Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NfcVtAZhzyCu9E07ruCnOE9gWLg.roa
File: NfcVtAZhzyCu9E07ruCnOE9gWLg.roa (raw, json)
Hash identifier: wlnuJ6ADmbaPXiILPoTiGkBpgwJnaF5sGM+gQlNeF58=
Subject key identifier: 35:F7:15:B4:06:61:CF:20:AE:F4:4D:3B:AE:E0:A7:38:4F:60:58:B8
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01971B48A4E1C1DA8CAADF9FB0010BB4D66D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NfcVtAZhzyCu9E07ruCnOE9gWLg.roa
Signing time: Thu 29 May 2025 09:03:55 +0000
ROA not before: Thu 29 May 2025 09:03:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.23.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.196.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.56.238.0/24 maxlen: 24
31.57.12.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.60.0/22 maxlen: 24
31.57.92.0/22 maxlen: 22
31.57.98.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.110.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.244.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.56.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.212.0/22 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 30 May 2025 17:46:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1b:48:a4:e1:c1:da:8c:aa:df:9f:b0:01:0b:b4:d6:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 29 09:03:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35f715b40661cf20aef44d3baee0a7384f6058b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c1:4b:10:e5:5d:c5:27:bb:75:8e:70:23:79:
99:66:a0:e8:c5:55:61:bf:ed:73:61:c4:99:39:8c:
b5:8e:10:9e:12:d1:cb:48:01:67:32:bf:a4:c5:27:
56:54:cc:d5:8b:68:2b:15:82:c6:f8:ac:b1:50:de:
07:bd:55:31:03:36:48:97:c3:e6:dc:9a:2c:cf:a2:
df:53:6e:d9:b9:94:4b:ee:ea:45:41:67:95:33:e2:
ef:21:a1:ef:f3:6e:a6:da:14:4e:24:b5:19:0c:42:
e8:0d:0c:9b:23:da:17:f9:5f:a6:da:21:c4:a3:b1:
72:09:75:88:80:c9:ad:35:a1:87:99:9f:68:08:95:
45:69:5b:57:9f:78:a8:ff:74:4e:67:35:e3:0d:58:
9c:b5:14:df:41:79:e5:8f:6a:74:29:cd:df:a9:4d:
11:0e:18:f6:d3:2d:ae:2d:bf:0a:02:c4:21:85:52:
85:0b:9d:56:9d:49:f1:ea:c0:64:01:a2:4d:6d:7a:
37:be:ba:c5:41:c0:f7:ce:08:39:de:b8:7d:48:54:
29:7c:07:65:ed:f5:72:ed:4e:76:e5:3e:c7:5b:b0:
98:1c:69:3b:79:e4:7c:d8:dc:a4:89:e8:05:89:b1:
20:56:79:cd:6a:a6:30:d7:c3:53:64:fe:bf:92:90:
d9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F7:15:B4:06:61:CF:20:AE:F4:4D:3B:AE:E0:A7:38:4F:60:58:B8
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NfcVtAZhzyCu9E07ruCnOE9gWLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.23.0/24
31.56.57.0/24
31.56.77.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0/22
31.56.196.0-31.56.203.255
31.56.208.0/21
31.56.228.0/22
31.56.236.0/22
31.57.12.0/23
31.57.36.0/22
31.57.60.0/22
31.57.92.0/22
31.57.98.0/24
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.244.0/24
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.56.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.212.0/22
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
43:58:67:85:4d:7c:32:ca:99:51:fb:ea:31:60:bb:58:e6:2b:
be:99:e5:b8:c1:39:20:d7:83:96:13:16:4a:51:6b:57:24:a6:
47:89:b9:6e:74:d5:0f:83:ac:7c:d8:48:32:ae:7e:a0:44:10:
97:df:ed:60:7b:6f:fa:59:e3:71:da:3f:8e:92:51:fa:0e:84:
63:46:69:b8:5b:cf:26:8f:a3:4a:a4:d5:5d:7e:ef:12:11:b6:
0d:cb:2f:14:5e:9a:a7:68:d4:42:a1:e3:2c:70:28:a0:b9:b6:
56:7d:1c:35:de:86:96:02:22:b8:c8:73:a3:83:fb:43:a6:d1:
47:b0:09:84:5f:c4:80:0f:01:e2:ab:d6:86:65:bd:c9:73:62:
00:bb:48:4f:75:3b:e6:07:ea:eb:e6:a5:5b:f9:a4:8e:7a:34:
e8:79:95:81:77:a6:6d:37:ad:b7:ad:92:39:51:81:fc:15:12:
c8:a3:52:89:53:f9:19:7e:49:96:bf:d3:f3:c8:a0:09:8c:59:
d0:5e:33:71:48:c1:c9:dd:86:0d:1b:d5:43:81:9d:5f:6a:0e:
d1:56:6f:a0:ec:93:e7:40:ee:37:72:bc:e7:cf:ab:c8:65:4a:
62:b7:b3:07:e8:8a:b6:b7:2d:36:9a:c9:be:70:e2:f8:19:e1:
fd:e8:de:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 04:22:25 2025 by rpki-client