Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tQrCzbu1mq4Gl7NuPXpDnRvMmDY.roa
File: tQrCzbu1mq4Gl7NuPXpDnRvMmDY.roa (raw, json)
Hash identifier: Lv3FRuP0NbamnpKx8eop0h2ycGUMXN1KjviGWTaDcnU=
Subject key identifier: B5:0A:C2:CD:BB:B5:9A:AE:06:97:B3:6E:3D:7A:43:9D:1B:CC:98:36
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197271D36577B95F2F377E08A6D46AC56C0
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tQrCzbu1mq4Gl7NuPXpDnRvMmDY.roa
Signing time: Sat 31 May 2025 16:11:55 +0000
ROA not before: Sat 31 May 2025 16:11:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.57.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.146.0/24 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.196.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.56.238.0/24 maxlen: 24
31.57.12.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.60.0/22 maxlen: 24
31.57.92.0/22 maxlen: 22
31.57.98.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.110.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.139.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.244.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.212.0/22 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 01 Jun 2025 07:40:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:27:1d:36:57:7b:95:f2:f3:77:e0:8a:6d:46:ac:56:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 31 16:11:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b50ac2cdbbb59aae0697b36e3d7a439d1bcc9836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c1:71:12:bb:e2:3f:4b:56:be:e2:0e:24:67:
4b:2b:e9:f7:a4:f0:d5:ef:11:d7:7b:10:e3:92:1b:
37:b6:11:7e:0f:6b:70:b0:60:98:85:e9:a3:1d:09:
57:eb:25:f2:87:2a:63:d8:6d:37:94:37:e4:c3:1b:
b5:a8:b4:98:1a:28:20:06:6c:be:5f:7f:54:6d:05:
cf:b6:67:c9:9a:a7:b2:a2:34:0e:78:b5:2e:b8:da:
e0:a0:b3:83:79:b9:80:9b:73:39:34:9b:1c:87:df:
74:c5:f4:5d:b8:30:66:0a:e4:32:55:83:ae:39:29:
3f:6f:00:b5:cc:ff:20:a0:58:00:1d:a5:c6:bb:3d:
3c:17:dd:33:ed:3d:cb:01:ee:31:2d:49:31:69:9c:
26:a5:61:85:98:dd:62:14:3b:d4:b9:74:20:2c:61:
51:56:95:08:4d:85:6d:99:41:4d:02:86:12:e8:0b:
7f:06:02:12:87:0e:3c:e7:71:72:66:44:50:a0:94:
5b:fd:02:50:40:f2:7f:55:1e:0c:66:b0:04:fd:d3:
62:1f:c9:4a:97:55:f9:aa:b9:e4:35:70:30:6e:a7:
69:46:dc:f5:a9:b7:78:fd:a7:e6:f1:52:b2:7f:e4:
a3:a2:af:83:6b:1e:09:f9:8c:1a:b4:46:e9:84:ad:
07:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:0A:C2:CD:BB:B5:9A:AE:06:97:B3:6E:3D:7A:43:9D:1B:CC:98:36
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tQrCzbu1mq4Gl7NuPXpDnRvMmDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.57.0/24
31.56.77.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.146.0/24
31.56.180.0/22
31.56.188.0/22
31.56.196.0-31.56.203.255
31.56.208.0/21
31.56.228.0/22
31.56.236.0/22
31.57.12.0/23
31.57.36.0/22
31.57.60.0/22
31.57.92.0/22
31.57.98.0/24
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.244.0/24
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.212.0/22
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
91:71:8e:d3:3c:70:71:62:2b:eb:a8:95:c0:fd:64:7a:eb:61:
8e:e2:31:7f:32:3f:66:cb:b6:1b:67:cb:8f:b6:f7:d4:76:82:
bd:08:cc:ff:b9:7d:23:fa:cc:ad:48:89:89:ed:6b:cf:2c:3d:
e2:43:81:08:1f:d8:64:44:71:14:19:d6:f2:70:92:d3:ed:09:
c9:58:2b:db:5c:7b:6a:95:ac:cc:46:06:93:34:cd:bc:e3:1a:
7f:28:2d:eb:56:e3:af:76:2b:51:31:41:72:c4:26:64:c9:04:
5d:77:bf:90:0c:9f:7b:67:97:bb:bd:42:41:ea:70:6b:8c:29:
1c:cc:74:d8:d4:ec:20:9a:b5:e9:fa:ff:d4:5c:3d:7d:f0:82:
16:f1:8e:0c:83:70:ea:15:3b:cc:c2:42:df:4f:b5:e8:91:c8:
b4:04:72:e5:03:0f:21:e2:ff:af:de:c6:78:2b:41:af:a9:74:
f6:20:bd:dd:41:4a:dd:f4:f7:a9:e4:f3:22:d9:73:a1:bc:a0:
9a:ae:83:5d:18:78:c7:a7:86:4e:e0:59:f3:ed:21:ed:6b:ca:
b4:39:ae:09:c5:af:30:25:e1:35:9f:2e:13:cb:04:ea:9f:b3:
25:55:6c:c1:88:11:d3:31:80:72:c8:8e:b4:e8:59:84:39:58:
12:28:2c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 04:35:03 2025 by rpki-client