Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/e0zOi-U88QF7U1iB7yoQW-KyUJM.roa
File: e0zOi-U88QF7U1iB7yoQW-KyUJM.roa (raw, json)
Hash identifier: yYG7KZUlXWUDGhv4gYRiO3wK7pnyohKz9gHqKEMrJIc=
Subject key identifier: 7B:4C:CE:8B:E5:3C:F1:01:7B:53:58:81:EF:2A:10:5B:E2:B2:50:93
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196CA76E143DB211B95E6AE815E76F656E2
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/e0zOi-U88QF7U1iB7yoQW-KyUJM.roa
Signing time: Tue 13 May 2025 16:25:10 +0000
ROA not before: Tue 13 May 2025 16:25:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.57.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/22 maxlen: 24
31.56.224.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.92.0/22 maxlen: 22
31.57.104.0/21 maxlen: 24
31.57.118.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.171.0/24 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.230.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.249.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.50.0/24 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.86.0/24 maxlen: 24
31.58.141.0/24 maxlen: 24
31.58.144.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.71.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.120.0/24 maxlen: 24
31.59.121.0/24 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 14 May 2025 13:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:76:e1:43:db:21:1b:95:e6:ae:81:5e:76:f6:56:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 13 16:25:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b4cce8be53cf1017b535881ef2a105be2b25093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:82:1b:34:e6:11:14:61:76:88:84:e5:23:87:
16:f1:9e:79:fe:f7:49:f1:45:ad:03:90:e0:0a:fa:
94:64:f4:90:81:f4:99:79:71:4b:3d:cf:d8:15:b8:
35:97:4d:61:a0:e7:34:c2:e8:2d:ee:59:87:a0:fc:
b8:8e:e6:a5:20:40:81:61:19:6c:f4:ff:7f:69:79:
5c:cc:81:85:dd:66:da:ac:c9:2a:a8:1d:69:ef:4a:
4d:17:b0:9c:ba:83:dd:2c:fd:2a:73:df:5e:f3:fd:
31:9f:6c:b2:9a:93:30:d6:f1:49:b2:49:32:2c:1e:
af:ed:2a:e2:ad:08:cf:6d:be:23:bb:98:0a:98:1e:
fb:da:bd:46:44:8d:7c:5d:d9:4b:15:a2:58:c0:95:
fc:ed:b1:ef:a2:38:a3:e7:ad:f0:43:bf:2f:b0:df:
b0:7f:b7:6c:e1:5f:8e:65:df:c2:58:c4:dc:f3:2a:
23:89:ac:9a:95:d5:83:4d:86:f6:9c:58:7f:3c:29:
99:13:e8:a0:20:51:cf:a7:9c:63:44:e3:d3:67:2f:
c8:20:e8:a8:0e:dc:07:60:ce:9a:ca:7c:40:07:0f:
e0:23:f8:5d:f0:ef:5d:d1:3c:3a:7a:4a:41:34:7f:
9f:c7:27:dd:d7:44:d8:19:1e:e2:a2:79:2a:74:e8:
b1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4C:CE:8B:E5:3C:F1:01:7B:53:58:81:EF:2A:10:5B:E2:B2:50:93
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/e0zOi-U88QF7U1iB7yoQW-KyUJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.57.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0/22
31.56.200.0/22
31.56.208.0/21
31.56.220.0-31.56.231.255
31.56.236.0/22
31.57.36.0/23
31.57.92.0/22
31.57.104.0/21
31.57.118.0/24
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.188.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.230.0/24
31.57.232.0/22
31.57.249.0-31.57.255.255
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.84.0/22
31.58.141.0/24
31.58.144.0/24
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.71.0/24
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.151.255
31.59.160.0/20
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
28:3d:f7:c7:79:a8:14:8b:d8:5b:99:67:b0:2c:79:75:a1:c3:
76:ec:8c:23:51:51:89:2d:98:2b:14:37:b1:7f:0e:c8:00:60:
9b:4c:45:19:04:10:f6:ba:37:7c:26:ca:70:0b:14:51:2b:56:
01:5e:96:b3:a6:14:df:f2:4b:2b:91:ad:5d:ea:6d:d8:47:f6:
9f:9e:4d:e0:1a:f0:49:6d:1c:5f:81:03:91:46:57:74:0f:d1:
3c:ba:c5:1f:12:46:b5:a2:5c:0a:d5:2a:eb:3a:a0:1e:a5:3e:
76:be:7c:3d:ad:04:df:8c:43:7d:8b:01:4b:ba:3b:36:53:60:
1e:a3:96:83:a5:37:de:5f:f5:b0:c4:b5:d3:e7:57:ed:00:3f:
21:3f:40:ea:f2:b1:a4:59:27:40:9d:43:b1:0e:67:fe:ae:90:
13:36:b7:b5:1d:1c:df:7e:f8:40:d4:06:d0:78:a1:bf:c2:a6:
28:93:b0:c6:80:fa:f0:17:fc:ca:42:64:fe:b3:8a:34:2e:f5:
23:f9:b7:25:7a:fe:b7:a8:81:3d:bd:e4:72:41:eb:34:cb:2d:
f3:5e:de:aa:7f:8b:bd:d5:eb:ca:35:33:fb:af:92:00:9b:18:
33:8b:02:af:ce:9f:13:eb:74:08:46:17:56:20:89:77:75:9a:
ba:4b:79:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 03:56:41 2025 by rpki-client