Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MI6LkpzXKYk36UYkV0wYIwBNrTg.roa
File: MI6LkpzXKYk36UYkV0wYIwBNrTg.roa (raw, json)
Hash identifier: 7JeImXF5tG2BivexUY/el0Df1qMjytpzSkLSuINqfO4=
Subject key identifier: 30:8E:8B:92:9C:D7:29:89:37:E9:46:24:57:4C:18:23:00:4D:AD:38
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196EF1F9F7C95CC1BD6A090EE4174290F30
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MI6LkpzXKYk36UYkV0wYIwBNrTg.roa
Signing time: Tue 20 May 2025 19:15:49 +0000
ROA not before: Tue 20 May 2025 19:15:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.47.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/22 maxlen: 24
31.56.224.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.57.12.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.46.0/23 maxlen: 24
31.57.92.0/22 maxlen: 22
31.57.98.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.118.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.86.0/24 maxlen: 24
31.58.144.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 20 May 2025 19:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ef:1f:9f:7c:95:cc:1b:d6:a0:90:ee:41:74:29:0f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 20 19:15:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=308e8b929cd7298937e94624574c1823004dad38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1a:0e:8c:91:71:82:fc:4f:04:ed:76:8a:86:
ee:45:7e:4b:77:41:c0:62:c0:d0:86:3a:79:d2:c1:
38:c1:bd:3b:a5:ae:23:a6:0e:25:94:82:71:55:ca:
fd:3d:27:c4:af:c0:01:c2:05:dd:be:2c:02:b5:be:
f8:5d:37:40:cc:58:31:12:b7:04:fb:35:d4:0b:1b:
cc:4d:ca:4a:37:18:d3:78:cd:99:8e:b9:7d:eb:ba:
58:90:31:be:ef:7e:44:cb:d9:f1:be:1c:f5:b9:f2:
34:b5:67:75:82:53:7d:2e:6f:39:42:d2:9b:e3:dc:
8d:af:6c:53:6b:aa:1d:46:12:b1:72:93:67:6d:8f:
96:96:3a:1f:a3:4e:a3:dc:4d:49:45:5a:30:67:eb:
45:f9:c7:37:50:c9:62:80:c1:f0:8c:cc:83:0e:aa:
42:f6:11:82:18:f9:69:16:c9:d0:5d:34:23:6b:dd:
c3:03:6e:82:1e:b7:0c:b0:03:c7:08:fc:dc:13:af:
1f:74:b3:92:e8:21:64:7f:9b:a8:b6:02:a0:3a:18:
46:07:2b:3a:6f:b1:b4:d2:e7:0c:6a:9d:62:c7:2d:
5a:54:71:d6:0c:71:91:05:de:38:30:9d:7d:55:f5:
ce:86:52:b6:db:a2:29:15:4c:2d:dc:e5:fd:d0:19:
4b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8E:8B:92:9C:D7:29:89:37:E9:46:24:57:4C:18:23:00:4D:AD:38
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MI6LkpzXKYk36UYkV0wYIwBNrTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.47.0/24
31.56.57.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0/22
31.56.200.0/22
31.56.208.0/21
31.56.220.0-31.56.231.255
31.56.236.0/22
31.57.12.0/23
31.57.36.0/22
31.57.46.0/23
31.57.92.0/22
31.57.98.0/24
31.57.104.0/21
31.57.118.0/24
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.68.0/22
31.58.84.0/22
31.58.144.0/24
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.41.0/24
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.136.0-31.59.151.255
31.59.160.0/20
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
20:c6:3c:e2:8f:ef:f0:4e:55:08:59:68:32:79:02:38:ad:ea:
19:3d:6d:77:01:d4:0a:f7:b0:51:f1:67:1f:58:29:39:1c:09:
50:8d:77:83:c8:ab:22:7f:1b:8c:84:b8:66:3f:9b:2b:5c:32:
a4:34:90:bd:59:f8:04:4f:99:01:4a:91:ad:53:6f:88:36:bb:
56:f8:2e:0b:21:f6:b9:7f:f1:b9:56:0b:85:7e:bb:02:4e:c8:
98:aa:73:44:b0:f5:4f:9b:32:87:9d:fc:1e:21:2e:59:2c:30:
c4:c3:85:3f:86:c9:d8:ab:fc:8f:f4:ef:78:79:21:51:a4:fb:
98:3c:d7:80:10:67:ed:2e:84:0b:fb:e3:ea:3f:69:4c:22:90:
cd:ec:f1:08:fb:9c:1d:28:19:1c:21:2b:7b:0e:6b:44:63:99:
90:94:b8:cc:b0:91:72:0d:7d:74:cc:e2:87:6d:ca:36:68:4c:
20:75:ee:b1:5a:e3:11:41:a2:b3:8c:e8:02:78:d1:c1:4d:fe:
ce:84:6e:bc:ff:4b:af:cf:c0:96:db:f0:b4:bf:a0:15:0f:77:
f9:ee:d8:53:94:b5:b3:7b:e4:96:11:da:07:de:1f:c7:1c:cb:
55:04:bf:ba:1d:bb:d9:2b:da:48:bb:81:26:af:1f:43:0a:bc:
0e:66:85:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 04:32:07 2025 by rpki-client