Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Q4TxK8QrCoEfHRaVwq_RF-0jyZ8.roa
File: Q4TxK8QrCoEfHRaVwq_RF-0jyZ8.roa (raw, json)
Hash identifier: K6uYkgHb3F6+bJxIyrbRcF4VzP5D90Ke99Z4EsoIe6s=
Subject key identifier: 43:84:F1:2B:C4:2B:0A:81:1F:1D:16:95:C2:AF:D1:17:ED:23:C9:9F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196D8170AFE05E5124AA7B290B015ECA5A7
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Q4TxK8QrCoEfHRaVwq_RF-0jyZ8.roa
Signing time: Fri 16 May 2025 07:55:10 +0000
ROA not before: Fri 16 May 2025 07:55:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.57.0/24 maxlen: 24
31.56.67.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.107.0/24 maxlen: 24
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/22 maxlen: 24
31.56.224.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.46.0/23 maxlen: 24
31.57.92.0/22 maxlen: 22
31.57.98.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.118.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.171.0/24 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.86.0/24 maxlen: 24
31.58.144.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.120.0/24 maxlen: 24
31.59.121.0/24 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 17 May 2025 17:52:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:17:0a:fe:05:e5:12:4a:a7:b2:90:b0:15:ec:a5:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 16 07:55:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4384f12bc42b0a811f1d1695c2afd117ed23c99f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9a:2d:7d:1f:f0:23:e8:e4:f0:54:58:a5:a2:
14:7c:9a:ef:16:45:74:fb:fc:73:e1:a1:42:c8:7d:
38:38:f5:5d:fd:16:0f:89:57:ce:7f:e3:99:99:e4:
e0:7e:2f:b7:7e:5f:13:ab:58:f8:b8:bb:c3:08:24:
50:f5:eb:a0:7c:63:10:21:29:53:d2:ca:cb:8c:a0:
4e:88:8e:74:bd:48:2f:2e:79:24:8b:15:e7:bc:a0:
64:ae:b5:21:99:51:bd:e4:78:5e:80:94:af:6e:a3:
d4:7c:6a:10:0a:63:7b:52:4a:65:8f:d5:65:51:cf:
0f:ba:33:98:04:af:6d:a8:30:a4:38:80:fb:cf:f6:
c9:e6:02:66:ef:cd:f9:cb:5f:0d:f3:95:ad:27:a3:
97:d6:ea:8f:33:fc:aa:47:4c:15:3e:d8:e4:f2:fc:
31:96:7d:bc:c2:54:d8:67:47:31:41:00:7f:c9:bd:
2c:2e:d7:88:e9:86:10:d8:ba:ec:41:f2:54:38:bf:
bc:18:40:67:f7:42:4e:df:6e:dc:e8:e1:0c:09:df:
52:91:02:0a:db:4f:c5:e1:da:93:5e:19:b4:b0:2c:
74:cc:56:76:9e:6d:8c:36:6c:53:63:23:12:e7:10:
86:9d:ae:7c:8b:0a:31:11:fa:2c:02:a0:9f:51:d6:
90:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:84:F1:2B:C4:2B:0A:81:1F:1D:16:95:C2:AF:D1:17:ED:23:C9:9F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Q4TxK8QrCoEfHRaVwq_RF-0jyZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.57.0/24
31.56.67.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0/22
31.56.200.0/22
31.56.208.0/21
31.56.220.0-31.56.231.255
31.56.236.0/22
31.57.36.0/22
31.57.46.0/23
31.57.92.0/22
31.57.98.0/24
31.57.104.0/21
31.57.118.0/24
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.188.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.68.0/22
31.58.84.0/22
31.58.144.0/24
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.41.0/24
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.151.255
31.59.160.0/20
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
99:32:02:a2:de:10:65:e2:03:3e:29:0e:1f:42:ae:db:eb:c1:
d6:7c:ea:c6:54:ea:cd:a1:0a:65:99:fc:42:58:49:b6:13:53:
c9:d7:f3:36:eb:46:50:21:6a:a2:25:73:53:12:93:45:93:70:
6b:46:1b:df:23:75:1c:52:eb:5d:47:20:dd:7c:d3:2a:98:64:
68:f9:1e:54:25:a8:3a:2f:62:da:7e:d4:db:35:54:ae:c5:2e:
d2:01:54:0b:bf:c9:eb:57:88:9d:3c:a2:45:ab:ed:35:dc:06:
fe:24:52:84:43:4b:0b:07:e9:82:e8:d7:b2:ba:de:ed:1b:48:
62:9b:97:76:28:c3:09:d5:62:4b:2d:55:29:b6:76:27:d0:c4:
0c:f2:6b:fd:48:8f:08:d1:61:27:c2:bf:cd:86:25:9b:83:e5:
bb:9f:a3:e0:f4:b8:35:a0:d8:b9:69:e2:c0:05:9c:fd:0b:49:
63:ab:75:96:eb:6a:8a:69:62:9d:0a:7e:50:fa:6b:f1:b3:70:
8f:a0:7b:ae:2f:a0:4e:c8:de:51:1e:30:67:23:fb:3b:f9:78:
55:ac:02:46:83:71:f2:fe:ed:e8:c8:a6:bb:39:75:de:4b:5f:
45:00:bc:7d:b1:b4:45:7d:7a:48:dc:05:46:7f:93:1d:75:82:
64:62:b5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 04:41:15 2025 by rpki-client