Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/aVWIZMAiUMjKczwleS2l1S7oUVw.roa
File: aVWIZMAiUMjKczwleS2l1S7oUVw.roa (raw, json)
Hash identifier: UE2aD0ouvcLXYDLFAhR5xaFg4lb6/qLXetVfVk3Wp/w=
Subject key identifier: 69:55:88:64:C0:22:50:C8:CA:73:3C:25:79:2D:A5:D5:2E:E8:51:5C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196EF3B6ABFB0F51CA0A09F3B8777E941EE
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/aVWIZMAiUMjKczwleS2l1S7oUVw.roa
Signing time: Tue 20 May 2025 19:46:10 +0000
ROA not before: Tue 20 May 2025 19:46:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.47.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.57.12.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.92.0/22 maxlen: 22
31.57.98.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.86.0/24 maxlen: 24
31.58.144.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 21 May 2025 10:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ef:3b:6a:bf:b0:f5:1c:a0:a0:9f:3b:87:77:e9:41:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 20 19:46:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69558864c02250c8ca733c25792da5d52ee8515c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b2:2a:49:b4:e3:27:61:04:ef:ba:76:e6:31:
ef:ac:a7:e5:84:ed:cb:6b:38:8c:c1:07:66:41:26:
9f:f1:f0:53:3d:11:47:eb:a6:3c:83:e2:22:c1:29:
87:08:9e:64:fc:6b:18:80:a6:d7:99:97:f2:0e:1d:
0f:08:82:ff:3f:5e:d5:b4:71:fd:b9:f4:55:a1:8a:
2a:72:ad:80:34:a7:42:58:1d:aa:04:0b:8d:cd:58:
68:9e:98:02:3a:a5:10:d9:8b:a2:49:6c:e8:ed:d1:
ae:fd:90:25:47:af:d3:1f:27:f7:65:b0:3f:18:14:
53:fd:3e:fa:f8:f6:ce:9a:ee:a4:de:f0:39:05:39:
a2:e6:66:5a:60:ac:95:b8:b2:ba:7b:c4:8b:4e:d9:
8e:70:14:bf:bc:f5:96:2c:30:5a:63:f5:b3:3f:6f:
4c:b0:96:af:de:a3:f3:e8:2e:cb:d8:de:57:4d:a6:
db:d1:0f:5b:24:43:5a:bb:a6:d9:f3:78:86:5c:60:
8d:bf:13:5c:e0:55:43:53:db:2d:29:84:71:49:1e:
90:16:52:8c:90:32:f4:4c:13:fe:77:7c:9b:c5:12:
6b:cb:91:20:38:8a:34:59:50:83:c9:54:3c:44:cd:
9f:a9:59:b1:24:bd:03:74:2a:b9:cf:73:3f:66:f4:
ef:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:55:88:64:C0:22:50:C8:CA:73:3C:25:79:2D:A5:D5:2E:E8:51:5C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/aVWIZMAiUMjKczwleS2l1S7oUVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.47.0/24
31.56.57.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0/22
31.56.200.0/22
31.56.208.0/21
31.56.228.0/22
31.56.236.0/22
31.57.12.0/23
31.57.36.0/22
31.57.92.0/22
31.57.98.0/24
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.68.0/22
31.58.84.0/22
31.58.144.0/24
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:ae:fc:71:ed:18:8b:77:e5:b6:47:1f:ba:9a:a4:1a:26:99:
95:62:23:e5:cf:22:00:80:29:71:3f:a9:7c:98:0a:11:1a:a3:
bb:f5:7f:51:51:85:3d:7b:90:2d:f0:47:40:92:ee:aa:3e:f7:
d2:e6:07:03:3e:8a:84:58:0a:39:39:36:e2:67:8b:15:9b:91:
a7:f3:13:bd:33:4a:98:03:ff:20:75:3e:a6:d1:ff:08:e6:a9:
cd:02:db:38:82:f5:bf:a6:af:32:6f:2e:23:f7:76:f9:6a:80:
d9:bb:d5:58:0c:3e:3e:c0:0e:7a:52:9f:2e:02:77:25:61:4f:
bc:a7:e6:f0:12:96:35:65:68:33:55:71:d4:d7:a4:27:5c:75:
6e:3e:92:fa:9f:dc:70:b8:f7:9f:e5:7a:ae:c1:14:1d:73:9e:
db:b8:d0:e0:3d:a6:8c:67:4f:94:61:c4:d8:63:94:2d:7d:3a:
6e:1c:74:f8:e1:2d:8b:a7:2d:93:e6:04:14:04:65:aa:c4:31:
a5:0e:ed:a9:dd:e4:b3:40:fc:ec:ee:d1:db:6e:ab:99:4b:17:
b5:f1:45:ec:94:b4:9e:23:8e:54:50:53:f6:98:ca:29:1c:9c:
84:19:24:6c:e6:71:a3:dd:16:1e:67:f3:c5:67:be:81:07:b9:
5c:57:65:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 04:28:36 2025 by rpki-client