Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DDzt_1X5uRotlPTMu0A2sefjDj0.roa
File: DDzt_1X5uRotlPTMu0A2sefjDj0.roa (raw, json)
Hash identifier: C0CNOnOyRDGA+gpchvXXUguaFbQ1O0AnzrAokyeIlg8=
Subject key identifier: 0C:3C:ED:FF:55:F9:B9:1A:2D:94:F4:CC:BB:40:36:B1:E7:E3:0E:3D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196A4B4BDD904214278042B51A3E27AE354
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DDzt_1X5uRotlPTMu0A2sefjDj0.roa
Signing time: Tue 06 May 2025 08:27:10 +0000
ROA not before: Tue 06 May 2025 08:27:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.48.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/22 maxlen: 24
31.56.224.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.57.10.0/24 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.115.0/24 maxlen: 24
31.57.118.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.171.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.196.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.230.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.238.0/24 maxlen: 24
31.57.249.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.50.0/24 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.86.0/24 maxlen: 24
31.58.141.0/24 maxlen: 24
31.58.144.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 06 May 2025 12:11:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:b4:bd:d9:04:21:42:78:04:2b:51:a3:e2:7a:e3:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 6 08:27:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c3cedff55f9b91a2d94f4ccbb4036b1e7e30e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:67:a4:5e:6d:d0:59:af:9f:82:35:8f:12:79:
78:01:7f:3e:82:d5:16:da:b8:fd:28:95:30:51:f2:
35:df:b1:6f:d4:d3:ae:16:be:9a:80:b5:e8:e7:31:
f4:db:28:4b:0d:f4:4a:e1:47:8e:f2:7e:13:5a:10:
33:f8:2e:a2:2c:7b:62:4b:6d:59:7d:ef:21:17:ff:
72:4d:2b:53:ae:52:6c:03:97:34:33:26:80:89:c9:
74:03:14:a8:f6:fe:65:36:fb:4f:6e:41:17:36:5e:
14:98:e5:69:8f:59:87:6f:fb:7d:7b:d4:6f:63:02:
62:07:ea:e7:60:2c:bc:00:0d:2a:43:f8:df:22:7f:
db:6f:70:e4:1b:5d:75:4b:76:e2:5c:1c:88:90:bb:
bb:b7:22:fc:60:f6:66:1a:24:11:ee:b9:54:10:be:
0b:c3:9f:d0:74:75:bd:09:3c:1a:7f:e0:6a:30:42:
fc:4b:18:86:fd:37:57:7a:96:76:38:cc:32:7c:e5:
1f:4a:b4:0c:dd:c4:35:b7:50:67:d4:07:e4:a0:25:
27:cb:fd:17:60:3e:82:e8:d4:83:fd:3d:d4:57:47:
b9:f8:35:3a:c8:3f:1a:6a:5f:19:42:ed:fa:e2:9f:
73:c3:74:7a:bf:6a:af:d7:c2:6c:63:2d:d5:b2:32:
67:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:3C:ED:FF:55:F9:B9:1A:2D:94:F4:CC:BB:40:36:B1:E7:E3:0E:3D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DDzt_1X5uRotlPTMu0A2sefjDj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.48.0/24
31.56.57.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0/22
31.56.200.0/22
31.56.208.0/21
31.56.220.0-31.56.231.255
31.56.236.0/22
31.57.10.0/24
31.57.36.0/23
31.57.104.0/21
31.57.115.0/24
31.57.118.0/24
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.188.255
31.57.192.0-31.57.196.255
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.230.0/24
31.57.232.0/22
31.57.238.0/24
31.57.249.0-31.57.255.255
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.84.0/22
31.58.141.0/24
31.58.144.0/24
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.151.255
31.59.160.0/20
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
72:09:99:e5:9d:ef:4b:84:0b:88:9c:2b:d8:ad:3d:14:48:63:
b7:06:8b:88:e1:1c:da:b5:8e:79:c6:ba:75:a6:f5:9a:ed:24:
85:8f:4f:65:5e:30:36:97:5f:80:df:aa:ef:da:26:58:7c:6e:
e4:50:d8:69:46:86:e1:8f:70:29:05:78:36:d8:e2:6c:ea:e1:
58:7c:27:2b:6d:52:5b:b8:9a:e7:aa:c8:f6:9e:5d:5c:81:02:
fc:2c:c0:32:69:b3:6c:b1:b2:3d:e0:46:fd:80:c4:f9:8f:28:
ab:8e:0b:dd:2c:83:59:e5:9c:e7:89:d5:df:03:a6:0d:4d:04:
f1:7d:09:dd:95:47:7b:97:29:03:c7:ac:a1:b0:bc:13:34:e4:
0b:92:2a:7c:63:4b:ba:12:6a:04:85:3f:53:72:83:fa:92:46:
83:2e:77:4f:9a:af:69:0f:70:3e:5e:c8:70:37:08:51:97:32:
35:f8:59:e3:a0:8a:06:c9:42:af:e6:1c:83:b1:47:a2:42:7d:
82:01:b1:45:9e:09:71:ca:cf:a3:8d:b4:ca:b1:3b:5e:51:22:
4a:c0:3a:72:b5:4e:e0:45:e6:16:7c:76:76:66:42:2b:2d:23:
9a:d1:17:e7:2c:76:b5:01:c5:89:c8:01:72:bd:d5:0d:91:7e:
c4:c3:11:a7
-----BEGIN CERTIFICATE-----
MIIGbDCCBVSgAwIBAgISAZaktL3ZBCFCeAQrUaPieuNUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNTA2MDgyNzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzNjZWRmZjU1ZjliOTFhMmQ5NGY0Y2NiYjQwMzZiMWU3ZTMwZTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGekXm3QWa+fgjWPEnl4AX8+gtUW
2rj9KJUwUfI137Fv1NOuFr6agLXo5zH02yhLDfRK4UeO8n4TWhAz+C6iLHtiS21Z
fe8hF/9yTStTrlJsA5c0MyaAicl0AxSo9v5lNvtPbkEXNl4UmOVpj1mHb/t9e9Rv
YwJiB+rnYCy8AA0qQ/jfIn/bb3DkG111S3biXByIkLu7tyL8YPZmGiQR7rlUEL4L
w5/QdHW9CTwaf+BqMEL8SxiG/TdXepZ2OMwyfOUfSrQM3cQ1t1Bn1AfkoCUny/0X
YD6C6NSD/T3UV0e5+DU6yD8aal8ZQu364p9zw3R6v2qv18JsYy3VsjJnmwIDAQAB
o4IDeDCCA3QwHQYDVR0OBBYEFAw87f9V+bkaLZT0zLtANrHn4w49MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvRER6dF8xWDV1Um90bFBUTXUwQTJzZWZqRGowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBjAYIKwYBBQUHAQcBAf8EggF7MIIBdzCCAXMEAgABMIIB
awMEAR84BAMEAB84GAMEAB84MAMEAB84OQMEAR84WgMEAx84aAMEAR84cjAMAwQB
Hzh2AwQCHzh4AwQCHzi0AwQCHzi8AwQCHzjIAwQDHzjQMAwDBAIfONwDBAMfOOAD
BAIfOOwDBAAfOQoDBAEfOSQDBAMfOWgDBAAfOXMDBAAfOXYDBAMfOXgDBAEfOYQD
BAMfOYgDBAEfOZIDBAIfOagwDAMEBB85sAMEAB85vDAMAwQGHznAAwQAHznEAwQB
HznIMAwDBAQfOdADBAIfOeADBAAfOeYDBAIfOegDBAAfOe4wCwMEAB85+QMDAR84
AwQBHzoiAwQAHzooAwQBHzoyAwQCHzpEAwQCHzpUAwQAHzqNAwQAHzqQAwQCHzqY
AwQCHzqsMAwDBAIfOtwDBAIfOuADBAIfO0wDBAIfO2ADBAIfO3ADBAIfO3gwDAME
Ax87iAMEAx87kAMEBB87oAMEAh874AMEAh876DANBgkqhkiG9w0BAQsFAAOCAQEA
cgmZ5Z3vS4QLiJwr2K09FEhjtwaLiOEc2rWOeca6dab1mu0khY9PZV4wNpdfgN+q
79omWHxu5FDYaUaG4Y9wKQV4NtjibOrhWHwnK21SW7ia56rI9p5dXIEC/CzAMmmz
bLGyPeBG/YDE+Y8oq44L3SyDWeWc54nV3wOmDU0E8X0J3ZVHe5cpA8esobC8EzTk
C5IqfGNLuhJqBIU/U3KD+pJGgy53T5qvaQ9wPl7IcDcIUZcyNfhZ46CKBslCr+Yc
g7FHokJ9ggGxRZ4JccrPo420yrE7XlEiSsA6crVO4EXmFnx2dmZCKy0jmtEX5yx2
tQHFicgBcr3VDZF+xMMRpw==
-----END CERTIFICATE-----
Generated at Fri May 9 16:39:08 2025 by rpki-client