Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mnPVNPtMZG_E_EE6AMSYs3dNN5g.roa
File: mnPVNPtMZG_E_EE6AMSYs3dNN5g.roa (raw, json)
Hash identifier: 06hFuZV5hVJW1jvMr0xTC8zCC+XhOcXns3XjZkINPOQ=
Subject key identifier: 9A:73:D5:34:FB:4C:64:6F:C4:FC:41:3A:00:C4:98:B3:77:4D:37:98
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195EB41C1D3BB9AC026EDBCA49C43490388
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mnPVNPtMZG_E_EE6AMSYs3dNN5g.roa
Signing time: Mon 31 Mar 2025 08:11:50 +0000
ROA not before: Mon 31 Mar 2025 08:11:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.200.0/24 maxlen: 24
31.56.204.0/22 maxlen: 24
31.57.103.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.113.0/24 maxlen: 24
31.57.114.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.143.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.168.0/23 maxlen: 23
31.57.176.0/21 maxlen: 24
31.57.182.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.215.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
31.57.255.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.76.0/24 maxlen: 24
31.58.77.0/24 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.142.0/23 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.224.0/22 maxlen: 24
31.59.71.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.107.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 31 Mar 2025 14:36:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:eb:41:c1:d3:bb:9a:c0:26:ed:bc:a4:9c:43:49:03:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 31 08:11:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a73d534fb4c646fc4fc413a00c498b3774d3798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:41:e5:51:22:eb:4d:e0:2d:af:45:cb:3f:2b:
1d:63:5a:ac:1a:20:36:d9:30:b2:46:09:4b:4b:76:
9c:f0:ee:ec:4b:31:4f:84:71:e6:31:0b:c6:81:1b:
03:ec:ce:5a:44:ea:8f:fe:04:0d:0e:2c:3a:ba:f6:
43:d5:da:b6:71:9e:f3:7a:85:df:bd:50:11:16:2d:
5c:ba:ed:97:3b:ff:a9:11:56:58:63:f2:66:a2:95:
1c:90:63:58:fc:65:2c:ad:77:46:d7:71:9b:d7:ab:
3f:8d:2a:71:e0:cd:e2:c4:ae:f8:17:05:b8:ed:aa:
78:a3:67:fc:5b:9f:0e:b2:22:32:78:53:60:f3:5b:
ad:e5:58:cc:5a:25:70:a3:d6:c2:c6:ce:cb:9f:8d:
d8:28:6d:95:ae:81:bf:12:25:b2:2d:68:49:d2:6c:
43:2e:44:4d:a1:c6:9c:92:5c:95:b1:3c:83:a9:56:
54:a9:30:55:2d:5b:7e:e2:7c:d5:0b:38:7f:f8:3f:
5d:4c:7c:aa:ae:98:82:e2:a7:b7:a4:cc:e6:0e:2a:
f1:c8:37:1b:1f:ef:c0:95:ea:f9:18:1e:3d:3d:be:
6b:a8:e1:90:29:bb:1c:ed:66:6c:d9:f2:e2:11:ad:
9a:43:c6:9d:a9:44:71:43:02:84:fa:78:be:02:18:
2a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:73:D5:34:FB:4C:64:6F:C4:FC:41:3A:00:C4:98:B3:77:4D:37:98
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mnPVNPtMZG_E_EE6AMSYs3dNN5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.57.0/24
31.56.71.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/21
31.57.103.0-31.57.111.255
31.57.113.0-31.57.114.255
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0/21
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.252.0/22
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.76.0/23
31.58.84.0/22
31.58.142.0/23
31.58.152.0/22
31.58.172.0/22
31.58.224.0/22
31.59.71.0/24
31.59.76.0/22
31.59.96.0/22
31.59.107.0/24
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.175.255
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:b1:73:ea:bd:6b:64:f3:c9:87:9f:34:a2:0c:40:00:e8:b6:
70:1d:90:28:de:fc:f9:2e:04:cd:b7:5e:80:1c:0d:dd:d3:ae:
c9:13:bd:7f:8f:29:31:7a:9f:be:ca:92:24:1f:e3:7e:cd:8e:
bd:dd:e6:95:64:cc:e5:d1:e8:b4:89:a3:34:aa:58:e6:90:36:
02:6b:c3:40:83:22:dd:a3:c7:7d:1a:e7:03:b1:da:68:1e:7c:
84:9a:11:11:03:8e:d5:ae:ea:b7:88:7b:9b:af:82:12:ee:08:
dd:0d:89:4f:99:4a:dd:4c:df:15:76:e1:3d:4a:87:76:75:b9:
c1:d0:20:51:da:c0:4f:dc:62:33:ca:63:6d:16:16:1e:f1:b0:
68:7e:e0:09:3a:00:bf:20:d3:e2:15:65:6f:73:c7:c0:d6:43:
f3:7d:a9:46:f3:8a:0e:f3:11:4f:e3:e3:54:cd:49:d9:33:a0:
8e:f4:38:2e:2e:4f:de:3a:d9:64:38:ff:77:ab:b8:86:20:87:
52:e2:0a:4e:6b:d1:a7:46:ef:3a:12:fd:11:f5:eb:bb:19:49:
bc:56:15:55:e3:cb:ac:4f:7b:2b:93:41:2d:bc:5b:0e:6c:41:
56:b0:87:5a:c5:76:f3:1c:66:01:fe:f9:a0:07:e6:cb:ee:99:
6d:10:9a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:04:54 2025 by rpki-client