Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EhEkBZAB1E82QJqaDWzb14lS9YU.roa
File: EhEkBZAB1E82QJqaDWzb14lS9YU.roa (raw, json)
Hash identifier: /TzIheSkrY0KcNSTvH4hVW3JJRCuzcMwInC7TskxfWs=
Subject key identifier: 12:11:24:05:90:01:D4:4F:36:40:9A:9A:0D:6C:DB:D7:89:52:F5:85
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197B5645C798993CC03AAC68C6500874FCA
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EhEkBZAB1E82QJqaDWzb14lS9YU.roa
Signing time: Sat 28 Jun 2025 07:15:42 +0000
ROA not before: Sat 28 Jun 2025 07:15:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.32.0/24 maxlen: 24
31.56.44.0/24 maxlen: 24
31.56.48.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.112.0/24 maxlen: 24
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.146.0/24 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.196.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.204.0/22 maxlen: 22
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.57.12.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.48.0/22 maxlen: 24
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.92.0/22 maxlen: 22
31.57.92.0/23 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.200.0/24 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.171.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.58.226.0/24 maxlen: 24
31.59.70.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.128.0/24 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.136.0/24 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.212.0/22 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 29 Jun 2025 07:41:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:64:5c:79:89:93:cc:03:aa:c6:8c:65:00:87:4f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 28 07:15:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=121124059001d44f36409a9a0d6cdbd78952f585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7e:fe:c0:4b:1e:0e:21:6c:31:6a:9d:37:5a:
1b:f6:a3:bf:e1:ba:7c:6b:5c:d6:98:eb:84:7e:92:
95:75:aa:61:98:74:9a:32:13:dd:50:6a:4e:4a:d0:
8c:2f:35:b9:ee:2a:39:d8:46:1a:dc:8e:0f:20:2b:
f0:1d:31:3d:b7:d2:05:ca:51:a7:9e:2a:d3:05:b1:
fe:09:b1:10:50:52:7f:02:79:1c:b2:1b:21:c5:77:
81:c6:52:ea:13:56:9f:ac:69:84:e8:27:85:6f:6e:
ef:c7:7f:b5:75:a0:34:95:bb:54:8a:21:6d:ce:ee:
8f:7c:0c:e9:4a:77:bd:a4:23:c4:b3:f9:75:ea:24:
03:6c:2b:15:4a:c4:d2:d6:62:2b:d7:2f:83:1a:1b:
7a:c8:8e:1a:29:56:32:3e:16:48:d6:cc:6f:3e:21:
19:7d:34:4e:d7:cd:b5:ff:b2:6c:81:12:f0:12:f7:
88:65:ba:1c:66:a4:a6:3e:81:14:bb:9b:16:b5:4f:
03:fc:26:e8:49:69:71:86:ff:f1:3c:40:a7:f0:d0:
3f:69:10:1c:39:e9:60:21:17:92:66:e4:e6:04:66:
3d:51:c2:4e:79:39:2f:31:3c:d2:88:3e:52:10:af:
74:84:38:1b:e1:09:c2:8b:a2:aa:9d:1b:37:36:88:
29:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:11:24:05:90:01:D4:4F:36:40:9A:9A:0D:6C:DB:D7:89:52:F5:85
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EhEkBZAB1E82QJqaDWzb14lS9YU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.32.0/24
31.56.44.0/24
31.56.48.0/24
31.56.57.0/24
31.56.77.0/24
31.56.90.0/23
31.56.104.0-31.56.112.255
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.146.0/24
31.56.180.0/22
31.56.188.0/22
31.56.196.0-31.56.215.255
31.56.228.0/22
31.56.236.0/22
31.57.12.0/23
31.57.36.0/22
31.57.48.0/20
31.57.92.0/22
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.171.0-31.58.175.255
31.58.220.0-31.58.227.255
31.59.70.0/24
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.128.0/24
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.212.0/22
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
56:63:5c:26:8a:65:d4:e3:1e:24:96:0b:09:89:c0:34:da:fd:
46:fe:d8:6a:03:85:48:ea:75:b5:95:b4:4d:a6:10:14:94:31:
79:8c:03:69:f5:e8:b1:7c:41:7a:e5:42:b5:05:2f:e8:30:65:
6d:7e:46:25:fb:4c:76:95:c9:bd:33:e3:45:30:1f:23:65:79:
90:98:3d:f8:2e:fe:73:4f:b8:59:ba:01:cb:a0:68:c5:58:fd:
06:dc:d9:ef:ea:b7:ed:bc:44:31:a8:d8:30:f8:e9:41:00:d3:
20:67:b5:7d:c6:0c:33:56:28:84:2b:81:68:73:11:12:64:07:
a1:a3:a1:00:25:12:a8:47:aa:bb:bc:bd:94:b9:ca:bb:ea:3c:
e1:1c:f8:1e:23:eb:51:78:f7:4f:a5:1a:c3:d4:55:67:20:6b:
a5:3d:0d:51:77:70:3c:c0:37:d7:d4:de:d7:10:7a:9a:2e:b2:
c8:a9:87:46:3d:f0:f4:b6:7b:56:c4:89:c4:94:ea:f8:15:b4:
f3:35:ad:96:cf:ad:8b:6e:20:a5:77:f3:f7:dc:c9:62:a3:45:
b1:2c:65:3a:2e:f9:f2:78:20:d9:9e:9a:63:33:64:ee:8a:9f:
cf:98:f7:3b:a7:36:61:5e:d5:e9:36:e8:9b:62:fd:8d:fd:f5:
a9:11:61:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:59:03 2025 by rpki-client