Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/p2sB4ZgBs6NlkIHBKjsNVPxgG7M.roa
File: p2sB4ZgBs6NlkIHBKjsNVPxgG7M.roa (raw, json)
Hash identifier: WOmn7Xd2huFwlth7kAO+1TewjN19Uqg26av4dueDaBo=
Subject key identifier: A7:6B:01:E1:98:01:B3:A3:65:90:81:C1:2A:3B:0D:54:FC:60:1B:B3
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01972299C3C44F609F35291095E5C40EB272
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/p2sB4ZgBs6NlkIHBKjsNVPxgG7M.roa
Signing time: Fri 30 May 2025 19:09:51 +0000
ROA not before: Fri 30 May 2025 19:09:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.57.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.196.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.56.238.0/24 maxlen: 24
31.57.12.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.60.0/22 maxlen: 24
31.57.92.0/22 maxlen: 22
31.57.98.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.110.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.244.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.212.0/22 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 31 May 2025 16:10:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:22:99:c3:c4:4f:60:9f:35:29:10:95:e5:c4:0e:b2:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 30 19:09:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a76b01e19801b3a3659081c12a3b0d54fc601bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:66:b9:9a:c8:90:6b:4d:58:69:3d:6f:5c:3b:
12:74:fe:52:23:3c:31:d0:82:16:85:06:fc:2c:71:
75:ac:1a:00:6c:e3:77:a5:74:fb:98:54:08:8c:44:
a2:b8:e3:47:a5:9e:8a:c8:a9:dd:79:c8:d5:8f:bf:
38:ca:2c:a3:09:64:f9:e3:a2:b2:3f:d8:e2:eb:8b:
44:62:9b:c4:28:74:3e:7c:d7:a9:28:ea:e2:c5:86:
32:f7:32:9d:56:cd:32:13:61:db:61:a6:e7:fe:3f:
5e:ab:55:82:64:c9:c6:f4:e4:c9:5e:3f:ce:3a:82:
28:0f:3c:a3:a5:91:f7:7d:11:ef:ab:04:ce:b2:49:
23:b9:31:a2:89:23:0c:9b:1b:af:c5:53:26:61:48:
8e:a2:3d:79:8c:45:d5:41:0f:27:9e:98:6f:9f:92:
c7:cd:84:d9:fb:0b:a9:da:d6:fb:e1:c2:f9:e7:b7:
3f:d1:c8:ba:a3:4c:9c:72:66:b6:70:43:6a:73:55:
3f:b8:d1:e8:0e:05:8e:24:de:81:63:45:36:c5:91:
42:77:18:72:12:59:03:66:78:d4:e4:63:27:49:54:
7a:6c:7f:21:4a:8f:bc:e9:9d:2e:0b:35:d3:cd:86:
28:a0:eb:d4:5d:a6:7e:52:6b:81:eb:a7:9a:bb:9c:
05:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6B:01:E1:98:01:B3:A3:65:90:81:C1:2A:3B:0D:54:FC:60:1B:B3
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/p2sB4ZgBs6NlkIHBKjsNVPxgG7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.57.0/24
31.56.77.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0/22
31.56.196.0-31.56.203.255
31.56.208.0/21
31.56.228.0/22
31.56.236.0/22
31.57.12.0/23
31.57.36.0/22
31.57.60.0/22
31.57.92.0/22
31.57.98.0/24
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.244.0/24
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.212.0/22
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
60:ab:34:f5:a1:b2:c5:4d:2e:55:31:e4:5b:d8:f1:b1:49:b4:
2c:64:5a:d7:d0:17:5e:07:61:75:e6:2e:d2:38:70:89:f5:0f:
3d:e2:67:3f:7d:61:06:54:fa:66:e7:da:6a:ec:28:54:54:4c:
b6:38:f8:a0:39:28:00:6c:7d:38:53:99:70:af:a9:45:1d:0c:
8f:7b:00:85:20:f0:58:1e:be:02:60:9b:e8:10:5a:f5:1d:94:
3b:37:d7:c7:f2:ce:28:70:a8:59:b7:f5:88:92:da:40:c0:4a:
1c:8f:a8:bc:57:63:d5:89:47:36:44:8a:d1:db:4c:1d:06:ca:
5c:77:14:83:ba:c1:6f:2d:6f:6d:77:f9:7c:a2:05:3b:ef:1b:
6e:75:38:37:53:e3:13:8e:59:c1:07:64:e3:b2:c9:4f:71:39:
a9:52:a3:76:5e:2e:dd:7d:88:dc:88:4a:cc:4e:04:61:74:e2:
41:15:31:2d:31:0f:a1:a4:0b:1e:56:59:4c:ee:78:88:e3:62:
bd:be:77:f8:31:c6:4f:0d:85:60:28:87:c6:a4:2e:68:41:99:
31:1f:de:30:a6:0b:33:e3:4c:7b:b4:cb:23:6d:1e:31:e9:dc:
7a:a9:1e:9f:4f:51:a3:5a:dc:22:40:5c:7f:99:22:49:e7:60:
2c:d0:d2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 04:01:13 2025 by rpki-client