Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-TpBnNj_cwKEcGrtYxkcU4N3LeE.roa
File: 1-TpBnNj_cwKEcGrtYxkcU4N3LeE.roa (raw, json)
Hash identifier: lW+e0lasLIO1dt8H+DGVw8L/Q8IdTxsSTRWupmkZJZc=
Subject key identifier: F9:3A:41:9C:D8:FF:73:02:84:70:6A:ED:63:19:1C:53:83:77:2D:E1
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196FBB91D95561C97EC2D99E47918E82596
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-TpBnNj_cwKEcGrtYxkcU4N3LeE.roa
Signing time: Fri 23 May 2025 05:58:55 +0000
ROA not before: Fri 23 May 2025 05:58:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.23.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.57.12.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.92.0/22 maxlen: 22
31.57.98.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.56.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.86.0/24 maxlen: 24
31.58.144.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 23 May 2025 15:10:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fb:b9:1d:95:56:1c:97:ec:2d:99:e4:79:18:e8:25:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 23 05:58:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f93a419cd8ff730284706aed63191c5383772de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:06:ec:2c:c5:ad:e6:c7:74:04:f5:b7:16:c0:
1b:f3:e4:a6:d0:e2:bc:c8:49:b6:44:2b:6f:50:5f:
53:03:3c:4b:c0:c1:6a:6f:3a:14:6d:b8:17:0d:f1:
3d:c0:4b:8b:5b:02:e6:f3:3a:0d:43:43:e4:e1:d0:
c0:9d:59:6f:2d:51:62:9f:df:a6:73:ed:67:62:58:
b4:d7:a4:6a:f1:d7:0f:ed:fa:9c:ec:aa:03:ab:3a:
34:71:56:65:bd:d4:37:b8:5d:c9:0f:3c:1b:54:a2:
e4:54:c2:cf:d3:bd:b5:62:78:f0:04:49:ac:30:02:
24:41:a4:fc:91:7c:b4:91:c1:c6:f5:8a:3e:c4:95:
96:44:3f:59:e3:d8:70:45:08:33:b4:b1:2c:91:6f:
50:a6:e8:de:fb:7d:9b:82:44:08:45:5d:4b:4d:c9:
b6:69:7b:13:22:3d:bd:09:18:8a:9a:cd:0b:f8:7f:
f6:7e:4f:8d:1d:c7:df:4e:2a:0c:73:78:12:bd:cb:
a4:85:c0:f0:22:d6:83:84:0a:dd:8e:1c:7f:e0:cc:
df:76:cf:41:ed:75:18:97:e9:2b:9e:3d:c2:02:2a:
d8:14:49:92:ea:6a:87:e7:45:33:13:f6:9b:22:80:
0d:fb:c0:d7:3c:de:5a:85:bf:9c:93:f4:7f:d9:76:
6a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3A:41:9C:D8:FF:73:02:84:70:6A:ED:63:19:1C:53:83:77:2D:E1
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-TpBnNj_cwKEcGrtYxkcU4N3LeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.23.0/24
31.56.57.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0/22
31.56.200.0/22
31.56.208.0/21
31.56.228.0/22
31.56.236.0/22
31.57.12.0/23
31.57.36.0/22
31.57.92.0/22
31.57.98.0/24
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.56.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.144.0/24
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:98:cc:f0:a1:3d:f0:86:0b:25:3f:65:39:b8:43:c5:a0:37:
8c:40:7f:51:f7:a3:2c:85:f2:31:cf:37:4d:32:1a:3e:9b:fa:
de:cd:dc:50:34:a9:85:50:0a:0d:b8:22:cc:a9:13:38:ca:22:
46:e8:db:c4:fb:1f:d9:32:18:81:cf:ec:80:20:fd:c2:d1:67:
1f:de:78:6a:72:e3:cd:4e:73:07:de:30:90:5f:ff:2a:ab:89:
16:ce:64:2c:64:7a:dc:6f:5a:fb:0b:7d:7b:fd:a9:a2:5d:fd:
21:a2:c3:2b:36:29:dd:b4:3a:ea:f4:46:2b:0b:c5:24:a0:bb:
1c:63:fd:b8:59:88:3c:02:f9:6a:c2:3a:13:fc:2f:9d:d1:d5:
03:25:f7:05:97:bf:91:a0:58:d7:ad:9a:1a:62:58:a3:b4:a3:
a7:0e:76:e0:d8:5b:80:a2:89:b7:22:25:30:6d:e1:75:8c:8b:
cf:37:b3:1d:e8:4e:aa:d2:e2:28:de:76:62:1b:26:89:2f:47:
38:47:fd:84:d2:06:1c:cc:34:5b:ec:84:82:95:98:62:fc:d7:
ff:10:b0:57:14:24:f5:69:14:8a:fe:9e:ef:f1:ae:4a:85:3b:
ad:3e:bf:43:46:2c:00:d6:04:cb:69:45:eb:39:a9:58:a9:b9:
a6:ea:92:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 04:19:58 2025 by rpki-client