Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5MrxufjIINLgo4ANl1VDo0eQOHY.roa
File: 5MrxufjIINLgo4ANl1VDo0eQOHY.roa (raw, json)
Hash identifier: vSOEOsXU1NSKKzKKAq16/b4xw8PdcSMNkjT4HD4C4do=
Subject key identifier: E4:CA:F1:B9:F8:C8:20:D2:E0:A3:80:0D:97:55:43:A3:47:90:38:76
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01986E922BEB986131832AC11F3013FD07F3
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5MrxufjIINLgo4ANl1VDo0eQOHY.roa
Signing time: Sun 03 Aug 2025 06:15:29 +0000
ROA not before: Sun 03 Aug 2025 06:15:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.28.0/22 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.180.0/23 maxlen: 23
31.56.188.0/22 maxlen: 24
31.56.190.0/23 maxlen: 23
31.56.192.0/22 maxlen: 22
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.216.0/22 maxlen: 22
31.56.220.0/23 maxlen: 23
31.56.224.0/23 maxlen: 23
31.56.228.0/22 maxlen: 24
31.56.230.0/23 maxlen: 23
31.56.236.0/22 maxlen: 24
31.56.236.0/23 maxlen: 23
31.56.236.0/24 maxlen: 24
31.57.12.0/23 maxlen: 24
31.57.14.0/23 maxlen: 24
31.57.24.0/22 maxlen: 24
31.57.28.0/22 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.39.0/24 maxlen: 24
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.57.0/24 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.94.0/23 maxlen: 23
31.57.120.0/22 maxlen: 24
31.57.120.0/23 maxlen: 23
31.57.120.0/24 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.126.0/23 maxlen: 23
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.186.0/23 maxlen: 23
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.200.0/24 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.57.0/24 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.152.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/23 maxlen: 23
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 04 Aug 2025 15:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:6e:92:2b:eb:98:61:31:83:2a:c1:1f:30:13:fd:07:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 3 06:15:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4caf1b9f8c820d2e0a3800d975543a347903876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:06:9c:8f:a9:cb:22:24:3f:1f:47:54:da:9c:
14:cb:41:6e:f3:a1:fc:16:a3:87:72:ed:ad:5c:7b:
76:18:1d:08:d2:81:df:bb:12:3b:d1:58:3d:63:a3:
58:4b:21:6b:cb:24:a5:51:bc:0c:12:72:8d:55:0c:
8b:d6:a2:89:c1:b2:a6:5d:52:7a:5b:20:98:77:65:
ee:1a:0a:87:3c:df:40:d8:9c:ee:96:98:42:30:04:
89:de:53:b2:49:c6:ac:4d:bc:f6:3b:b8:01:42:12:
ae:0f:11:2a:b1:73:df:92:2d:89:7b:d6:e9:84:7f:
51:fa:a8:9b:78:0b:60:7f:02:ad:5c:ba:48:16:c8:
a4:b9:6c:a3:42:67:2a:92:df:0c:87:e0:96:f0:94:
c8:31:5e:17:26:9a:59:ae:95:db:d3:9f:46:9c:9a:
60:8e:c2:07:29:ad:6f:b3:87:70:27:b3:fe:c4:9b:
60:07:0d:c9:b7:8d:ef:65:58:2f:0d:71:c8:12:ae:
de:2d:ef:90:e8:0f:fb:01:db:06:b7:2e:67:a6:4c:
03:b2:7e:0b:c6:93:db:23:ff:90:df:d3:9d:30:8a:
a0:1e:24:ee:05:e5:13:9b:9f:73:79:81:98:a1:b7:
30:0a:43:fc:ba:5e:38:ae:80:14:b1:fc:08:ea:86:
48:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CA:F1:B9:F8:C8:20:D2:E0:A3:80:0D:97:55:43:A3:47:90:38:76
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5MrxufjIINLgo4ANl1VDo0eQOHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.28.0/22
31.56.57.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0-31.56.195.255
31.56.200.0/22
31.56.208.0-31.56.221.255
31.56.224.0/23
31.56.228.0/22
31.56.236.0/22
31.57.12.0/22
31.57.24.0/21
31.57.36.0/22
31.57.52.0-31.57.63.255
31.57.94.0/23
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.57.0/24
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.136.0-31.59.151.255
31.59.160.0-31.59.169.255
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
60:07:3f:46:04:cc:d2:5a:a3:9d:85:46:52:f4:51:6c:64:db:
1f:53:8e:b2:32:4d:d6:06:f1:a8:8a:74:2b:e0:70:de:d5:24:
c7:83:90:02:c6:f0:04:22:e5:c6:57:b6:35:fb:a5:ed:ec:cd:
e2:e8:c9:25:3b:9c:a4:1b:8d:ea:2d:ea:57:2d:2a:4a:8c:a4:
b0:04:38:75:18:b2:0e:a3:b8:58:62:6f:e5:4b:1e:a7:68:7a:
c8:3b:74:d8:00:08:f2:75:f0:6c:4d:0c:13:5a:ce:d7:e9:be:
cb:75:f9:2c:49:f9:f7:2c:93:dd:f2:dd:bd:cd:2c:c8:48:2b:
cc:1f:b1:ab:a3:97:b9:ff:38:0f:08:40:f0:f5:b9:6b:7a:dd:
da:7e:bd:15:fa:68:44:f9:08:55:d7:25:1d:d2:a1:ee:8f:b0:
90:41:93:c8:dc:44:89:0f:c3:c0:dd:f8:65:6b:84:8c:64:5d:
39:c6:5c:0e:f2:99:36:b7:8d:a6:43:b2:0b:c9:fe:e6:8b:9b:
39:5c:3b:56:3f:19:ee:36:af:6f:8f:53:03:cc:12:8d:aa:ab:
97:a1:79:d1:84:ed:0c:09:c2:c2:25:af:f2:ab:2b:ac:da:41:
0f:9e:3d:0c:c2:04:7a:2d:85:4f:31:5e:d4:c7:03:8e:e4:48:
61:51:30:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:55:20 2025 by rpki-client