Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sj6oK4sL-ZbeXrDt93tmcpmQdyw.roa
File: sj6oK4sL-ZbeXrDt93tmcpmQdyw.roa (raw, json)
Hash identifier: 6XcG4WIELuQoeRHdpw/mjmOs/JL5gmSF/y3tnw2Pkfc=
Subject key identifier: B2:3E:A8:2B:8B:0B:F9:96:DE:5E:B0:ED:F7:7B:66:72:99:90:77:2C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195A54A6130FD48B4E36396A2CC266B9121
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sj6oK4sL-ZbeXrDt93tmcpmQdyw.roa
Signing time: Mon 17 Mar 2025 18:07:49 +0000
ROA not before: Mon 17 Mar 2025 18:07:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.42.0/24 maxlen: 24
31.56.43.0/24 maxlen: 24
31.56.47.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.103.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.113.0/24 maxlen: 24
31.57.114.0/24 maxlen: 24
31.57.115.0/24 maxlen: 24
31.57.116.0/24 maxlen: 24
31.57.117.0/24 maxlen: 24
31.57.118.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.200.0/24 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.212.0/24 maxlen: 24
31.57.213.0/24 maxlen: 24
31.57.214.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.57.254.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.51.0/24 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.76.0/24 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Mar 2025 05:50:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a5:4a:61:30:fd:48:b4:e3:63:96:a2:cc:26:6b:91:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 17 18:07:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b23ea82b8b0bf996de5eb0edf77b66729990772c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:22:35:57:14:52:d1:b8:58:64:5f:c0:14:65:
8e:4a:c1:49:13:12:78:8d:d0:fe:d3:c3:f5:d2:8c:
2e:c9:e1:7d:9e:0a:e8:7f:1f:38:50:ff:f1:cc:24:
bc:6d:56:57:c0:cd:cf:cb:17:3b:14:af:7e:b6:6c:
0d:44:35:7a:5e:7b:59:31:a5:82:de:70:29:6f:88:
b7:35:db:0f:08:b4:eb:bc:89:27:69:fc:3f:0a:dc:
e0:0d:ee:75:cd:56:9a:ea:f3:69:f5:82:a5:17:a9:
af:98:4a:79:26:8a:8e:6a:13:02:8f:d8:ed:02:60:
44:16:98:f6:e5:ad:2e:3a:9c:a6:9a:6a:ac:7f:5d:
37:96:ff:cb:7f:cd:f1:9c:9e:1a:02:0f:40:a7:5d:
b5:d6:90:18:4e:2c:b7:82:b2:53:c3:9e:f4:fd:12:
1a:2d:14:2a:de:ba:3b:26:3c:71:07:6a:50:f3:38:
4f:63:65:e9:aa:ce:a6:07:69:e4:b6:7a:29:82:49:
55:72:35:8a:13:16:ec:53:63:83:ab:34:4b:fa:1c:
80:f8:78:5d:f3:81:22:be:77:2c:70:86:37:30:0f:
6d:49:2b:11:d4:2c:f7:63:79:80:35:31:68:a9:fc:
42:2e:99:8a:3f:b8:81:2c:8b:3c:60:de:34:94:7e:
fb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:3E:A8:2B:8B:0B:F9:96:DE:5E:B0:ED:F7:7B:66:72:99:90:77:2C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sj6oK4sL-ZbeXrDt93tmcpmQdyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.47.0/24
31.56.57.0/24
31.56.71.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.103.0-31.57.111.255
31.57.113.0-31.57.118.255
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0/21
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.76.0/24
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.224.0/22
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
Signature Algorithm: sha256WithRSAEncryption
75:b1:eb:ad:37:c0:74:ad:b2:08:6c:34:8c:f7:07:2e:38:e9:
69:15:ca:a4:9f:3f:a3:86:87:18:3d:89:e0:5a:3a:9a:53:7f:
3b:42:76:41:07:e6:0c:64:f6:62:2e:a9:32:cf:9f:9e:ef:e9:
e0:aa:90:a5:a1:64:d7:2b:1d:01:25:d9:d8:09:9d:22:6f:02:
fa:ef:32:0c:56:cf:a7:06:2d:e5:a3:38:59:0e:3a:29:c8:37:
66:75:55:e2:59:94:3d:93:b0:b5:4a:f0:04:eb:fd:4e:4d:80:
81:d7:33:00:5a:35:4b:9b:78:ad:ed:a9:9b:9b:83:a8:20:ea:
97:d0:ea:9a:af:ec:a4:9c:b8:be:10:29:ac:fe:9b:c4:3d:bf:
11:da:5d:82:11:82:fc:0b:65:6a:8c:4a:b2:4d:dc:57:5a:f0:
03:c8:e5:fa:ea:eb:bf:7b:ed:48:5d:a0:f2:cb:88:6c:a7:f7:
84:6e:4a:a1:a1:cd:d6:f7:d9:ef:3f:0a:53:89:79:0f:22:3c:
34:12:b5:64:0b:1a:cc:22:9a:d3:7d:1b:4c:96:5d:55:23:91:
ab:a7:db:75:f6:bb:15:d6:78:51:e4:23:0d:a6:16:04:4e:f1:
43:95:cc:21:ef:34:4b:83:52:86:b5:82:42:e0:0f:4d:06:08:
64:9a:3e:7a
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgISAZWlSmEw/Ui042OWoswma5EhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMzE3MTgwNzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjNlYTgyYjhiMGJmOTk2ZGU1ZWIwZWRmNzdiNjY3Mjk5OTA3NzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziI1VxRS0bhYZF/AFGWOSsFJExJ4
jdD+08P10owuyeF9ngrofx84UP/xzCS8bVZXwM3Pyxc7FK9+tmwNRDV6XntZMaWC
3nApb4i3NdsPCLTrvIknafw/CtzgDe51zVaa6vNp9YKlF6mvmEp5JoqOahMCj9jt
AmBEFpj25a0uOpymmmqsf103lv/Lf83xnJ4aAg9Ap1211pAYTiy3grJTw570/RIa
LRQq3ro7JjxxB2pQ8zhPY2Xpqs6mB2nktnopgklVcjWKExbsU2ODqzRL+hyA+Hhd
84EivncscIY3MA9tSSsR1Cz3Y3mANTFoqfxCLpmKP7iBLIs8YN40lH773wIDAQAB
o4IDAzCCAv8wHQYDVR0OBBYEFLI+qCuLC/mW3l6w7fd7ZnKZkHcsMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvc2o2b0s0c0wtWmJlWHJEdDkzdG1jcG1RZHl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBFwYIKwYBBQUHAQcBAf8EggEGMIIBAjCB/wQCAAEwgfgD
BAEfOAQDBAAfOBgDBAEfOCoDBAAfOC8DBAAfODkDBAAfOEcDBAEfOFoDBAMfOGgD
BAEfOHIwDAMEAR84dgMEAh84eAMEAh84yDAMAwQAHzlnAwQEHzlgMAwDBAAfOXED
BAAfOXYDBAEfOYQDBAMfOYgDBAEfOZIDBAIfOagDBAMfObADBAIfOcADBAEfOcgw
DAMEBB850AMEAh854AMEAh856AMEAh85/AMEAR86IgMEAB86KAMEAR86MgMEAh86
RAMEAB86TAMEAh86VAMEAh86mAMEAh86rAMEAh864AMEAh87TAMEAh87YAMEAh87
cAMEAh87eDANBgkqhkiG9w0BAQsFAAOCAQEAdbHrrTfAdK2yCGw0jPcHLjjpaRXK
pJ8/o4aHGD2J4Fo6mlN/O0J2QQfmDGT2Yi6pMs+fnu/p4KqQpaFk1ysdASXZ2Amd
Im8C+u8yDFbPpwYt5aM4WQ46Kcg3ZnVV4lmUPZOwtUrwBOv9Tk2AgdczAFo1S5t4
re2pm5uDqCDql9Dqmq/spJy4vhAprP6bxD2/EdpdghGC/AtlaoxKsk3cV1rwA8jl
+urrv3vtSF2g8suIbKf3hG5KoaHN1vfZ7z8KU4l5DyI8NBK1ZAsazCKa030bTJZd
VSORq6fbdfa7FdZ4UeQjDaYWBE7xQ5XMIe80S4NShrWCQuAPTQYIZJo+eg==
-----END CERTIFICATE-----
Generated at Fri Apr 18 09:59:28 2025 by rpki-client