Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KgdFkRtAdaDmD7yQ18rOkE6ew_o.roa
File: KgdFkRtAdaDmD7yQ18rOkE6ew_o.roa (raw, json)
Hash identifier: aYIzG+nLaBSffssyNNZ+LACrVYkwBUsPVNYqDqK9f7o=
Subject key identifier: 2A:07:45:91:1B:40:75:A0:E6:0F:BC:90:D7:CA:CE:90:4E:9E:C3:FA
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196D2E11DACA283E70971E99FAD9E936D1C
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KgdFkRtAdaDmD7yQ18rOkE6ew_o.roa
Signing time: Thu 15 May 2025 07:38:10 +0000
ROA not before: Thu 15 May 2025 07:38:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.57.0/24 maxlen: 24
31.56.67.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/22 maxlen: 24
31.56.224.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.92.0/22 maxlen: 22
31.57.98.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.118.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.171.0/24 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.86.0/24 maxlen: 24
31.58.144.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.71.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.120.0/24 maxlen: 24
31.59.121.0/24 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 15 May 2025 15:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d2:e1:1d:ac:a2:83:e7:09:71:e9:9f:ad:9e:93:6d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 15 07:38:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a0745911b4075a0e60fbc90d7cace904e9ec3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fb:33:4b:a0:d6:aa:c1:cd:56:e6:00:0d:9d:
78:f5:92:dc:c0:b0:0b:7a:0b:81:0e:f3:00:47:f1:
24:e8:80:dc:13:75:f3:ab:41:95:57:fc:c4:4e:de:
c4:e5:fd:0c:00:0a:97:5c:a6:34:cb:04:f6:76:be:
fc:9d:2a:d1:12:10:8c:3c:87:b9:24:7a:b8:97:00:
b2:95:e4:f3:10:47:00:d8:ce:04:80:82:66:d6:30:
22:59:be:01:67:31:2b:ba:8a:b0:0e:25:4a:b0:c3:
6f:dd:8c:ac:11:81:a7:06:33:53:ad:f7:05:c9:5b:
96:9a:04:d8:dc:37:d4:0d:29:96:9e:07:b7:6b:6e:
e1:ae:67:9a:3b:be:b4:7a:24:f5:cd:4b:3e:a3:ea:
22:23:7c:3c:62:19:c4:6f:7a:fc:b4:11:0b:b0:d1:
40:10:b1:ed:68:4c:eb:14:46:ea:55:ee:49:45:ff:
2a:8f:bd:07:96:cf:fd:ca:d6:27:3e:cf:7e:92:3a:
14:5f:93:ca:bb:64:83:cb:0e:ac:58:8e:bf:5a:45:
21:ff:c7:07:07:4d:f3:74:57:2b:7d:37:3a:d1:e2:
c5:4c:a0:12:17:30:0b:3d:74:ee:6d:a9:e8:cb:17:
d4:de:e6:5f:a3:59:84:91:6a:b5:0c:00:49:f6:e3:
1f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:07:45:91:1B:40:75:A0:E6:0F:BC:90:D7:CA:CE:90:4E:9E:C3:FA
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KgdFkRtAdaDmD7yQ18rOkE6ew_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.57.0/24
31.56.67.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0/22
31.56.200.0/22
31.56.208.0/21
31.56.220.0-31.56.231.255
31.56.236.0/22
31.57.36.0/23
31.57.92.0/22
31.57.98.0/24
31.57.104.0/21
31.57.118.0/24
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.188.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.68.0/22
31.58.84.0/22
31.58.144.0/24
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.71.0/24
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.151.255
31.59.160.0/20
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
45:8d:af:05:60:0a:6a:fb:27:aa:6e:40:51:d1:c8:57:cb:d0:
ce:b8:66:06:f5:72:b6:09:93:89:84:5d:8d:01:e9:da:89:c3:
d8:9f:6e:22:2b:1e:a8:cf:f6:b2:92:8d:21:df:94:1a:7a:3b:
4f:dd:9d:29:b5:1f:12:8f:c2:9f:96:40:44:22:8f:7e:e7:c4:
d4:e3:31:11:d7:21:1b:7f:f0:1c:99:2b:22:fa:d1:e1:44:d7:
d9:4b:63:76:81:b1:6d:9c:cd:05:4b:bf:ed:89:13:fc:5f:78:
a4:1d:ed:7b:3f:c4:89:21:92:01:ef:18:29:94:aa:02:68:f4:
cd:54:b9:1d:03:50:5a:26:99:41:44:73:2c:aa:03:f2:80:2e:
26:7d:22:bb:b3:11:a1:fb:ed:c1:6a:b9:bc:d2:96:c6:be:f9:
a5:f9:87:e3:36:40:b7:c5:e8:76:f9:69:a2:f4:d8:d3:5b:1a:
96:89:65:13:87:cc:af:fe:e4:80:97:05:79:18:93:a2:58:11:
9f:40:93:6a:a4:d1:fd:84:ef:a0:d2:bb:2d:d3:e9:54:d6:bb:
89:57:98:15:d4:f4:c0:f0:bb:d6:da:6f:81:3c:fb:71:bb:9f:
9e:f1:c0:ca:5e:af:08:13:23:87:aa:f6:ba:7f:22:c1:85:06:
c3:b3:ee:f1
-----BEGIN CERTIFICATE-----
MIIGTDCCBTSgAwIBAgISAZbS4R2sooPnCXHpn62ek20cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNTE1MDczODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTA3NDU5MTFiNDA3NWEwZTYwZmJjOTBkN2NhY2U5MDRlOWVjM2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/szS6DWqsHNVuYADZ149ZLcwLAL
eguBDvMAR/Ek6IDcE3Xzq0GVV/zETt7E5f0MAAqXXKY0ywT2dr78nSrREhCMPIe5
JHq4lwCyleTzEEcA2M4EgIJm1jAiWb4BZzEruoqwDiVKsMNv3YysEYGnBjNTrfcF
yVuWmgTY3DfUDSmWnge3a27hrmeaO760eiT1zUs+o+oiI3w8YhnEb3r8tBELsNFA
ELHtaEzrFEbqVe5JRf8qj70Hls/9ytYnPs9+kjoUX5PKu2SDyw6sWI6/WkUh/8cH
B03zdFcrfTc60eLFTKASFzALPXTubanoyxfU3uZfo1mEkWq1DABJ9uMfXwIDAQAB
o4IDWDCCA1QwHQYDVR0OBBYEFCoHRZEbQHWg5g+8kNfKzpBOnsP6MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvS2dkRmtSdEFkYURtRDd5UTE4ck9rRTZld19vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBbAYIKwYBBQUHAQcBAf8EggFbMIIBVzCCAVMEAgABMIIB
SwMEAR84BAMEAB84OQMEAB84QwMEAR84WgMEAx84aAMEAR84cjAMAwQBHzh2AwQC
Hzh4AwQCHzi0AwQCHzi8AwQCHzjIAwQDHzjQMAwDBAIfONwDBAMfOOADBAIfOOwD
BAEfOSQDBAIfOVwDBAAfOWIDBAMfOWgDBAAfOXYDBAMfOXgDBAEfOYQDBAMfOYgD
BAEfOZIDBAIfOagwDAMEBB85sAMEAB85vAMEAh85wAMEAR85yDAMAwQEHznQAwQC
HzngAwQCHznoMAsDBAEfOfoDAwEfOAMEAR86IgMEAR86MgMEAh86RAMEAh86VAME
AB86kAMEAh86mAMEAh86rDAMAwQCHzrcAwQCHzrgAwQAHztHAwQCHztMAwQCHztg
AwQCHztwAwQCHzt4MAwDBAMfO4gDBAMfO5ADBAQfO6ADBAIfO+ADBAIfO+gwDQYJ
KoZIhvcNAQELBQADggEBAEWNrwVgCmr7J6puQFHRyFfL0M64Zgb1crYJk4mEXY0B
6dqJw9ifbiIrHqjP9rKSjSHflBp6O0/dnSm1HxKPwp+WQEQij37nxNTjMRHXIRt/
8ByZKyL60eFE19lLY3aBsW2czQVLv+2JE/xfeKQd7Xs/xIkhkgHvGCmUqgJo9M1U
uR0DUFommUFEcyyqA/KALiZ9IruzEaH77cFqubzSlsa++aX5h+M2QLfF6Hb5aaL0
2NNbGpaJZROHzK/+5ICXBXkYk6JYEZ9Ak2qk0f2E76DSuy3T6VTWu4lXmBXU9MDw
u9bab4E8+3G7n57xwMperwgTI4eq9rp/IsGFBsOz7vE=
-----END CERTIFICATE-----
Generated at Thu Jun 5 03:38:11 2025 by rpki-client