Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/G61_c6e2Xg0E28kD-6ll0ly1gxU.roa
File: G61_c6e2Xg0E28kD-6ll0ly1gxU.roa (raw, json)
Hash identifier: 68t9uYPY5CY6N7gqbLXABkcAuW3uv1/iT88HRhQBp/U=
Subject key identifier: 1B:AD:7F:73:A7:B6:5E:0D:04:DB:C9:03:FB:A9:65:D2:5C:B5:83:15
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196C9BCB40E31F22BB9D4E21A7E0654B99E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/G61_c6e2Xg0E28kD-6ll0ly1gxU.roa
Signing time: Tue 13 May 2025 13:01:49 +0000
ROA not before: Tue 13 May 2025 13:01:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/22 maxlen: 24
31.56.224.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.92.0/22 maxlen: 22
31.57.104.0/21 maxlen: 24
31.57.118.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.171.0/24 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.230.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.249.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.50.0/24 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.86.0/24 maxlen: 24
31.58.141.0/24 maxlen: 24
31.58.144.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.71.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.120.0/24 maxlen: 24
31.59.121.0/24 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 13 May 2025 16:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:bc:b4:0e:31:f2:2b:b9:d4:e2:1a:7e:06:54:b9:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 13 13:01:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1bad7f73a7b65e0d04dbc903fba965d25cb58315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f6:38:e7:46:18:b7:04:31:7a:b6:4c:1d:9b:
e7:b9:38:ce:17:99:02:21:da:1a:92:9b:08:cf:0a:
81:08:d7:7c:58:65:b1:db:36:2f:19:e2:65:c7:14:
0f:bc:4f:15:95:4f:8a:8a:fd:a8:8f:a1:ba:ca:0f:
79:73:4c:f8:c8:81:1c:43:1a:bc:49:0e:ed:23:16:
ff:a0:3b:00:2f:53:88:b8:86:db:28:12:c4:4c:f1:
b8:ca:fa:de:96:fa:b7:d6:d8:6e:a4:06:a8:98:ab:
17:34:25:17:b0:fe:ac:b5:95:6c:9e:de:1d:2c:82:
c3:fa:57:3e:66:d2:93:28:92:58:ce:49:cd:78:a7:
a7:10:a6:75:36:04:0c:67:60:91:5a:53:11:28:c6:
b8:59:77:30:c7:06:51:0a:a8:20:69:59:30:b2:61:
58:6e:70:ff:00:80:5a:35:9d:3e:a8:25:ce:07:5e:
f0:8a:76:91:75:2a:74:56:e2:6a:d3:92:c3:9b:64:
31:9a:28:d5:72:ff:9d:34:ab:2d:c6:6b:5c:9d:7a:
4e:2d:2d:cc:bb:06:06:e8:11:03:5e:a3:34:07:2a:
b5:b1:d8:4f:61:e4:c8:d2:72:1e:62:93:0e:87:7a:
fb:2b:64:fa:c3:c6:f5:50:5c:ef:dc:c6:d8:41:28:
07:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AD:7F:73:A7:B6:5E:0D:04:DB:C9:03:FB:A9:65:D2:5C:B5:83:15
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/G61_c6e2Xg0E28kD-6ll0ly1gxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.57.0/24
31.56.71.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0/22
31.56.200.0/22
31.56.208.0/21
31.56.220.0-31.56.231.255
31.56.236.0/22
31.57.36.0/23
31.57.92.0/22
31.57.104.0/21
31.57.118.0/24
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.188.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.230.0/24
31.57.232.0/22
31.57.249.0-31.57.255.255
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.84.0/22
31.58.141.0/24
31.58.144.0/24
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.71.0/24
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.151.255
31.59.160.0/20
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
03:d5:52:a3:b5:f6:ba:61:8d:08:d5:49:6d:e3:ac:63:5f:19:
18:25:4e:20:1a:93:cb:73:bb:1f:df:45:aa:ba:54:15:c8:35:
1a:56:17:77:ad:09:fd:52:46:80:37:c8:85:85:ef:11:e0:24:
83:d3:a4:43:61:ef:4b:1e:ac:41:f3:03:5d:13:be:a7:60:4c:
1f:56:10:43:26:82:ab:dd:da:d8:cd:63:cd:72:23:1b:1a:fd:
38:ec:d8:53:90:66:db:66:70:5f:b1:8d:08:a7:e2:d9:6c:cd:
f3:5e:a1:a9:29:83:3d:2b:c6:ae:20:1a:f0:bb:f6:27:46:04:
e1:1b:1d:c9:8e:85:9d:cf:1b:34:d9:81:a9:e8:b2:a7:7b:57:
a9:cc:cc:de:15:16:24:dd:6c:f2:d4:58:9e:aa:93:bb:cd:ee:
dd:4b:be:11:cb:6b:a2:b3:d3:dc:e1:bc:f1:fa:d8:e6:ef:b5:
60:85:d3:20:99:70:8b:c1:a3:f4:35:64:11:08:de:be:8b:c1:
51:92:df:75:e4:ee:e8:59:b1:de:2a:19:91:21:4a:95:a7:6d:
26:9f:99:9c:79:58:a3:d3:78:40:e0:32:d0:92:95:95:e2:d9:
2d:77:c8:90:05:c3:44:39:cc:f7:6d:19:ec:ab:58:b4:b6:e9:
77:87:1c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 03:38:15 2025 by rpki-client