39:4c:8c:d1:c4:46:8a:eb:
a1:45:50:d5:10:c2:12:77:1a:7a:c7:40:b1:90:70:
dd:60:bd:4e:43:3e:4c:d7:23:a5:22:ff:c7:f4:5a:
1b:47:24:e1:fe:86:5d:d3:2d:ea:8c:5e:c3:44:e9:
db:c7:88:45:d0:93:df:ec:15:65:77:d6:84:e6:cb:
d8:7d:02:ca:50:97:07:f9:cd:d4:21:87:0a:0e:2d:
6c:01:95:81:7d:74:1f:63:c7:06:da:85:d5:3d:9b:
09:19:48:51:e9:92:1c:9d:1e:0f:32:4f:f0:11:90:
6d:df:25:a6:ad:c9:a0:dd:0f:b1:ae:53:83:9b:5d:
48:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:09:8E:30:6E:91:A9:37:2C:91:A2:01:E2:3D:E0:91:A0:FF:95:46
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ywmOMG6RqTcskaIB4j3gkaD_lUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.28.0-31.56.32.255
31.56.44.0/24
31.56.57.0/24
31.56.77.0/24
31.56.90.0/23
31.56.104.0-31.56.112.255
31.56.114.0/23
31.56.117.0-31.56.123.255
31.56.180.0/22
31.56.188.0-31.56.195.255
31.56.198.0-31.56.203.255
31.56.208.0-31.56.221.255
31.56.224.0/23
31.56.228.0/22
31.56.233.0/24
31.56.236.0/22
31.57.12.0/23
31.57.36.0/22
31.57.48.0/20
31.57.94.0/23
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.231.0-31.57.235.255
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.70.0/24
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.128.0/24
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.212.0/22
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:43:7c:17:7a:2f:56:2d:3f:59:93:d0:f3:f9:32:fb:a1:20:
2c:c4:6b:4e:93:16:b8:ec:bd:bc:83:2d:f1:3d:14:22:33:c0:
10:6a:4e:68:13:cb:f3:c4:3e:06:99:0d:92:37:ab:49:fb:9d:
2f:2d:cf:8f:55:a1:d2:a2:82:0f:7d:bc:39:33:93:84:f5:0a:
1d:00:ad:ed:51:74:06:05:5a:dc:60:00:61:f2:85:bb:66:87:
91:8e:08:3b:0b:d5:6b:8e:96:fc:7a:44:9d:49:4e:87:93:e9:
a1:8b:a0:9a:9d:c7:12:6d:7b:ce:6b:c5:8c:22:c2:c1:a1:ba:
95:5c:4c:89:c9:1e:f6:6b:d9:30:f8:e5:0d:de:ce:69:1f:50:
a4:89:81:14:35:6d:10:1b:4d:b9:8a:26:08:f2:f2:63:88:c1:
5b:db:e9:44:af:30:6f:4f:b4:c7:ee:cf:bf:be:4b:9c:6a:32:
cd:54:d8:b9:90:10:0d:f6:4e:04:b7:d5:fd:00:f6:c9:bf:be:
5c:da:af:62:06:52:e8:bd:0e:64:ce:e7:40:94:7b:a6:dc:1b:
93:d8:f4:65:fa:18:af:1b:d1:d8:ec:ba:ce:22:4e:6c:c3:a6:
2d:d7:55:d5:f1:74:6c:9a:09:db:53:89:79:57:57:c1:8c:8d:
87:8d:56:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:40:17 2025 by rpki-client