Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Q13wQip5nCWz0cvyM3K5FNAib3E.roa
File: Q13wQip5nCWz0cvyM3K5FNAib3E.roa (raw, json)
Hash identifier: 1z9MVwiKXgfzuY3tDE17nlCHaYR4dBWjrDWlMY25rbs=
Subject key identifier: 43:5D:F0:42:2A:79:9C:25:B3:D1:CB:F2:33:72:B9:14:D0:22:6F:71
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197023322C4857A2D31E9495DD1F07985EE
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Q13wQip5nCWz0cvyM3K5FNAib3E.roa
Signing time: Sat 24 May 2025 12:09:55 +0000
ROA not before: Sat 24 May 2025 12:09:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.23.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.92.0/22 maxlen: 22
31.57.98.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.172.0/24 maxlen: 24
31.57.173.0/24 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.244.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.56.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 24 May 2025 16:03:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:02:33:22:c4:85:7a:2d:31:e9:49:5d:d1:f0:79:85:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 24 12:09:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=435df0422a799c25b3d1cbf23372b914d0226f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:eb:2b:8f:8c:15:a2:5c:e1:c7:59:70:78:93:
84:0d:e0:d5:d5:6f:59:9a:fd:94:14:14:a0:bb:72:
8d:c9:ea:19:d9:39:9b:fe:bc:91:31:9c:6e:d9:e4:
4f:28:18:c7:4d:27:5c:f1:26:34:61:82:af:ee:fa:
2f:48:65:bd:37:36:ed:3d:0a:4a:58:74:87:f5:72:
ca:6a:c5:06:e5:bc:ed:fa:d2:80:52:88:d6:72:f2:
24:a8:1a:68:c9:c2:34:ef:87:25:ec:de:7b:0b:13:
89:09:8a:3b:ee:ab:78:5d:ee:2a:8c:42:30:b7:2d:
7a:ad:38:1f:6f:04:33:d1:4d:50:1e:06:32:77:25:
48:7d:44:56:26:32:52:cd:6c:f1:8d:d9:0f:a7:6a:
0f:18:18:4b:5f:e3:0a:20:10:36:c4:70:a9:38:10:
a8:11:35:fc:a0:35:f4:3b:df:3b:c0:70:91:2f:40:
41:92:33:f1:a1:5a:ce:8f:90:85:57:fc:08:29:90:
e3:c4:b2:b4:a5:22:2b:d0:7a:42:de:f4:58:77:f2:
3b:38:65:d3:48:94:29:ce:6d:fd:c1:7b:e4:4a:bf:
21:bf:71:f6:05:d2:26:58:72:69:b2:d9:3e:d7:32:
3f:39:fd:3d:93:17:c9:ee:d5:6a:f9:19:d6:de:df:
f6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5D:F0:42:2A:79:9C:25:B3:D1:CB:F2:33:72:B9:14:D0:22:6F:71
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Q13wQip5nCWz0cvyM3K5FNAib3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.23.0/24
31.56.57.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0/22
31.56.200.0/22
31.56.208.0/21
31.56.228.0/22
31.56.236.0/22
31.57.36.0/22
31.57.92.0/22
31.57.98.0/24
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0-31.57.173.255
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.244.0/24
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.56.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
98:6b:2a:b1:f2:47:e4:3b:21:89:77:72:58:4a:50:b8:b0:a7:
a3:05:47:8c:2d:ff:d8:1e:7b:02:6c:52:70:21:bc:0b:78:ab:
ee:0f:b6:80:72:f9:28:5e:0e:66:b1:4d:a9:a5:62:8a:fb:e2:
85:73:54:7f:b0:0b:46:37:19:5f:e6:33:2a:49:6d:e7:04:66:
b8:a3:54:ac:c6:d2:8e:4a:d7:98:df:c4:2a:79:4c:9e:45:f2:
76:e6:5b:dd:33:2c:d2:7d:c2:62:fa:cc:f0:48:e7:a9:bc:d5:
ed:ae:84:dc:e1:03:af:49:1c:74:d7:4a:2d:6f:99:c0:07:75:
14:94:b0:85:8c:75:5f:fd:2a:b5:11:9f:ae:64:99:f7:77:64:
ec:c0:68:70:e3:00:e7:cf:e7:b1:2a:d4:0b:4a:d7:b3:7c:0d:
62:3e:5b:b1:aa:fd:71:c3:6b:37:d8:44:7d:37:47:ba:23:ee:
2f:29:50:2d:bc:4f:76:6c:41:9a:10:d0:2e:25:90:b9:b1:17:
dc:04:b4:dd:43:76:ca:4e:c7:b8:cf:2b:56:fd:16:7f:43:df:
d7:70:d0:5f:8b:b0:ca:77:12:4a:89:6f:72:36:5e:02:52:f0:
d3:8d:3f:dd:55:ae:1e:4d:09:76:db:49:80:cf:5e:e2:3a:79:
e9:02:aa:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 03:42:57 2025 by rpki-client