Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3l2o9vQQgHv8muxGsJIUxww_bfA.roa
File: 3l2o9vQQgHv8muxGsJIUxww_bfA.roa (raw, json)
Hash identifier: kEs9uM6zPyELHzfK7d+UqaqlHuuNK1TAZ9XJPtVuHOU=
Subject key identifier: DE:5D:A8:F6:F4:10:80:7B:FC:9A:EC:46:B0:92:14:C7:0C:3F:6D:F0
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196EE94CA755E8EB611464534EDBC6ABC9B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3l2o9vQQgHv8muxGsJIUxww_bfA.roa
Signing time: Tue 20 May 2025 16:44:10 +0000
ROA not before: Tue 20 May 2025 16:44:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.47.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/22 maxlen: 24
31.56.224.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.57.12.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.46.0/23 maxlen: 24
31.57.92.0/22 maxlen: 22
31.57.98.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.118.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.86.0/24 maxlen: 24
31.58.144.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.120.0/24 maxlen: 24
31.59.121.0/24 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 20 May 2025 19:15:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ee:94:ca:75:5e:8e:b6:11:46:45:34:ed:bc:6a:bc:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 20 16:44:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de5da8f6f410807bfc9aec46b09214c70c3f6df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ad:53:14:79:a6:9b:28:1f:a7:48:41:16:53:
da:68:ed:12:19:be:28:c8:e3:70:0c:5a:e1:64:b0:
38:93:f1:29:17:2b:a7:9d:22:4c:ac:9d:34:c5:a8:
81:f7:81:14:9a:4e:d9:6a:67:92:07:a5:63:58:ca:
6b:a9:b9:05:8a:cd:a1:ad:ca:e3:33:fa:05:54:28:
7b:88:c5:38:9f:77:d2:10:8a:c7:7a:a3:f7:9a:ba:
9f:60:86:78:35:de:e0:6c:73:3c:65:76:f9:c5:83:
e6:57:45:08:0d:25:97:be:c9:7a:48:2e:b0:57:70:
36:a9:aa:2a:eb:2a:4f:36:16:75:7e:34:a4:66:00:
a4:54:49:15:06:0d:82:2e:73:67:b2:ec:a6:5d:16:
f4:c1:90:a5:b6:58:07:a0:16:0c:5f:0f:18:e4:e0:
eb:2a:41:9a:c8:38:9b:bd:a0:48:86:0c:7a:21:0c:
e5:b2:26:22:65:60:11:08:2d:ac:92:77:b2:31:11:
63:0e:c6:25:97:f2:7e:76:34:32:a8:78:ac:30:ff:
41:a8:b5:eb:3b:76:7c:47:30:af:82:b4:7f:f2:f9:
5c:70:2d:fe:b2:14:1b:74:c2:8a:98:64:bc:3b:35:
9e:f5:dc:d6:32:f5:97:1a:a2:51:c4:3d:49:4e:ba:
f3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5D:A8:F6:F4:10:80:7B:FC:9A:EC:46:B0:92:14:C7:0C:3F:6D:F0
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3l2o9vQQgHv8muxGsJIUxww_bfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.47.0/24
31.56.57.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0/22
31.56.200.0/22
31.56.208.0/21
31.56.220.0-31.56.231.255
31.56.236.0/22
31.57.12.0/23
31.57.36.0/22
31.57.46.0/23
31.57.92.0/22
31.57.98.0/24
31.57.104.0/21
31.57.118.0/24
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.68.0/22
31.58.84.0/22
31.58.144.0/24
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.41.0/24
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.151.255
31.59.160.0/20
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
59:a4:25:06:29:68:c2:1c:9e:81:59:ae:3f:a5:b3:10:cc:c9:
8a:cc:18:2f:ca:17:d8:f2:c2:37:86:9e:ec:a1:d1:23:ac:64:
9e:61:80:c3:6a:3e:41:64:e9:13:5b:0b:ed:45:75:87:47:e9:
f4:b5:c8:22:56:8b:9d:65:c9:a7:58:ae:94:74:30:65:62:1f:
ce:86:0b:70:41:04:17:30:2b:12:7c:43:3e:5a:71:7e:48:e0:
1c:37:a4:a8:c1:79:f0:ac:23:01:0c:7d:13:24:4b:6e:93:6c:
ad:dd:92:02:99:e3:17:0e:21:1f:29:a3:3b:69:ad:50:c9:5b:
ba:21:f7:11:c9:a8:21:23:5b:3c:1e:0e:e6:c6:7c:82:f1:d3:
62:50:a4:52:d6:ce:b1:af:59:40:54:76:c9:ec:90:98:d1:e2:
60:0c:ff:db:0a:85:e6:48:81:a5:6b:d9:7f:ef:dc:7c:36:73:
69:22:4e:e6:42:46:6b:97:d3:ea:11:a2:d2:35:e3:c3:35:c6:
05:0b:be:ac:10:42:bc:67:b8:40:0d:4d:53:ee:37:95:64:ce:
4b:42:9d:39:5f:6e:a9:82:4e:fb:bd:4f:70:69:91:27:15:a4:
bf:2a:4a:6e:bb:a6:62:bf:f0:3d:da:9f:de:b9:ae:7c:cf:5a:
2f:4a:de:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 04:06:15 2025 by rpki-client