Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/m_eu5SsnywwdNR_3w3Bmjl8i0BA.roa
File: m_eu5SsnywwdNR_3w3Bmjl8i0BA.roa (raw, json)
Hash identifier: OIW0Kdq8D4KMxnEvLJxzf4D1hp4x4CsV+yYdOUGGBpk=
Subject key identifier: 9B:F7:AE:E5:2B:27:CB:0C:1D:35:1F:F7:C3:70:66:8E:5F:22:D0:10
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195E7FA379841648F3434CA74211CA1C818
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/m_eu5SsnywwdNR_3w3Bmjl8i0BA.roa
Signing time: Sun 30 Mar 2025 16:54:49 +0000
ROA not before: Sun 30 Mar 2025 16:54:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.204.0/22 maxlen: 24
31.57.103.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.113.0/24 maxlen: 24
31.57.114.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.143.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/23 maxlen: 23
31.57.176.0/21 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.214.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.76.0/24 maxlen: 24
31.58.77.0/24 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 31 Mar 2025 05:16:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e7:fa:37:98:41:64:8f:34:34:ca:74:21:1c:a1:c8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 30 16:54:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9bf7aee52b27cb0c1d351ff7c370668e5f22d010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:98:d1:a0:6b:8b:8f:85:ef:9e:20:33:5b:6d:
4b:dc:75:2b:f4:d0:b4:a2:1b:3f:3c:1e:0f:53:14:
53:7d:cb:0e:ae:b3:67:ea:55:6c:8d:fb:8e:c9:0b:
d5:52:5e:77:11:4e:fb:a8:bf:a8:e8:51:0f:84:9b:
5b:da:8d:4f:c0:8f:48:a2:b4:49:9a:b4:ef:91:af:
28:ed:51:ec:f4:69:e0:88:89:e6:10:9a:da:98:98:
4d:bc:73:3e:38:8f:53:9b:21:89:3e:c0:12:be:98:
9c:11:bf:0a:0d:cf:5d:c0:b3:17:00:28:b8:36:1a:
b0:20:7b:d9:1c:94:e3:92:26:9f:08:d6:45:35:43:
5a:45:28:c4:14:42:fe:26:f5:e3:91:d8:e5:ce:c0:
b0:6b:96:cb:8d:2f:73:5f:9e:bf:9e:6b:83:1d:82:
7a:86:56:c4:c3:8b:5b:2b:f2:5e:65:35:fc:71:f4:
0e:fa:df:51:72:60:ed:a3:26:9b:18:b7:b8:aa:6f:
e6:8f:55:d9:8a:ff:6e:ab:b6:25:30:63:97:a1:c3:
08:54:e5:49:34:c2:61:9a:46:54:68:b0:c1:f0:d1:
78:83:ab:a2:23:83:b3:28:1a:a1:b0:c1:a2:13:78:
71:31:07:07:87:ce:3b:af:8c:15:cb:9d:63:2f:ef:
56:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F7:AE:E5:2B:27:CB:0C:1D:35:1F:F7:C3:70:66:8E:5F:22:D0:10
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/m_eu5SsnywwdNR_3w3Bmjl8i0BA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.57.0/24
31.56.71.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/21
31.57.103.0-31.57.111.255
31.57.113.0-31.57.114.255
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/23
31.57.176.0/21
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.76.0/23
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.224.0/22
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.175.255
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
24:0b:5b:da:95:1f:6f:86:ca:d9:04:8f:b8:c8:ef:d1:1c:73:
fd:72:91:2e:29:be:74:37:ba:e6:0a:35:bd:e5:f3:02:4a:59:
24:86:b7:d2:82:3f:4c:11:21:51:f9:64:55:35:ff:8e:90:cd:
83:89:3e:b9:d7:d5:a7:4d:cb:e3:4f:f8:e2:a8:30:6a:4f:f7:
da:f3:c0:ed:ac:bd:f8:7f:93:e9:69:59:23:0b:88:89:10:74:
23:f9:3e:cc:9a:20:5e:9c:2f:80:62:71:ac:70:ed:7b:65:79:
3a:78:c8:73:81:0f:b8:7b:a2:21:72:08:90:67:5c:0d:65:bb:
14:d5:31:7c:46:09:9a:c7:65:1a:f1:86:62:4e:63:96:fa:b7:
27:eb:d1:47:b2:94:30:55:22:9a:14:f7:44:cc:a1:27:bb:72:
48:2f:78:81:4c:ae:79:28:da:2e:72:df:39:75:05:51:c4:bf:
1a:71:58:4d:dd:82:38:a4:06:8e:b8:b5:5f:46:cf:8b:e3:9b:
62:ae:5f:3f:40:f6:fe:09:ee:85:c8:74:c8:38:86:d6:14:1d:
9d:1f:c6:6c:9c:e3:8b:62:3c:9f:f1:27:ce:b1:40:38:6d:10:
e1:89:e0:e9:61:ed:a2:f5:72:e1:45:0f:80:9d:1b:d8:b5:86:
b7:e8:c9:97
-----BEGIN CERTIFICATE-----
MIIGDTCCBPWgAwIBAgISAZXn+jeYQWSPNDTKdCEcocgYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMzMwMTY1NDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YmY3YWVlNTJiMjdjYjBjMWQzNTFmZjdjMzcwNjY4ZTVmMjJkMDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5jRoGuLj4XvniAzW21L3HUr9NC0
ohs/PB4PUxRTfcsOrrNn6lVsjfuOyQvVUl53EU77qL+o6FEPhJtb2o1PwI9IorRJ
mrTvka8o7VHs9GngiInmEJramJhNvHM+OI9TmyGJPsASvpicEb8KDc9dwLMXACi4
NhqwIHvZHJTjkiafCNZFNUNaRSjEFEL+JvXjkdjlzsCwa5bLjS9zX56/nmuDHYJ6
hlbEw4tbK/JeZTX8cfQO+t9RcmDtoyabGLe4qm/mj1XZiv9uq7YlMGOXocMIVOVJ
NMJhmkZUaLDB8NF4g6uiI4OzKBqhsMGiE3hxMQcHh847r4wVy51jL+9WjwIDAQAB
o4IDGTCCAxUwHQYDVR0OBBYEFJv3ruUrJ8sMHTUf98NwZo5fItAQMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvbV9ldTVTc255d3dkTlJfM3czQm1qbDhpMEJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBLQYIKwYBBQUHAQcBAf8EggEcMIIBGDCCARQEAgABMIIB
DAMEAR84BAMEAB84GAMEAB84OQMEAB84RwMEAR84WgMEAx84aAMEAR84cjAMAwQB
Hzh2AwQCHzh4AwQDHzjIMAwDBAAfOWcDBAQfOWAwDAMEAB85cQMEAB85cgMEAx85
eAMEAR85hAMEAx85iAMEAR85kgMEAR85qAMEAx85sAMEAh85wAMEAR85yDAMAwQE
HznQAwQCHzngAwQCHznoAwQCHzn8AwQBHzoiAwQAHzooAwQBHzoyAwQCHzpEAwQB
HzpMAwQCHzpUAwQCHzqYAwQCHzqsAwQCHzrgAwQCHztMAwQCHztgAwQCHztwAwQC
Hzt4MAwDBAMfO4gDBAQfO6ADBAIfO+ADBAIfO+gwDQYJKoZIhvcNAQELBQADggEB
ACQLW9qVH2+GytkEj7jI79Ecc/1ykS4pvnQ3uuYKNb3l8wJKWSSGt9KCP0wRIVH5
ZFU1/46QzYOJPrnX1adNy+NP+OKoMGpP99rzwO2svfh/k+lpWSMLiIkQdCP5Psya
IF6cL4Bicaxw7XtleTp4yHOBD7h7oiFyCJBnXA1luxTVMXxGCZrHZRrxhmJOY5b6
tyfr0UeylDBVIpoU90TMoSe7ckgveIFMrnko2i5y3zl1BVHEvxpxWE3dgjikBo64
tV9Gz4vjm2KuXz9A9v4J7oXIdMg4htYUHZ0fxmyc44tiPJ/xJ86xQDhtEOGJ4Olh
7aL1cuFFD4CdG9i1hrfoyZc=
-----END CERTIFICATE-----
Generated at Sun Apr 27 22:59:10 2025 by rpki-client