Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/usi4KKM35TRs_KaenBUVbORrsJA.roa
File: usi4KKM35TRs_KaenBUVbORrsJA.roa (raw, json)
Hash identifier: UZOHkH0tE+trOt/SC6C4YKcL93b828v3KtM3gqQPGoY=
Subject key identifier: BA:C8:B8:28:A3:37:E5:34:6C:FC:A6:9E:9C:15:15:6C:E4:6B:B0:90
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01972BCE60F12B0BE477CC07161556DB7FAD
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/usi4KKM35TRs_KaenBUVbORrsJA.roa
Signing time: Sun 01 Jun 2025 14:03:54 +0000
ROA not before: Sun 01 Jun 2025 14:03:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.57.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.146.0/24 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.196.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.56.238.0/24 maxlen: 24
31.57.12.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.60.0/22 maxlen: 24
31.57.92.0/22 maxlen: 22
31.57.98.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.110.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.139.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.159.0/24 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.182.0/24 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.244.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.68.0/24 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.134.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.212.0/22 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 02 Jun 2025 16:22:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2b:ce:60:f1:2b:0b:e4:77:cc:07:16:15:56:db:7f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 1 14:03:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bac8b828a337e5346cfca69e9c15156ce46bb090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:94:ea:ce:99:e8:03:9c:c3:06:8c:ce:48:32:
9d:10:d5:e2:a6:5b:13:b4:46:f3:1b:63:3c:13:1b:
37:85:53:73:70:f6:d1:95:f9:cb:f5:df:cc:38:d7:
eb:33:02:9f:aa:7d:72:04:b0:18:28:16:55:e1:c1:
f5:f1:2e:a7:34:0d:56:20:58:c8:04:9f:3c:6a:98:
84:58:a0:c5:4f:44:ef:8d:d7:95:e9:91:9c:c9:ea:
84:b0:1f:65:52:26:3d:0d:f3:90:9a:f3:37:11:11:
82:37:6c:c7:c7:8a:8a:f6:ea:6b:44:0d:b9:50:f8:
0b:25:0d:1e:5d:63:fd:28:6b:3e:e1:fd:46:ca:94:
c2:1e:84:17:b6:7a:4b:81:ab:73:9b:eb:43:a7:19:
73:1f:31:64:c6:d8:51:08:13:8d:91:95:fd:75:93:
7e:4c:49:3b:1b:10:bb:a0:c2:0e:0a:7d:35:c7:d0:
26:28:cb:5f:4a:2d:c2:7e:51:70:d2:b7:f5:98:2a:
32:eb:a2:b0:a5:dd:71:0c:e1:e6:f8:20:9f:26:45:
d1:2f:53:5d:37:6a:eb:20:41:f4:c2:e2:44:d3:fb:
b9:1f:e8:c7:4d:0b:81:1d:3f:a7:e4:96:a4:d7:5a:
21:50:4b:13:df:ef:82:85:29:f4:58:4d:2b:64:25:
a2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C8:B8:28:A3:37:E5:34:6C:FC:A6:9E:9C:15:15:6C:E4:6B:B0:90
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/usi4KKM35TRs_KaenBUVbORrsJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.57.0/24
31.56.77.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.146.0/24
31.56.180.0/22
31.56.188.0/22
31.56.196.0-31.56.203.255
31.56.208.0/21
31.56.228.0/22
31.56.236.0/22
31.57.12.0/23
31.57.36.0/22
31.57.60.0/22
31.57.92.0/22
31.57.98.0/24
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.159.0/24
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.244.0/24
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.134.0/24
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.212.0/22
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
04:b6:59:83:8a:f5:90:b6:cd:3a:4c:ba:8e:26:51:54:46:92:
ad:8e:cc:ee:13:cd:7d:e7:cd:9c:cb:0f:40:91:54:1c:d4:6d:
3c:63:83:7b:b0:92:b2:a3:3e:a2:ae:e7:68:65:eb:aa:c2:bd:
83:9a:a4:0e:9f:f2:f4:3e:c4:26:e6:03:6e:bc:55:e8:b1:e4:
2d:e1:3d:4e:41:b7:aa:ae:7f:47:10:20:96:38:68:ea:b9:52:
16:c2:12:c1:fd:ba:6a:4f:1a:50:94:b4:a0:74:ab:d1:2b:f9:
00:bc:f9:85:75:49:a9:39:dc:55:93:1f:96:af:5e:9c:f9:cb:
80:e6:ea:16:c2:3d:af:38:39:d5:dd:a9:67:24:78:c3:e3:94:
e7:9a:7b:6b:6b:9e:36:73:cc:35:9c:5e:b9:17:02:0f:8e:4e:
82:03:39:b6:80:ba:f4:13:3d:55:b1:ea:34:b1:79:ab:ff:1e:
8b:4d:91:d4:e9:7c:11:8a:cd:b1:78:a6:e5:f7:42:f5:95:1e:
7d:db:d0:93:30:52:ad:d0:98:d0:2a:be:f7:6f:5d:22:94:d3:
24:06:e5:e4:05:b5:ef:6a:03:c9:d1:2e:df:1c:b1:d2:ca:27:
31:65:46:10:51:62:12:84:34:64:a3:28:8d:b6:91:ce:32:85:
ae:0d:59:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:04:09 2025 by rpki-client