Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uRzt9aJYXdo2n1XYehi9d5fZOb8.roa
File: uRzt9aJYXdo2n1XYehi9d5fZOb8.roa (raw, json)
Hash identifier: dw2WBSVCKQmS1oQepl685FL8Llm4auOecNLqz+B7ZgA=
Subject key identifier: B9:1C:ED:F5:A2:58:5D:DA:36:9F:55:D8:7A:18:BD:77:97:D9:39:BF
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196E82B3F71983D49FEDDCC35688554EDB4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uRzt9aJYXdo2n1XYehi9d5fZOb8.roa
Signing time: Mon 19 May 2025 10:51:10 +0000
ROA not before: Mon 19 May 2025 10:51:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.57.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/22 maxlen: 24
31.56.224.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.46.0/23 maxlen: 24
31.57.92.0/22 maxlen: 22
31.57.98.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.118.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.171.0/24 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.86.0/24 maxlen: 24
31.58.144.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.120.0/24 maxlen: 24
31.59.121.0/24 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 19 May 2025 19:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e8:2b:3f:71:98:3d:49:fe:dd:cc:35:68:85:54:ed:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 19 10:51:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b91cedf5a2585dda369f55d87a18bd7797d939bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:34:22:75:6c:8e:82:b3:5f:24:b0:f4:a0:24:
a9:1c:ef:30:e3:98:7e:ee:37:97:60:a5:1a:2e:06:
70:04:b5:43:d4:d2:b8:be:3a:64:60:7f:55:c2:9d:
27:fe:8e:ac:08:25:c5:9c:f6:80:67:6e:2a:a7:bd:
a5:ee:a4:32:92:8a:eb:44:17:2a:bc:03:c0:e8:62:
a4:6e:b8:11:36:a6:0f:35:b2:b9:95:28:af:2b:08:
d6:25:8c:8a:95:86:d2:ba:48:5d:46:da:ca:30:f6:
ba:e8:46:59:d8:da:b1:a6:0f:7e:47:34:54:12:6e:
d5:62:91:38:ce:e0:84:1e:01:7b:12:c5:62:b3:a6:
b8:e1:a1:0b:dd:b6:94:47:e3:e6:5d:93:89:68:0a:
ff:df:f9:eb:cd:fc:93:91:ea:72:6e:76:e8:ba:00:
39:31:2f:d8:9b:cb:de:c2:60:ec:d3:72:60:a6:e8:
99:02:f4:85:3c:9c:86:9c:0c:4c:a4:96:bb:8f:62:
68:be:39:93:74:56:fe:3b:1b:f5:86:83:b8:a6:3e:
e8:a8:94:05:de:c9:18:d7:26:49:8f:5a:1f:4b:4f:
9d:42:54:20:0f:72:c2:87:b7:04:93:e2:f4:a6:14:
60:30:1b:a6:28:17:d4:72:39:4b:c8:ee:b8:35:db:
b8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1C:ED:F5:A2:58:5D:DA:36:9F:55:D8:7A:18:BD:77:97:D9:39:BF
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uRzt9aJYXdo2n1XYehi9d5fZOb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.57.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0/22
31.56.200.0/22
31.56.208.0/21
31.56.220.0-31.56.231.255
31.56.236.0/22
31.57.36.0/22
31.57.46.0/23
31.57.92.0/22
31.57.98.0/24
31.57.104.0/21
31.57.118.0/24
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.68.0/22
31.58.84.0/22
31.58.144.0/24
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.41.0/24
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.151.255
31.59.160.0/20
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:bf:d4:c1:ac:5c:a4:9a:ed:4d:64:46:93:93:2e:dc:20:fe:
d8:91:40:1b:40:38:35:e4:72:92:aa:40:c2:59:c2:b4:28:7a:
5a:e4:19:10:07:9e:f7:89:52:81:9d:59:39:b8:ee:7b:94:57:
34:83:13:e2:0f:7f:8f:d6:10:1f:9c:a4:d3:5d:55:1a:85:8c:
d3:7d:18:29:89:1e:d0:68:f9:8c:39:eb:6f:e2:02:4c:76:bf:
23:e4:e2:11:b3:da:2d:43:9f:15:d4:09:3b:3d:fa:a9:6b:9d:
05:d3:48:61:c7:2b:0d:b1:76:13:a5:46:1e:c5:75:44:ad:1c:
bb:59:e5:7e:25:3c:9a:fa:b5:b5:ee:d5:80:e1:6f:b5:44:fc:
58:2d:5a:47:e7:f2:59:a4:d9:44:4c:b4:8c:07:15:59:a4:6e:
77:e3:76:43:1f:b0:e3:e0:a7:3f:52:30:78:98:86:d7:0c:66:
0b:16:e9:c1:44:07:1f:2a:64:5f:49:05:b6:12:6e:18:21:4d:
f4:36:6d:5b:03:b7:8f:12:09:55:36:55:ba:47:bc:de:c3:39:
bd:2f:98:3a:84:41:f8:0a:1a:da:26:98:4d:e5:14:c5:2f:d7:
22:12:ab:8f:21:0b:c4:72:96:fd:32:e3:11:40:9a:fa:69:d6:
4b:99:c1:42
-----BEGIN CERTIFICATE-----
MIIGTDCCBTSgAwIBAgISAZboKz9xmD1J/t3MNWiFVO20MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNTE5MTA1MTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTFjZWRmNWEyNTg1ZGRhMzY5ZjU1ZDg3YTE4YmQ3Nzk3ZDkzOWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDQidWyOgrNfJLD0oCSpHO8w45h+
7jeXYKUaLgZwBLVD1NK4vjpkYH9Vwp0n/o6sCCXFnPaAZ24qp72l7qQykorrRBcq
vAPA6GKkbrgRNqYPNbK5lSivKwjWJYyKlYbSukhdRtrKMPa66EZZ2Nqxpg9+RzRU
Em7VYpE4zuCEHgF7EsVis6a44aEL3baUR+PmXZOJaAr/3/nrzfyTkepybnbougA5
MS/Ym8vewmDs03JgpuiZAvSFPJyGnAxMpJa7j2JovjmTdFb+Oxv1hoO4pj7oqJQF
3skY1yZJj1ofS0+dQlQgD3LCh7cEk+L0phRgMBumKBfUcjlLyO64Ndu4vQIDAQAB
o4IDWDCCA1QwHQYDVR0OBBYEFLkc7fWiWF3aNp9V2HoYvXeX2Tm/MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvdVJ6dDlhSllYZG8ybjFYWWVoaTlkNWZaT2I4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBbAYIKwYBBQUHAQcBAf8EggFbMIIBVzCCAVMEAgABMIIB
SwMEAR84BAMEAB84OQMEAR84WgMEAx84aAMEAR84cjAMAwQBHzh2AwQCHzh4AwQC
Hzi0AwQCHzi8AwQCHzjIAwQDHzjQMAwDBAIfONwDBAMfOOADBAIfOOwDBAIfOSQD
BAEfOS4DBAIfOVwDBAAfOWIDBAMfOWgDBAAfOXYDBAMfOXgDBAEfOYQDBAMfOYgD
BAEfOZIDBAIfOagwDAMEBB85sAMEAh85uAMEAh85wAMEAR85yDAMAwQEHznQAwQC
HzngAwQCHznoMAsDBAEfOfoDAwEfOAMEAR86IgMEAR86MgMEAh86RAMEAh86VAME
AB86kAMEAh86mAMEAh86rDAMAwQCHzrcAwQCHzrgAwQAHzspAwQCHztMAwQCHztg
AwQCHztwAwQCHzt4MAwDBAMfO4gDBAMfO5ADBAQfO6ADBAIfO+ADBAIfO+gwDQYJ
KoZIhvcNAQELBQADggEBADq/1MGsXKSa7U1kRpOTLtwg/tiRQBtAODXkcpKqQMJZ
wrQoelrkGRAHnveJUoGdWTm47nuUVzSDE+IPf4/WEB+cpNNdVRqFjNN9GCmJHtBo
+Yw562/iAkx2vyPk4hGz2i1DnxXUCTs9+qlrnQXTSGHHKw2xdhOlRh7FdUStHLtZ
5X4lPJr6tbXu1YDhb7VE/FgtWkfn8lmk2URMtIwHFVmkbnfjdkMfsOPgpz9SMHiY
htcMZgsW6cFEBx8qZF9JBbYSbhghTfQ2bVsDt48SCVU2VbpHvN7DOb0vmDqEQfgK
GtommE3lFMUv1yISq48hC8Rylv0y4xFAmvpp1kuZwUI=
-----END CERTIFICATE-----
Generated at Thu Jun 5 04:24:45 2025 by rpki-client