Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BYpadzD2wnys5NwDN4xW8yPWXjo.roa
File: BYpadzD2wnys5NwDN4xW8yPWXjo.roa (raw, json)
Hash identifier: 8qBSnCnNIPgYxDmVsPvnDK1bHrhvk6v5GWttsj0AtTQ=
Subject key identifier: 05:8A:5A:77:30:F6:C2:7C:AC:E4:DC:03:37:8C:56:F3:23:D6:5E:3A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195AF75399203457120C7CBE966FE75FBAE
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BYpadzD2wnys5NwDN4xW8yPWXjo.roa
Signing time: Wed 19 Mar 2025 17:30:49 +0000
ROA not before: Wed 19 Mar 2025 17:30:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.42.0/24 maxlen: 24
31.56.43.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.57.103.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.113.0/24 maxlen: 24
31.57.114.0/24 maxlen: 24
31.57.116.0/24 maxlen: 24
31.57.117.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.143.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.168.0/23 maxlen: 23
31.57.176.0/21 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.200.0/24 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.212.0/24 maxlen: 24
31.57.213.0/24 maxlen: 24
31.57.214.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.57.254.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.76.0/24 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Mar 2025 20:33:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:af:75:39:92:03:45:71:20:c7:cb:e9:66:fe:75:fb:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 19 17:30:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=058a5a7730f6c27cace4dc03378c56f323d65e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c5:f9:f6:d8:9c:66:1a:0b:af:3c:c8:f3:16:
3d:df:ce:c9:37:6c:b0:a8:6e:ca:c9:60:5a:7f:7d:
c7:7e:cc:42:e8:8f:a6:bd:8b:45:3d:02:00:97:73:
8e:2e:f7:27:25:ca:7a:47:50:53:01:0f:74:a8:04:
2b:1a:2f:6f:3b:df:03:0d:42:50:72:7d:c2:6b:a7:
21:76:aa:ea:27:a1:dc:8d:b2:06:04:42:24:ab:e9:
33:98:3c:b2:d3:5d:14:73:a8:88:68:6e:cf:8c:16:
39:b5:fb:5a:22:e0:d2:72:df:3e:f3:46:3e:d7:d2:
0e:cd:28:90:c0:cb:c6:bd:c2:56:d5:0e:df:ff:60:
80:78:54:2e:a0:41:f9:db:2d:35:f0:bf:fb:86:7b:
1b:30:04:10:ab:04:3b:ad:79:bf:b0:b5:74:1d:55:
39:59:1c:c3:b9:f5:fd:4b:3c:81:96:24:39:74:ff:
04:4c:34:25:8b:32:a6:46:34:03:b1:1f:12:e8:dc:
aa:d5:b2:28:a5:9b:26:0b:93:a5:9f:fc:74:25:f0:
c2:b9:12:6a:48:dd:74:39:55:a8:db:f1:05:2d:e0:
2e:c1:7b:54:b1:11:ee:44:f2:d2:0a:ec:6e:61:71:
23:1d:92:34:6e:3d:3e:6b:a6:f1:03:46:71:4e:99:
08:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:8A:5A:77:30:F6:C2:7C:AC:E4:DC:03:37:8C:56:F3:23:D6:5E:3A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BYpadzD2wnys5NwDN4xW8yPWXjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.71.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.103.0-31.57.111.255
31.57.113.0-31.57.114.255
31.57.116.0/23
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0/21
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.76.0/24
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.224.0/22
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
Signature Algorithm: sha256WithRSAEncryption
37:ef:b8:2e:af:92:d7:6e:95:7e:9f:38:04:23:59:56:fe:cb:
5a:16:ff:20:22:2e:ba:ef:de:49:33:62:48:69:26:72:e8:8a:
0b:4f:48:4d:9b:de:b2:98:38:c5:9f:d6:76:5e:ea:4f:53:de:
86:ad:d4:91:0a:87:7c:02:7b:fb:05:f0:c2:ad:6b:b2:7f:2d:
a7:a1:c6:a2:49:7e:51:b5:39:2b:23:3f:a8:32:e2:87:ff:9a:
fb:06:a3:d6:01:de:74:b1:c0:25:a9:d6:69:97:19:2b:c0:17:
3a:6f:39:5e:65:9f:d0:2d:d2:f0:55:c2:e9:31:05:71:70:ef:
33:9e:7d:d4:bb:89:1c:5a:12:b5:d8:8a:93:db:aa:fc:91:25:
c2:01:2b:6f:b6:c7:33:d8:08:22:1b:9e:e1:70:69:4b:8c:1b:
af:5b:e8:82:1d:dc:7e:43:27:14:69:87:55:e5:ce:d5:34:a1:
52:5d:d9:3e:81:2c:a2:18:b3:82:1f:5c:0a:4e:ed:42:19:13:
23:c5:8a:9e:56:13:30:6e:f2:5f:f5:a3:e4:79:23:90:0e:1d:
93:6c:f2:3e:4d:6e:d7:63:e1:67:4b:6e:2c:4f:f4:3d:58:37:
d1:fc:e4:54:0a:a2:ef:3a:d3:ac:d0:d6:43:ec:d5:90:49:0f:
13:ab:95:a6
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgISAZWvdTmSA0VxIMfL6Wb+dfuuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMzE5MTczMDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNThhNWE3NzMwZjZjMjdjYWNlNGRjMDMzNzhjNTZmMzIzZDY1ZTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsX59ticZhoLrzzI8xY9387JN2yw
qG7KyWBaf33HfsxC6I+mvYtFPQIAl3OOLvcnJcp6R1BTAQ90qAQrGi9vO98DDUJQ
cn3Ca6chdqrqJ6HcjbIGBEIkq+kzmDyy010Uc6iIaG7PjBY5tftaIuDSct8+80Y+
19IOzSiQwMvGvcJW1Q7f/2CAeFQuoEH52y018L/7hnsbMAQQqwQ7rXm/sLV0HVU5
WRzDufX9SzyBliQ5dP8ETDQlizKmRjQDsR8S6Nyq1bIopZsmC5Oln/x0JfDCuRJq
SN10OVWo2/EFLeAuwXtUsRHuRPLSCuxuYXEjHZI0bj0+a6bxA0ZxTpkIlQIDAQAB
o4IDAzCCAv8wHQYDVR0OBBYEFAWKWncw9sJ8rOTcAzeMVvMj1l46MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvQllwYWR6RDJ3bnlzNU53RE40eFc4eVBXWGpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBFwYIKwYBBQUHAQcBAf8EggEGMIIBAjCB/wQCAAEwgfgD
BAEfOAQDBAAfOBgDBAEfOCoDBAAfODkDBAAfOEcDBAEfOFoDBAMfOGgDBAEfOHIw
DAMEAR84dgMEAh84eAMEAh84yDAMAwQAHzlnAwQEHzlgMAwDBAAfOXEDBAAfOXID
BAEfOXQDBAEfOYQDBAMfOYgDBAEfOZIDBAIfOagDBAMfObADBAIfOcADBAEfOcgw
DAMEBB850AMEAh854AMEAh856AMEAh85/AMEAR86IgMEAB86KAMEAR86MgMEAh86
RAMEAB86TAMEAh86VAMEAh86mAMEAh86rAMEAh864AMEAh87TAMEAh87YAMEAh87
cAMEAh87eDANBgkqhkiG9w0BAQsFAAOCAQEAN++4Lq+S126Vfp84BCNZVv7LWhb/
ICIuuu/eSTNiSGkmcuiKC09ITZvespg4xZ/Wdl7qT1Pehq3UkQqHfAJ7+wXwwq1r
sn8tp6HGokl+UbU5KyM/qDLih/+a+waj1gHedLHAJanWaZcZK8AXOm85XmWf0C3S
8FXC6TEFcXDvM5591LuJHFoStdiKk9uq/JElwgErb7bHM9gIIhue4XBpS4wbr1vo
gh3cfkMnFGmHVeXO1TShUl3ZPoEsohizgh9cCk7tQhkTI8WKnlYTMG7yX/Wj5Hkj
kA4dk2zyPk1u12PhZ0tuLE/0PVg30fzkVAqi7zrTrNDWQ+zVkEkPE6uVpg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 22:19:09 2025 by rpki-client