Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hxKmj5RqtnI0IpoqJIYHvQGnrAQ.roa
File: hxKmj5RqtnI0IpoqJIYHvQGnrAQ.roa (raw, json)
Hash identifier: nqmvfLQnlTeIfe01k/68BcmpnTF/KBxFgpD1xLDLvzs=
Subject key identifier: 87:12:A6:8F:94:6A:B6:72:34:22:9A:2A:24:86:07:BD:01:A7:AC:04
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196B56840D97A688B8241B10DFC6574F316
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hxKmj5RqtnI0IpoqJIYHvQGnrAQ.roa
Signing time: Fri 09 May 2025 14:17:10 +0000
ROA not before: Fri 09 May 2025 14:17:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.57.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/22 maxlen: 24
31.56.224.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.118.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.123.0/24 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.171.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.178.0/24 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.196.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.230.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.238.0/24 maxlen: 24
31.57.249.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.50.0/24 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.86.0/24 maxlen: 24
31.58.141.0/24 maxlen: 24
31.58.144.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.120.0/24 maxlen: 24
31.59.121.0/24 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 10 May 2025 11:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:68:40:d9:7a:68:8b:82:41:b1:0d:fc:65:74:f3:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 9 14:17:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8712a68f946ab67234229a2a248607bd01a7ac04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2c:42:49:4f:c7:eb:3e:1f:ba:91:ab:a5:53:
88:02:db:34:85:f6:24:bb:e8:60:85:3a:49:f0:7c:
22:ef:cf:a8:9a:9c:a5:a6:dd:c6:81:2f:a8:b8:c6:
c9:f0:d4:6d:2a:ba:2e:01:5c:4a:97:e8:0f:8d:dd:
64:9a:e0:3f:6e:8f:ab:ef:ee:c3:d4:2c:74:6e:61:
50:71:a8:71:52:71:a1:6c:db:94:4d:a7:85:17:1e:
f0:b3:31:88:c5:ad:3f:da:53:69:a9:66:46:c7:5f:
0d:84:6b:17:f2:c2:41:8c:cf:3d:d7:13:75:26:01:
19:e2:64:cc:c2:c3:70:80:ca:a3:38:fa:5d:fe:1d:
55:4d:95:45:07:47:59:e9:b9:2b:05:46:c7:ef:fe:
68:18:eb:99:d7:1d:b2:c0:52:ce:95:ac:70:81:59:
b6:e1:c2:10:b3:2b:cb:17:44:d4:c3:a2:ce:70:ad:
80:1c:6b:9c:03:bc:5d:ad:de:7f:c0:0a:12:58:8f:
2f:3b:7e:fb:23:31:4e:42:3f:92:2b:70:a5:7b:d6:
24:af:af:b3:1c:e3:d1:56:a2:62:15:53:fb:96:74:
16:19:4d:5f:64:01:68:02:a7:eb:7f:99:e2:52:0a:
e9:e6:67:fb:a1:4c:27:05:98:bc:65:05:8a:19:16:
29:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:12:A6:8F:94:6A:B6:72:34:22:9A:2A:24:86:07:BD:01:A7:AC:04
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hxKmj5RqtnI0IpoqJIYHvQGnrAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.57.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0/22
31.56.200.0/22
31.56.208.0/21
31.56.220.0-31.56.231.255
31.56.236.0/22
31.57.36.0/23
31.57.104.0/21
31.57.118.0/24
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.188.255
31.57.192.0-31.57.196.255
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.230.0/24
31.57.232.0/22
31.57.238.0/24
31.57.249.0-31.57.255.255
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.84.0/22
31.58.141.0/24
31.58.144.0/24
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.151.255
31.59.160.0/20
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:1d:7c:62:b1:a4:e8:05:22:48:e6:f2:5e:30:18:bc:a1:fe:
87:bb:14:94:11:88:52:cb:62:f1:e0:50:77:22:6e:22:8b:9e:
01:12:7f:58:98:70:91:96:ec:b7:82:30:4f:f7:4a:e8:20:03:
d7:a5:20:1f:b5:af:0c:3c:1c:75:ab:5f:de:84:fd:17:45:db:
5d:df:f2:2e:a4:a1:44:84:dc:5a:89:29:c0:21:5a:25:2e:45:
1c:44:5d:d2:65:57:ea:7c:86:b2:c1:87:2d:ca:e3:1f:c7:c1:
de:53:85:b4:22:a6:95:49:e2:93:b4:93:5e:ac:1b:a1:de:04:
5e:c5:93:12:1a:65:96:49:5a:b2:6d:85:7b:ba:c3:1a:78:aa:
46:0a:88:45:db:c4:3f:df:2a:3f:e0:09:05:28:df:00:3f:11:
be:aa:8e:0b:8a:93:42:63:bb:94:d9:61:1b:ae:76:ba:fb:25:
24:76:2d:08:c9:b7:0f:2c:07:5d:d0:a1:6b:f0:be:be:b3:44:
30:74:7b:01:a7:28:ef:a3:d6:da:5a:3e:34:b1:44:da:b8:56:
c1:f7:2b:81:0f:dd:37:9e:60:17:0f:f2:4b:57:c8:9e:e0:b3:
5f:a8:fa:a1:52:f9:42:ad:63:44:53:03:89:8f:b7:34:b2:45:
a7:94:7a:38
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgISAZa1aEDZemiLgkGxDfxldPMWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNTA5MTQxNzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzEyYTY4Zjk0NmFiNjcyMzQyMjlhMmEyNDg2MDdiZDAxYTdhYzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCxCSU/H6z4fupGrpVOIAts0hfYk
u+hghTpJ8Hwi78+ompylpt3GgS+ouMbJ8NRtKrouAVxKl+gPjd1kmuA/bo+r7+7D
1Cx0bmFQcahxUnGhbNuUTaeFFx7wszGIxa0/2lNpqWZGx18NhGsX8sJBjM891xN1
JgEZ4mTMwsNwgMqjOPpd/h1VTZVFB0dZ6bkrBUbH7/5oGOuZ1x2ywFLOlaxwgVm2
4cIQsyvLF0TUw6LOcK2AHGucA7xdrd5/wAoSWI8vO377IzFOQj+SK3Cle9Ykr6+z
HOPRVqJiFVP7lnQWGU1fZAFoAqfrf5niUgrp5mf7oUwnBZi8ZQWKGRYp/QIDAQAB
o4IDYDCCA1wwHQYDVR0OBBYEFIcSpo+UarZyNCKaKiSGB70Bp6wEMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvaHhLbWo1UnF0bkkwSXBvcUpJWUh2UUduckFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBdAYIKwYBBQUHAQcBAf8EggFjMIIBXzCCAVsEAgABMIIB
UwMEAR84BAMEAB84OQMEAR84WgMEAx84aAMEAR84cjAMAwQBHzh2AwQCHzh4AwQC
Hzi0AwQCHzi8AwQCHzjIAwQDHzjQMAwDBAIfONwDBAMfOOADBAIfOOwDBAEfOSQD
BAMfOWgDBAAfOXYDBAMfOXgDBAEfOYQDBAMfOYgDBAEfOZIDBAIfOagwDAMEBB85
sAMEAB85vDAMAwQGHznAAwQAHznEAwQBHznIMAwDBAQfOdADBAIfOeADBAAfOeYD
BAIfOegDBAAfOe4wCwMEAB85+QMDAR84AwQBHzoiAwQAHzooAwQBHzoyAwQCHzpE
AwQCHzpUAwQAHzqNAwQAHzqQAwQCHzqYAwQCHzqsMAwDBAIfOtwDBAIfOuADBAIf
O0wDBAIfO2ADBAIfO3ADBAIfO3gwDAMEAx87iAMEAx87kAMEBB87oAMEAh874AME
Ah876DANBgkqhkiG9w0BAQsFAAOCAQEAOx18YrGk6AUiSObyXjAYvKH+h7sUlBGI
Usti8eBQdyJuIoueARJ/WJhwkZbst4IwT/dK6CAD16UgH7WvDDwcdatf3oT9F0Xb
Xd/yLqShRITcWokpwCFaJS5FHERd0mVX6nyGssGHLcrjH8fB3lOFtCKmlUnik7ST
Xqwbod4EXsWTEhpllklasm2Fe7rDGniqRgqIRdvEP98qP+AJBSjfAD8RvqqOC4qT
QmO7lNlhG652uvslJHYtCMm3DywHXdCha/C+vrNEMHR7Aaco76PW2lo+NLFE2rhW
wfcrgQ/dN55gFw/yS1fInuCzX6j6oVL5Qq1jRFMDiY+3NLJFp5R6OA==
-----END CERTIFICATE-----
Generated at Thu Jun 5 04:37:54 2025 by rpki-client