Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1xNKdXZ9zZYbZf-61_SrPCgfrzs.roa
File: 1xNKdXZ9zZYbZf-61_SrPCgfrzs.roa (raw, json)
Hash identifier: 5G7S3y2mg4XeFREYtO462T54YaeMF34EwqcE8sakY7M=
Subject key identifier: D7:13:4A:75:76:7D:CD:96:1B:65:FF:BA:D7:F4:AB:3C:28:1F:AF:3B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019647C6C3B3E2CB697A5B77E73C6CCD67E7
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1xNKdXZ9zZYbZf-61_SrPCgfrzs.roa
Signing time: Fri 18 Apr 2025 07:22:10 +0000
ROA not before: Fri 18 Apr 2025 07:22:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.23.0/24 maxlen: 24
31.56.24.0/24 maxlen: 24
31.56.32.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.62.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.200.0/24 maxlen: 24
31.56.202.0/24 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.103.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.113.0/24 maxlen: 24
31.57.118.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.138.0/24 maxlen: 24
31.57.143.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.168.0/23 maxlen: 23
31.57.176.0/21 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.196.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.208.0/22 maxlen: 22
31.57.215.0/24 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.221.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.230.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.238.0/24 maxlen: 24
31.57.249.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.50.0/24 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.76.0/24 maxlen: 24
31.58.77.0/24 maxlen: 24
31.58.78.0/24 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.92.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 18 Apr 2025 16:17:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:c6:c3:b3:e2:cb:69:7a:5b:77:e7:3c:6c:cd:67:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 18 07:22:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7134a75767dcd961b65ffbad7f4ab3c281faf3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c2:fd:22:3b:2c:3f:6a:25:a0:e3:f7:69:ad:
4f:e4:32:ef:0d:cc:15:91:54:f7:d4:03:3d:8c:b4:
b7:35:fb:77:ca:f3:45:33:3e:47:6b:7f:b9:18:29:
ec:d5:9e:ff:eb:4b:e5:5f:36:f3:32:4e:64:2e:93:
ec:53:49:fa:56:cb:29:c9:f8:58:d9:2e:a5:5f:3b:
a7:0e:ef:6a:24:77:0d:a1:92:5c:76:b2:dd:06:a5:
b1:28:f4:b0:8e:b8:b0:de:7c:5a:12:98:dc:d3:37:
40:d1:0b:b3:97:b9:5e:0c:1a:20:83:7c:1b:cf:56:
e5:39:87:5d:8f:34:1c:1c:5b:ee:da:e8:a0:c2:c4:
a0:8b:57:54:14:e6:68:25:49:cc:bb:a4:d1:2f:39:
8a:27:07:23:f5:24:47:31:eb:27:f5:5d:1b:14:e0:
1d:f0:5a:04:22:24:6c:7f:7f:47:c8:f2:e6:22:aa:
03:f9:a8:38:d2:b5:83:b4:00:1a:e4:e5:e7:ef:3e:
0f:89:1d:92:4b:27:cb:36:07:05:ff:a1:77:52:17:
a7:0b:01:f7:f9:09:a2:33:e7:b3:db:ab:a8:62:46:
37:30:bd:77:30:2c:1e:4c:84:37:52:52:9b:e7:49:
e1:15:16:6b:d1:09:98:37:59:0d:8d:9f:d6:b2:56:
18:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:13:4A:75:76:7D:CD:96:1B:65:FF:BA:D7:F4:AB:3C:28:1F:AF:3B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1xNKdXZ9zZYbZf-61_SrPCgfrzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.23.0-31.56.24.255
31.56.32.0/24
31.56.57.0/24
31.56.62.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.36.0/23
31.57.103.0-31.57.111.255
31.57.113.0/24
31.57.118.0/24
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.188.255
31.57.192.0-31.57.196.255
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.230.0/24
31.57.232.0/22
31.57.238.0/24
31.57.249.0-31.57.255.255
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.76.0-31.58.78.255
31.58.84.0/22
31.58.92.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.175.255
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:63:4a:56:44:d0:20:e2:54:c2:3d:48:65:87:7b:55:63:74:
b8:26:64:10:c3:69:bc:5a:75:6c:97:d3:4c:fa:2e:0c:90:8f:
51:c4:86:ff:b6:7b:1a:46:a7:4b:6e:61:a0:73:26:70:53:4c:
6c:75:6f:28:b2:26:fc:b2:18:f8:92:80:5f:25:8d:f5:66:d2:
71:28:5c:98:cd:f6:47:3e:eb:99:9d:32:65:db:6f:b5:bd:a9:
54:04:88:fa:0c:50:c0:88:7a:c2:da:9a:ae:20:65:27:a4:8c:
e2:5e:ef:d1:9f:da:f8:cf:e7:23:ef:ae:06:63:90:af:ae:29:
c3:09:07:4e:08:3e:0a:8b:2a:10:3b:b4:f2:30:57:cb:e3:f8:
d0:b4:bd:63:53:87:2c:e4:00:31:bb:06:b4:84:0e:22:6a:a9:
75:28:a2:9f:f5:94:d1:41:7d:c8:11:b9:e2:e0:e2:e3:99:55:
77:ee:00:50:ea:dc:ab:57:55:75:27:58:ba:80:5a:91:31:4b:
71:1d:27:3d:71:75:d7:a1:ce:86:27:38:42:85:50:b4:53:3f:
13:40:f8:f4:14:af:c4:27:5f:dd:61:03:30:d6:51:82:a3:73:
18:9f:f9:d7:13:0c:86:bf:74:40:02:ba:16:11:db:28:4b:67:
91:f9:9c:9b
-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgISAZZHxsOz4stpelt35zxszWfnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNDE4MDcyMjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzEzNGE3NTc2N2RjZDk2MWI2NWZmYmFkN2Y0YWIzYzI4MWZhZjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8L9IjssP2oloOP3aa1P5DLvDcwV
kVT31AM9jLS3Nft3yvNFMz5Ha3+5GCns1Z7/60vlXzbzMk5kLpPsU0n6VsspyfhY
2S6lXzunDu9qJHcNoZJcdrLdBqWxKPSwjriw3nxaEpjc0zdA0Quzl7leDBogg3wb
z1blOYddjzQcHFvu2uigwsSgi1dUFOZoJUnMu6TRLzmKJwcj9SRHMesn9V0bFOAd
8FoEIiRsf39HyPLmIqoD+ag40rWDtAAa5OXn7z4PiR2SSyfLNgcF/6F3UhenCwH3
+QmiM+ez26uoYkY3ML13MCweTIQ3UlKb50nhFRZr0QmYN1kNjZ/WslYY0wIDAQAB
o4IDZDCCA2AwHQYDVR0OBBYEFNcTSnV2fc2WG2X/utf0qzwoH687MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvMXhOS2RYWjl6WlliWmYtNjFfU3JQQ2dmcnpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBeAYIKwYBBQUHAQcBAf8EggFnMIIBYzCCAV8EAgABMIIB
VwMEAR84BDAMAwQAHzgXAwQAHzgYAwQAHzggAwQAHzg5AwQAHzg+AwQBHzhaAwQD
HzhoAwQBHzhyMAwDBAEfOHYDBAIfOHgDBAIfOMgDBAEfOSQwDAMEAB85ZwMEBB85
YAMEAB85cQMEAB85dgMEAx85eAMEAR85hAMEAx85iAMEAR85kgMEAh85qDAMAwQE
HzmwAwQAHzm8MAwDBAYfOcADBAAfOcQDBAEfOcgwDAMEBB850AMEAh854AMEAB85
5gMEAh856AMEAB857jALAwQAHzn5AwMBHzgDBAEfOiIDBAAfOigDBAEfOjIDBAIf
OkQwDAMEAh86TAMEAB86TgMEAh86VAMEAh86XAMEAh86mAMEAh86rDAMAwQCHzrc
AwQCHzrgAwQCHztMAwQCHztgAwQCHztwAwQCHzt4MAwDBAMfO4gDBAQfO6ADBAIf
O+ADBAIfO+gwDQYJKoZIhvcNAQELBQADggEBAJ1jSlZE0CDiVMI9SGWHe1VjdLgm
ZBDDabxadWyX00z6LgyQj1HEhv+2expGp0tuYaBzJnBTTGx1byiyJvyyGPiSgF8l
jfVm0nEoXJjN9kc+65mdMmXbb7W9qVQEiPoMUMCIesLamq4gZSekjOJe79Gf2vjP
5yPvrgZjkK+uKcMJB04IPgqLKhA7tPIwV8vj+NC0vWNThyzkADG7BrSEDiJqqXUo
op/1lNFBfcgRueLg4uOZVXfuAFDq3KtXVXUnWLqAWpExS3EdJz1xddehzoYnOEKF
ULRTPxNA+PQUr8QnX91hAzDWUYKjcxif+dcTDIa/dEACuhYR2yhLZ5H5nJs=
-----END CERTIFICATE-----
Generated at Mon Apr 28 07:10:24 2025 by rpki-client