Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MTRZeDDpygxEYIIaq3c_CyrIHhI.roa
File: MTRZeDDpygxEYIIaq3c_CyrIHhI.roa (raw, json)
Hash identifier: IU7rarmGwdv4l26KsWaBnT0n4xpIEo37ZIUd0zWZuRc=
Subject key identifier: 31:34:59:78:30:E9:CA:0C:44:60:82:1A:AB:77:3F:0B:2A:C8:1E:12
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01968C64FCE9C12A7E9DCF2E5857725CDD67
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MTRZeDDpygxEYIIaq3c_CyrIHhI.roa
Signing time: Thu 01 May 2025 15:09:10 +0000
ROA not before: Thu 01 May 2025 15:09:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.48.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.113.0/24 maxlen: 24
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.176.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.184.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/22 maxlen: 24
31.56.224.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.57.10.0/24 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.103.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.105.0/24 maxlen: 24
31.57.106.0/24 maxlen: 24
31.57.107.0/24 maxlen: 24
31.57.108.0/24 maxlen: 24
31.57.109.0/24 maxlen: 24
31.57.111.0/24 maxlen: 24
31.57.115.0/24 maxlen: 24
31.57.118.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.171.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.196.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.230.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.238.0/24 maxlen: 24
31.57.249.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.50.0/24 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.86.0/24 maxlen: 24
31.58.141.0/24 maxlen: 24
31.58.144.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.196.0/22 maxlen: 24
31.58.204.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.36.0/22 maxlen: 24
31.59.44.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 02 May 2025 09:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8c:64:fc:e9:c1:2a:7e:9d:cf:2e:58:57:72:5c:dd:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 1 15:09:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3134597830e9ca0c4460821aab773f0b2ac81e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0f:3f:6f:67:7b:0f:78:d4:41:8f:11:5e:02:
45:f5:6f:c1:ed:15:1f:56:ee:70:82:3d:08:72:6d:
11:e2:4d:9c:a1:62:e4:8d:d7:23:99:b4:d2:5d:dc:
0a:3b:d9:31:e7:e2:7a:96:71:27:1c:44:fe:5c:63:
24:a2:21:5a:30:c9:4f:a1:b5:c2:2b:52:0a:21:a2:
11:d7:b2:8a:d9:74:8f:82:86:82:f6:a4:26:1f:22:
a9:a5:49:9e:36:23:d3:3c:d2:db:14:80:bf:c7:38:
63:80:d4:be:fc:86:fd:05:d4:15:1f:e1:77:38:13:
19:04:91:8c:ea:ca:f0:be:73:e1:8e:16:37:ec:88:
01:99:be:be:20:4f:78:e7:30:42:04:67:ff:24:92:
a0:03:c2:81:52:35:8e:27:3e:7e:f5:62:5f:6b:a3:
57:f5:7c:11:fa:c7:19:ef:d1:1a:d8:3f:ac:2e:7d:
08:86:c8:72:74:73:51:72:28:e9:a4:3a:09:3a:a4:
cf:70:f4:d2:0d:68:18:2c:20:c3:af:3d:17:da:56:
46:49:fc:1d:6f:de:76:29:ea:54:3e:09:89:03:33:
02:f0:9c:b2:19:14:3e:67:75:ad:0b:10:0d:46:dc:
a9:3e:ce:35:70:d4:35:77:a9:ac:76:54:e6:9a:3e:
06:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:34:59:78:30:E9:CA:0C:44:60:82:1A:AB:77:3F:0B:2A:C8:1E:12
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MTRZeDDpygxEYIIaq3c_CyrIHhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.48.0/24
31.56.57.0/24
31.56.90.0/23
31.56.104.0/21
31.56.113.0-31.56.115.255
31.56.118.0-31.56.123.255
31.56.176.0/20
31.56.200.0/22
31.56.208.0/21
31.56.220.0-31.56.231.255
31.56.236.0/22
31.57.10.0/24
31.57.36.0/23
31.57.103.0-31.57.111.255
31.57.115.0/24
31.57.118.0/24
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.188.255
31.57.192.0-31.57.196.255
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.230.0/24
31.57.232.0/22
31.57.238.0/24
31.57.249.0-31.57.255.255
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.84.0/22
31.58.141.0/24
31.58.144.0/24
31.58.152.0/22
31.58.172.0/22
31.58.196.0/22
31.58.204.0/22
31.58.220.0-31.58.227.255
31.59.36.0/22
31.59.44.0/22
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.151.255
31.59.160.0/20
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
67:83:28:bd:1f:73:69:b9:15:86:c6:97:00:31:83:61:c3:0d:
85:fb:ef:10:ba:d2:9c:58:ee:56:6c:26:6f:c2:73:b8:c5:d9:
70:e4:62:72:d8:2f:4d:a9:36:6c:27:fd:13:a0:72:98:1e:cf:
1f:71:21:ce:90:62:89:92:be:51:ed:cb:d9:32:12:32:68:1e:
fe:f1:ef:e1:c0:69:c8:86:d6:f3:1b:ef:a1:42:43:0d:4e:ed:
ae:74:be:ab:9e:9f:33:d6:31:37:b5:3a:21:bf:63:e0:f7:b7:
f3:b2:ef:03:89:c1:75:3b:95:fd:e5:83:5e:bf:ee:4d:35:24:
4c:61:45:65:20:81:64:2c:3c:0f:9c:1e:03:c5:14:a4:00:3c:
8a:ad:66:36:cf:19:14:74:ac:d2:4a:b4:4c:ed:84:a3:5f:aa:
bb:49:a6:0f:3f:2b:8d:88:53:16:ce:35:b6:c8:7a:ec:41:84:
b1:d0:6a:26:18:16:5b:b3:fb:6f:5e:2a:4c:4c:9e:29:a4:e0:
96:ba:1c:92:df:17:f1:5c:f1:b1:e4:56:60:8a:fd:22:90:89:
bd:ca:f1:10:af:d9:84:96:db:58:ca:36:59:9c:f3:8e:44:fb:
d9:7d:4f:ae:ef:92:d8:5e:df:f8:41:a8:5f:e1:e1:1e:4f:8f:
d9:d8:38:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 14:22:56 2025 by rpki-client