Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/faOnV8F6IbwTsJARBjZ45Xw3Tt4.roa
File: faOnV8F6IbwTsJARBjZ45Xw3Tt4.roa (raw, json)
Hash identifier: GRSHPRwxBcBT+/kC6lwCswyhGT5vYzjbXqO1kg4U35s=
Subject key identifier: 7D:A3:A7:57:C1:7A:21:BC:13:B0:90:11:06:36:78:E5:7C:37:4E:DE
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019701FBD573E66886800DC24EFC02CA250B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/faOnV8F6IbwTsJARBjZ45Xw3Tt4.roa
Signing time: Sat 24 May 2025 11:09:30 +0000
ROA not before: Sat 24 May 2025 11:09:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.23.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.92.0/22 maxlen: 22
31.57.98.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.172.0/24 maxlen: 24
31.57.173.0/24 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.244.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.56.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.144.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 24 May 2025 12:09:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:01:fb:d5:73:e6:68:86:80:0d:c2:4e:fc:02:ca:25:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 24 11:09:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7da3a757c17a21bc13b09011063678e57c374ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bd:3e:c9:6f:50:e5:72:91:f4:4c:a1:66:7c:
d4:27:23:f8:6f:82:b9:e6:06:76:cf:67:33:57:ee:
5e:5b:d4:70:ef:88:f7:c3:e8:18:29:e5:de:18:fb:
56:66:0e:cd:5f:86:54:f8:ba:25:2e:c5:b1:22:33:
5d:e9:ce:bf:51:39:a1:72:99:c7:a5:6c:66:5a:a8:
b0:8f:d1:04:81:31:66:00:16:44:fd:6b:c7:df:79:
7d:3c:f6:67:ff:49:1b:b2:db:74:b6:4d:85:a4:8f:
ae:b8:b0:17:cf:a0:01:20:82:72:37:e9:87:c2:3e:
70:0d:5c:ed:58:24:08:60:b9:bb:3c:e6:6c:0c:64:
5d:5c:96:a6:05:ea:fa:f0:2a:ad:1c:d0:39:ef:3f:
a9:6f:bf:bc:a5:cf:e8:9e:b7:75:c6:19:56:61:c0:
ff:5a:c0:3b:92:39:59:fa:0d:46:de:84:be:91:20:
95:53:4f:4f:8d:39:4c:20:e9:8a:f0:c7:ac:e2:e0:
55:09:39:c4:3f:fc:03:26:f7:d8:58:33:95:06:c3:
26:bd:4e:08:1d:33:73:fc:91:6c:7e:c9:5f:35:78:
20:6a:c4:9c:5e:bb:dc:9a:50:44:fe:04:23:03:d6:
51:f0:4a:90:b3:32:c1:b8:1f:e6:e7:b5:1c:a8:47:
28:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A3:A7:57:C1:7A:21:BC:13:B0:90:11:06:36:78:E5:7C:37:4E:DE
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/faOnV8F6IbwTsJARBjZ45Xw3Tt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.23.0/24
31.56.57.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0/22
31.56.200.0/22
31.56.208.0/21
31.56.228.0/22
31.56.236.0/22
31.57.36.0/22
31.57.92.0/22
31.57.98.0/24
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0-31.57.173.255
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.244.0/24
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.56.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.144.0/24
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
52:92:68:72:39:d1:fb:b7:51:8d:34:5b:5b:d1:8e:d3:0f:05:
bd:2f:56:7a:7e:2b:5f:03:8b:19:95:58:2e:df:07:ec:5b:04:
d8:8a:6a:05:4d:50:21:d5:1c:3c:49:64:35:fb:62:8a:dc:96:
99:bc:7e:4a:31:32:98:e3:47:1c:fa:e2:2f:01:89:49:98:43:
9c:7b:5f:a6:61:b8:a0:0d:60:44:b3:6e:27:ba:69:04:75:b6:
0b:f0:4a:3a:26:db:10:b4:36:1b:8b:18:66:3e:96:b8:80:e8:
b3:95:82:da:2a:f6:74:a8:f0:b6:69:63:16:f9:fa:72:a1:b1:
b8:75:72:4f:e0:6e:19:b6:6f:54:7d:ba:10:5b:1e:e8:20:73:
52:9f:13:0c:f3:7f:ee:b5:a2:30:7c:03:82:6a:68:a4:ca:28:
87:03:ee:00:53:40:68:44:2e:92:81:5f:5d:34:9e:f2:ee:dc:
ab:16:6e:e7:f8:40:45:b0:42:22:13:2e:96:da:68:2d:38:87:
cf:14:50:fa:f5:1d:34:df:19:eb:08:5c:5e:c8:12:ef:67:20:
74:81:26:d9:9e:40:23:ad:ef:bd:af:ff:ef:35:ec:46:db:ba:
5e:0a:0d:44:e9:cc:bd:24:3f:0a:74:10:2a:c6:60:7a:bc:ae:
11:8b:9d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 04:03:42 2025 by rpki-client