Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/L5KER99IiY-kiQN6Q_y59rADztc.roa
File: L5KER99IiY-kiQN6Q_y59rADztc.roa (raw, json)
Hash identifier: V94Bf375BnGHq12cfFM/bTr6QqMXOaEuxAusFaL4ZD4=
Subject key identifier: 2F:92:84:47:DF:48:89:8F:A4:89:03:7A:43:FC:B9:F6:B0:03:CE:D7
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01973173707DD0BD2A3FFC29FB3594877877
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/L5KER99IiY-kiQN6Q_y59rADztc.roa
Signing time: Mon 02 Jun 2025 16:22:18 +0000
ROA not before: Mon 02 Jun 2025 16:22:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.23.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.146.0/24 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.196.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.56.238.0/24 maxlen: 24
31.57.12.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.60.0/22 maxlen: 24
31.57.92.0/22 maxlen: 22
31.57.98.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.110.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.139.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.159.0/24 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.182.0/24 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.244.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.68.0/24 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.134.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.212.0/22 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 03 Jun 2025 12:18:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:31:73:70:7d:d0:bd:2a:3f:fc:29:fb:35:94:87:78:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 2 16:22:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f928447df48898fa489037a43fcb9f6b003ced7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:98:cc:8e:fb:ee:2a:23:69:6d:26:c1:30:97:
b0:c3:5a:d4:27:ef:89:d0:0a:b3:04:ca:31:b5:0b:
e9:a3:ae:46:64:ec:01:42:6c:d5:05:63:1b:f3:4e:
39:a0:02:d5:22:17:2b:af:a9:41:1b:6c:37:72:8e:
fd:ef:ba:bd:bf:0b:26:f5:0b:2d:af:52:ff:20:5d:
89:b1:a0:b8:ab:fa:48:8d:b9:48:a0:5f:02:ee:c5:
56:74:1b:0c:5c:8e:ce:f4:b5:aa:f4:0d:ad:da:3d:
51:00:a2:fa:72:b1:21:a6:de:0b:79:a5:8e:a8:c6:
ba:e4:68:79:d4:60:e4:67:34:bf:5f:30:22:63:c3:
4b:29:7c:82:f5:da:f4:57:4d:2d:7d:14:f3:ec:08:
8f:55:7b:4c:3f:67:ab:b4:a8:da:96:9c:c9:c0:ca:
17:8b:44:71:79:87:83:e5:6a:cb:59:de:d5:d0:c8:
98:ce:08:96:ca:0f:2b:a6:99:55:8d:86:35:3f:a3:
1a:79:00:bb:e9:9b:47:fc:08:cc:87:a5:b9:93:2a:
49:6e:c1:bf:a2:db:f1:22:f9:df:59:63:fb:90:7a:
33:9e:14:79:26:b5:ab:a2:3a:42:64:d7:4b:46:24:
36:b2:18:4b:59:a4:f0:ae:d4:a9:36:9e:91:55:79:
07:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:92:84:47:DF:48:89:8F:A4:89:03:7A:43:FC:B9:F6:B0:03:CE:D7
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/L5KER99IiY-kiQN6Q_y59rADztc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.23.0/24
31.56.57.0/24
31.56.77.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.146.0/24
31.56.180.0/22
31.56.188.0/22
31.56.196.0-31.56.203.255
31.56.208.0/21
31.56.228.0/22
31.56.236.0/22
31.57.12.0/23
31.57.36.0/22
31.57.60.0/22
31.57.92.0/22
31.57.98.0/24
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.159.0/24
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.244.0/24
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.134.0/24
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.212.0/22
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:59:81:a4:99:b4:eb:6c:2f:81:ad:a2:22:12:61:41:56:89:
e0:ec:8d:fb:05:36:8c:86:56:8b:87:c6:9d:46:34:a8:23:cc:
dd:3c:bf:61:43:4f:5c:e3:2a:55:93:28:9a:dc:65:c5:43:0a:
6f:55:51:6b:51:2f:e6:8e:e5:07:fa:3f:ce:eb:ea:16:14:11:
dd:a8:b5:cc:41:7f:d9:88:be:02:3c:38:48:53:f9:e0:f7:23:
7f:63:9c:3c:9c:e2:77:a1:24:ef:d3:9b:2b:3a:f6:6c:db:38:
c4:5d:40:9a:ca:a2:a8:fb:0a:09:9e:dc:fd:37:28:e6:2c:be:
c2:6e:79:9d:61:6f:89:df:d0:9c:5b:bf:be:3f:7d:04:45:2d:
e6:6f:4d:83:4e:6d:09:70:90:96:7f:1c:e3:a8:43:78:77:59:
18:de:83:d1:71:5c:3a:28:47:de:bc:11:cd:d7:59:82:29:18:
ec:8c:68:14:91:18:f1:bd:be:bb:a8:5d:3c:74:b1:35:89:18:
cc:3b:14:ca:43:18:2c:ee:0c:96:66:1e:08:71:ac:61:52:f0:
1a:b2:73:82:29:8b:5e:34:28:eb:a1:bf:c6:1c:76:8f:79:e9:
0f:37:ba:d7:a5:46:94:16:47:b8:bf:69:37:57:9d:c6:12:09:
85:91:0e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 03:42:49 2025 by rpki-client