Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cz3inWW5Mi0ZiLME3gQ_AsRkTis.roa
File: cz3inWW5Mi0ZiLME3gQ_AsRkTis.roa (raw, json)
Hash identifier: k+fc+v0WWEpj1Y5ubWC+tJ3ItiCTUWsZL+YM850TiZM=
Subject key identifier: 73:3D:E2:9D:65:B9:32:2D:19:88:B3:04:DE:04:3F:02:C4:64:4E:2B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197D4F87838B8E2017B1C8D803FB372C353
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cz3inWW5Mi0ZiLME3gQ_AsRkTis.roa
Signing time: Fri 04 Jul 2025 10:25:42 +0000
ROA not before: Fri 04 Jul 2025 10:25:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.28.0/22 maxlen: 24
31.56.32.0/24 maxlen: 24
31.56.44.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.112.0/24 maxlen: 24
31.56.114.0/23 maxlen: 24
31.56.117.0/24 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.180.0/23 maxlen: 23
31.56.188.0/22 maxlen: 24
31.56.190.0/23 maxlen: 23
31.56.198.0/23 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/23 maxlen: 23
31.56.224.0/23 maxlen: 23
31.56.228.0/22 maxlen: 24
31.56.230.0/23 maxlen: 23
31.56.233.0/24 maxlen: 24
31.56.236.0/22 maxlen: 24
31.56.236.0/23 maxlen: 23
31.57.12.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.60.0/24 maxlen: 24
31.57.94.0/23 maxlen: 23
31.57.104.0/21 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.120.0/23 maxlen: 23
31.57.124.0/22 maxlen: 24
31.57.126.0/23 maxlen: 23
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.186.0/23 maxlen: 23
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.225.0/24 maxlen: 24
31.57.231.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.58.226.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.128.0/24 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.136.0/24 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.212.0/22 maxlen: 24
31.59.212.0/24 maxlen: 24
31.59.213.0/24 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 04 Jul 2025 16:31:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d4:f8:78:38:b8:e2:01:7b:1c:8d:80:3f:b3:72:c3:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 4 10:25:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=733de29d65b9322d1988b304de043f02c4644e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c3:1d:18:bc:cc:33:70:b8:1e:be:ef:98:de:
d3:84:88:ea:b1:48:28:7d:97:65:51:36:09:7a:ae:
2b:b8:0a:e8:61:e1:45:59:bf:db:68:b4:4c:f7:a8:
fa:58:99:04:90:7c:a9:61:0f:e2:7b:be:2e:b4:88:
ee:f9:39:85:22:cb:cc:80:de:5d:e6:c4:70:b9:e6:
48:1c:9c:26:47:37:98:9c:6e:df:13:57:7b:1d:0a:
aa:2b:29:37:8f:3e:61:5b:f8:74:bf:fb:23:08:9c:
73:5f:2d:ed:2c:23:be:a6:b4:e6:e0:1b:47:5d:92:
c6:2f:d4:2b:f9:39:cd:b7:c3:ef:d6:07:0b:3d:a7:
4f:32:dd:6b:13:0b:fb:e0:08:e3:48:e9:07:44:a9:
bb:9d:5b:8e:d0:4d:ff:55:0c:b9:cf:ce:ce:e8:7c:
61:85:3c:72:44:0e:0f:04:18:c6:43:09:77:dd:b6:
4e:30:22:f8:7c:e4:cb:84:3e:83:19:15:6c:63:4b:
4f:40:03:29:b9:4d:ba:2f:dc:5c:70:61:56:5e:56:
74:42:89:14:e7:b4:a3:50:e7:0c:f3:a3:1d:f4:14:
c6:22:4c:62:60:98:90:97:93:9f:b7:30:e0:e6:90:
56:5a:1b:71:39:18:f0:d2:45:59:5f:e9:a7:18:30:
60:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3D:E2:9D:65:B9:32:2D:19:88:B3:04:DE:04:3F:02:C4:64:4E:2B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cz3inWW5Mi0ZiLME3gQ_AsRkTis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.28.0-31.56.32.255
31.56.44.0/24
31.56.57.0/24
31.56.77.0/24
31.56.90.0/23
31.56.104.0-31.56.112.255
31.56.114.0/23
31.56.117.0-31.56.123.255
31.56.180.0/22
31.56.188.0/22
31.56.198.0-31.56.203.255
31.56.208.0/21
31.56.220.0/23
31.56.224.0/23
31.56.228.0/22
31.56.233.0/24
31.56.236.0/22
31.57.12.0/23
31.57.36.0/22
31.57.52.0-31.57.63.255
31.57.94.0/23
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.231.0-31.57.235.255
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.128.0/24
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.212.0/22
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:d2:26:79:c5:fe:1b:12:b4:4d:f2:2a:92:51:5d:aa:72:00:
4b:d4:79:ef:7b:34:1a:30:96:2e:74:38:96:04:c3:df:03:72:
60:ec:55:70:04:3c:b4:2b:0a:d6:82:58:e8:62:2a:95:55:27:
ad:fe:8e:ff:c5:69:32:37:59:6a:98:0a:33:d4:6f:cc:a7:5f:
d9:43:32:63:df:95:f6:7e:6b:9b:97:bf:a2:44:2a:fd:8b:1b:
37:87:83:9d:34:c1:5c:77:06:57:49:76:21:56:dd:f9:88:30:
c0:f2:12:c3:09:76:e6:f6:e6:71:82:7e:f3:16:36:95:fa:11:
1d:26:56:ee:8b:32:d0:07:27:48:07:73:95:bc:c7:f1:52:38:
86:15:d1:87:ea:33:4e:f5:e0:1f:ac:fa:da:5d:d9:bb:8b:e3:
f6:28:02:64:1a:20:92:06:7a:0f:97:bb:d9:ae:5f:e6:97:2d:
8f:d0:4b:38:96:0f:f3:77:e1:87:9b:c2:96:48:ab:53:66:76:
93:2c:d1:a2:3f:87:ee:f3:1a:a2:7d:e9:54:cf:1e:fd:19:a3:
56:bc:fd:16:65:f1:32:8d:70:56:54:1f:e3:22:0c:d0:f1:60:
ae:8b:c5:95:32:e1:f6:0d:75:25:65:67:db:b7:34:ce:45:6e:
3b:a8:de:fa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 4 19:17:12 2025 by rpki-client