Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/N1bKnIYzYDwgj1Zl617-tbXaJ2w.roa
File: N1bKnIYzYDwgj1Zl617-tbXaJ2w.roa (raw, json)
Hash identifier: w6dwslWB1AgnenuStlVvW4I1NjGh02ReyNyaTBO2aeg=
Subject key identifier: 37:56:CA:9C:86:33:60:3C:20:8F:56:65:EB:5E:FE:B5:B5:DA:27:6C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196E9EC3C73883BC1A910C361310E64EB90
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/N1bKnIYzYDwgj1Zl617-tbXaJ2w.roa
Signing time: Mon 19 May 2025 19:01:35 +0000
ROA not before: Mon 19 May 2025 19:01:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.57.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/22 maxlen: 24
31.56.224.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.46.0/23 maxlen: 24
31.57.92.0/22 maxlen: 22
31.57.98.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.118.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.86.0/24 maxlen: 24
31.58.144.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.120.0/24 maxlen: 24
31.59.121.0/24 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 20 May 2025 16:43:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e9:ec:3c:73:88:3b:c1:a9:10:c3:61:31:0e:64:eb:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 19 19:01:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3756ca9c8633603c208f5665eb5efeb5b5da276c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3c:16:c2:3d:66:a1:06:69:ad:f1:31:c4:60:
00:0d:fb:8f:2d:9f:78:6e:b1:50:19:14:04:c4:f4:
55:c5:65:c6:d1:b2:8f:68:2f:0d:c5:f6:79:45:44:
a7:70:e5:8d:56:b8:0c:86:39:73:4b:a6:e7:a5:19:
0e:26:ff:44:26:fd:29:db:26:04:3a:4f:cf:2c:2c:
2b:3e:f1:a9:9a:93:1b:f2:5c:a4:73:45:3a:87:25:
3f:ed:a4:04:58:37:75:40:cd:f4:3e:b1:50:d4:c2:
ea:f4:4a:03:ff:58:9d:7a:1d:0e:9e:b3:35:a5:a0:
d3:e6:db:00:10:73:05:87:a2:e5:e0:dd:c8:82:d9:
b1:a8:13:af:32:7a:5e:f4:97:7f:24:0f:8a:7d:65:
32:d8:fc:22:19:60:41:86:04:d4:f6:42:c4:a2:20:
f7:7f:f2:69:d7:e1:df:b9:7a:ba:fc:00:f6:4d:87:
75:43:08:ef:92:06:b9:ac:11:14:2f:68:59:2c:fb:
6b:1d:de:50:87:07:ac:6d:f3:36:66:2f:21:06:7b:
c1:19:d9:62:1f:2f:f7:10:60:98:28:f9:43:dd:b2:
18:2d:ca:7d:f9:67:4a:c1:00:f3:07:a5:14:4d:59:
19:93:4a:f0:6b:74:df:06:b5:f0:02:04:5e:af:f4:
6f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:56:CA:9C:86:33:60:3C:20:8F:56:65:EB:5E:FE:B5:B5:DA:27:6C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/N1bKnIYzYDwgj1Zl617-tbXaJ2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.57.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0/22
31.56.200.0/22
31.56.208.0/21
31.56.220.0-31.56.231.255
31.56.236.0/22
31.57.36.0/22
31.57.46.0/23
31.57.92.0/22
31.57.98.0/24
31.57.104.0/21
31.57.118.0/24
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.68.0/22
31.58.84.0/22
31.58.144.0/24
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.41.0/24
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.151.255
31.59.160.0/20
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:d4:7c:2b:39:67:4b:e6:dd:18:39:45:77:0e:f1:7b:a1:40:
fd:23:ba:01:c7:db:fb:32:32:e7:6f:38:79:0f:21:85:23:ee:
3d:d5:e0:55:ea:cc:34:4e:e8:30:04:cf:04:01:35:e2:91:52:
b0:0c:25:9a:db:30:41:c5:a9:77:35:0f:10:ad:39:44:18:be:
b2:f9:ea:d2:43:79:29:a3:09:a3:40:ea:0f:f0:3a:25:5e:05:
cb:14:b4:0b:18:b7:bc:af:6c:ea:71:5c:58:f7:a1:23:b8:3a:
8a:0f:4d:73:40:12:eb:4c:36:2a:b7:3b:3c:fd:e3:37:6b:97:
56:c6:1d:3e:7b:08:ce:98:d9:ce:47:bd:4c:71:29:a1:9d:a0:
59:f8:74:98:7d:7a:aa:e3:ee:89:52:a0:f7:9b:6a:bb:c5:bc:
5d:8a:5e:d9:46:da:fc:a4:95:cc:20:6e:0f:bf:a6:ed:ce:48:
4b:61:d8:b5:be:d4:a7:4c:bc:c8:8a:65:8c:7b:8e:bb:e7:9e:
cf:1f:ed:1c:6d:69:f5:ab:19:74:36:36:1d:09:78:b9:82:76:
11:af:ed:2d:a7:f1:76:63:db:ee:ee:03:83:55:9e:1c:ab:bf:
3c:ea:4c:9c:9d:3f:78:1d:e4:6a:7c:50:66:29:05:cf:67:43:
e5:5f:f1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 04:35:00 2025 by rpki-client