Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kR6ID_EZY2WML6o_qrnqvn4bBfk.roa
File: kR6ID_EZY2WML6o_qrnqvn4bBfk.roa (raw, json)
Hash identifier: 0DR7Xhn0c6pY5KB7VmEspFjcmhBpR29GAg924WwnV/8=
Subject key identifier: 91:1E:88:0F:F1:19:63:65:8C:2F:AA:3F:AA:B9:EA:BE:7E:1B:05:F9
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019658A724A13806794F1780EAF53269EA49
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kR6ID_EZY2WML6o_qrnqvn4bBfk.roa
Signing time: Mon 21 Apr 2025 14:01:10 +0000
ROA not before: Mon 21 Apr 2025 14:01:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.23.0/24 maxlen: 24
31.56.24.0/24 maxlen: 24
31.56.32.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.125.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.200.0/24 maxlen: 24
31.56.202.0/24 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.103.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.113.0/24 maxlen: 24
31.57.118.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.138.0/24 maxlen: 24
31.57.143.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.168.0/23 maxlen: 23
31.57.171.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.196.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.208.0/22 maxlen: 22
31.57.215.0/24 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.230.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.238.0/24 maxlen: 24
31.57.249.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.50.0/24 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.76.0/24 maxlen: 24
31.58.77.0/24 maxlen: 24
31.58.78.0/24 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 21 Apr 2025 14:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:a7:24:a1:38:06:79:4f:17:80:ea:f5:32:69:ea:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 21 14:01:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=911e880ff11963658c2faa3faab9eabe7e1b05f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:52:e6:51:0b:a9:cb:87:42:5d:c4:0b:8b:5d:
1e:05:f8:c3:d1:b6:b4:72:92:73:57:92:c1:c4:af:
6b:bb:3f:8a:9c:12:1f:ea:b7:af:c5:9f:68:4c:1d:
65:9a:d1:65:82:f7:6c:72:4c:05:29:87:89:75:5b:
2d:29:9e:b5:ad:b4:f0:2b:2a:02:05:65:cb:2f:af:
9a:f2:44:a7:ba:6b:aa:24:cf:71:29:53:f7:7c:54:
60:96:45:ed:e9:87:cc:c6:89:df:86:26:1b:e6:36:
35:8a:a7:3e:d4:38:74:8e:5f:3d:99:e9:55:31:c0:
19:c1:38:20:02:d3:16:a1:2f:e8:56:b7:40:ec:5a:
f2:ed:1f:77:a4:6b:6f:4d:bc:0d:8b:34:58:a7:d7:
6c:ea:ff:93:bc:31:7e:8a:c1:e7:a3:b9:19:9f:4e:
6c:1c:1d:e2:52:21:9a:00:e6:1c:95:d9:0b:4b:e0:
41:09:bf:e8:77:20:84:86:fe:76:0b:50:75:b2:94:
f3:1a:44:74:30:b2:33:39:14:b5:9c:bf:9d:9a:f9:
0f:7e:f8:d9:ac:be:44:d7:72:13:73:6f:ef:bb:36:
16:27:8b:86:c9:83:48:3b:e7:85:67:a1:82:4e:2e:
22:2e:fc:f6:63:7b:59:9f:05:bc:67:be:a3:40:af:
21:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:1E:88:0F:F1:19:63:65:8C:2F:AA:3F:AA:B9:EA:BE:7E:1B:05:F9
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kR6ID_EZY2WML6o_qrnqvn4bBfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.23.0-31.56.24.255
31.56.32.0/24
31.56.57.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.125.0/24
31.56.200.0/22
31.57.36.0/23
31.57.103.0-31.57.111.255
31.57.113.0/24
31.57.118.0/24
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.188.255
31.57.192.0-31.57.196.255
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.230.0/24
31.57.232.0/22
31.57.238.0/24
31.57.249.0-31.57.255.255
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.76.0-31.58.78.255
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.151.255
31.59.160.0/20
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
01:5c:ab:5f:21:c1:84:89:f5:d3:b3:ec:22:70:0e:90:08:e6:
45:42:85:0b:04:ba:99:da:10:a2:6e:20:ac:35:e8:b2:4b:b9:
05:10:df:e2:b2:fb:63:cb:02:0a:4b:7f:fb:36:c6:52:2c:67:
26:78:22:82:9a:63:42:b0:c1:ec:fd:c1:38:3c:b4:b9:14:26:
a3:0b:d8:e6:dd:8c:5f:86:6c:4e:e1:2c:94:f2:b0:5b:35:21:
44:29:fb:56:b6:4e:4e:a3:13:7b:9d:14:a4:8b:38:95:84:17:
5a:12:1f:4f:8e:cf:48:4c:b3:21:45:67:8b:b5:72:7a:e8:b2:
a8:55:c4:e3:ca:4d:f1:ee:3e:1f:49:c5:45:3f:92:d9:73:e3:
30:6d:92:4d:c8:c4:43:a3:30:c8:42:77:6b:17:e8:60:89:0d:
93:ae:6e:8f:e2:d8:1d:a2:12:04:bc:73:a4:12:1a:14:e5:bf:
29:28:ad:25:b3:21:3c:01:e9:a6:77:33:e6:12:2d:23:32:76:
7a:99:ee:ba:f6:ae:37:36:5e:32:47:53:4c:ba:f2:42:ce:c8:
32:6f:d4:c6:1f:ca:84:58:8b:ec:17:62:ed:74:22:1b:63:84:
28:3a:ba:8a:2f:52:33:ac:58:cb:f4:d5:5f:a5:fd:da:f3:9d:
50:5a:2d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:17:11 2025 by rpki-client