Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QR-qwz5Ihv7-ELwQ7v56jAhQon4.roa
File: QR-qwz5Ihv7-ELwQ7v56jAhQon4.roa (raw, json)
Hash identifier: wE5oNjtjslpiswVay3YbI7VMnsfUvLLMz4z7UvBFjPo=
Subject key identifier: 41:1F:AA:C3:3E:48:86:FE:FE:10:BC:10:EE:FE:7A:8C:08:50:A2:7E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197224DD3E505CD2B1D2545C40F09DB0805
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QR-qwz5Ihv7-ELwQ7v56jAhQon4.roa
Signing time: Fri 30 May 2025 17:46:55 +0000
ROA not before: Fri 30 May 2025 17:46:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.57.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.196.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.56.238.0/24 maxlen: 24
31.57.12.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.60.0/22 maxlen: 24
31.57.92.0/22 maxlen: 22
31.57.98.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.110.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.244.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.56.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.212.0/22 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 30 May 2025 19:09:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:22:4d:d3:e5:05:cd:2b:1d:25:45:c4:0f:09:db:08:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 30 17:46:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=411faac33e4886fefe10bc10eefe7a8c0850a27e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:17:04:e0:7d:e4:db:0e:d4:cf:08:ad:b5:05:
9f:93:3e:a3:8c:c6:1a:e4:27:b8:ab:3c:9f:84:d1:
1f:6b:f6:98:09:bd:c8:29:25:ad:64:fd:c9:62:e5:
d5:e3:7a:55:0f:f6:5f:d2:8a:83:a5:65:c5:e5:c3:
66:0d:d1:03:74:22:14:35:3f:5a:68:ad:06:47:3a:
ca:92:b9:54:a5:a2:a5:5d:66:fb:12:13:69:2f:14:
2d:46:0f:58:55:86:46:71:39:da:c0:1c:f5:b4:10:
54:93:82:f5:7c:70:06:e2:23:f8:2f:7a:44:e0:b2:
2f:1b:69:56:d4:94:c8:5d:c2:9a:60:ac:9a:5d:ba:
8c:21:c0:da:89:29:02:41:37:5f:ef:ad:d2:b4:46:
f4:45:19:9f:e8:95:57:20:0a:02:f4:2c:df:6f:0e:
9d:49:63:b1:93:17:86:7f:80:61:2f:57:30:02:6b:
f9:f3:54:4e:7b:0c:af:a1:b7:58:93:03:6f:40:66:
a2:33:33:f3:14:3d:79:5d:44:4c:59:64:f1:4d:96:
24:98:8c:64:ba:cb:f5:90:fb:2f:b2:e1:2e:76:c1:
3d:7c:ca:76:d8:fb:ba:e0:af:06:12:60:ca:f4:af:
7b:35:2e:5f:94:b3:20:26:86:8a:ed:e0:cc:7b:0c:
8a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1F:AA:C3:3E:48:86:FE:FE:10:BC:10:EE:FE:7A:8C:08:50:A2:7E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QR-qwz5Ihv7-ELwQ7v56jAhQon4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.57.0/24
31.56.77.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0/22
31.56.196.0-31.56.203.255
31.56.208.0/21
31.56.228.0/22
31.56.236.0/22
31.57.12.0/23
31.57.36.0/22
31.57.60.0/22
31.57.92.0/22
31.57.98.0/24
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.244.0/24
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.56.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.212.0/22
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:8d:1f:ff:1a:2c:23:5d:b0:6c:ab:78:e3:84:1f:66:54:d2:
54:8b:5e:c7:5a:61:13:ae:1d:94:c2:52:bf:fa:cf:39:87:2c:
fa:44:68:95:13:80:e8:a4:4a:0f:f5:6b:95:47:ee:ce:f3:bd:
95:12:ed:b1:87:64:5a:ce:f4:86:0e:72:c9:f4:2d:1e:d2:13:
29:41:73:df:ae:0c:bc:34:36:11:40:b7:1a:0d:f9:1e:e3:7e:
fc:24:2a:f7:72:db:5e:26:e1:e6:2d:6b:24:4a:f1:41:0a:b2:
67:d7:77:47:11:96:34:b2:09:b8:c0:0b:01:c8:e2:0c:1f:cf:
8b:df:79:65:49:47:9e:14:aa:90:4a:7b:c2:4d:d0:67:fd:76:
79:32:ee:98:1a:09:16:ef:01:5a:71:ad:b2:ea:0a:e9:bd:63:
07:e4:15:29:ee:6d:3b:76:56:14:0b:02:06:17:83:8c:68:e6:
a0:12:35:f7:26:61:1c:b0:1d:56:00:8d:21:64:5a:a1:bc:af:
b9:af:40:ce:66:3c:8d:62:de:e8:30:f3:17:aa:df:c0:52:35:
82:31:eb:79:22:f8:1e:12:c7:53:62:88:2c:8c:a3:df:d6:5a:
8d:44:b1:f4:46:fb:ed:04:46:a0:b2:ca:91:a9:66:87:2f:5d:
d9:64:c0:a7
-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgISAZciTdPlBc0rHSVFxA8J2wgFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNTMwMTc0NjU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTFmYWFjMzNlNDg4NmZlZmUxMGJjMTBlZWZlN2E4YzA4NTBhMjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBcE4H3k2w7UzwittQWfkz6jjMYa
5Ce4qzyfhNEfa/aYCb3IKSWtZP3JYuXV43pVD/Zf0oqDpWXF5cNmDdEDdCIUNT9a
aK0GRzrKkrlUpaKlXWb7EhNpLxQtRg9YVYZGcTnawBz1tBBUk4L1fHAG4iP4L3pE
4LIvG2lW1JTIXcKaYKyaXbqMIcDaiSkCQTdf763StEb0RRmf6JVXIAoC9Czfbw6d
SWOxkxeGf4BhL1cwAmv581ROewyvobdYkwNvQGaiMzPzFD15XURMWWTxTZYkmIxk
usv1kPsvsuEudsE9fMp22Pu64K8GEmDK9K97NS5flLMgJoaK7eDMewyK1QIDAQAB
o4IDZDCCA2AwHQYDVR0OBBYEFEEfqsM+SIb+/hC8EO7+eowIUKJ+MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvUVItcXd6NUlodjctRUx3UTd2NTZqQWhRb240LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBeAYIKwYBBQUHAQcBAf8EggFnMIIBYzCCAV8EAgABMIIB
VwMEAR84BAMEAB84OQMEAB84TQMEAR84WgMEAx84aAMEAR84cjAMAwQBHzh2AwQC
Hzh4AwQCHzi0AwQCHzi8MAwDBAIfOMQDBAIfOMgDBAMfONADBAIfOOQDBAIfOOwD
BAEfOQwDBAIfOSQDBAIfOTwDBAIfOVwDBAAfOWIDBAMfOWgDBAMfOXgDBAEfOYQD
BAMfOYgDBAEfOZIDBAIfOagwDAMEBB85sAMEAh85uAMEAh85wAMEAR85yDAMAwQE
HznQAwQCHzngAwQCHznoAwQAHzn0MAsDBAEfOfoDAwEfOAMEAR86IgMEAR86MgME
AR86OAMEAR86QAMEAh86RAMEAh86VAMEAh86mAMEAh86rDAMAwQCHzrcAwQCHzrg
AwQCHztMAwQCHztgAwQCHztwMAwDBAMfO4gDBAMfO5ADBAMfO6ADBAIfO9QDBAIf
O+ADBAIfO+gwDQYJKoZIhvcNAQELBQADggEBAEuNH/8aLCNdsGyreOOEH2ZU0lSL
XsdaYROuHZTCUr/6zzmHLPpEaJUTgOikSg/1a5VH7s7zvZUS7bGHZFrO9IYOcsn0
LR7SEylBc9+uDLw0NhFAtxoN+R7jfvwkKvdy214m4eYtayRK8UEKsmfXd0cRljSy
CbjACwHI4gwfz4vfeWVJR54UqpBKe8JN0Gf9dnky7pgaCRbvAVpxrbLqCum9Ywfk
FSnubTt2VhQLAgYXg4xo5qASNfcmYRywHVYAjSFkWqG8r7mvQM5mPI1i3ugw8xeq
38BSNYIx63ki+B4Sx1NiiCyMo9/WWo1EsfRG++0ERqCyypGpZocvXdlkwKc=
-----END CERTIFICATE-----
Generated at Thu Jun 5 03:42:56 2025 by rpki-client