Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/R0xoK53pt7nvclJDim_qjVM8_4c.roa
File: R0xoK53pt7nvclJDim_qjVM8_4c.roa (raw, json)
Hash identifier: QwQGeSpU5B2LfbAY30RE4g/UoFVFqdbToVVka6hpZqI=
Subject key identifier: 47:4C:68:2B:9D:E9:B7:B9:EF:72:52:43:8A:6F:EA:8D:53:3C:FF:87
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196A581D303784A34BF09C9FB49498426EC
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/R0xoK53pt7nvclJDim_qjVM8_4c.roa
Signing time: Tue 06 May 2025 12:11:10 +0000
ROA not before: Tue 06 May 2025 12:11:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.48.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/22 maxlen: 24
31.56.224.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.57.10.0/24 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.118.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.171.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.196.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.230.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.238.0/24 maxlen: 24
31.57.249.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.50.0/24 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.86.0/24 maxlen: 24
31.58.141.0/24 maxlen: 24
31.58.144.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 07 May 2025 08:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:81:d3:03:78:4a:34:bf:09:c9:fb:49:49:84:26:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 6 12:11:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=474c682b9de9b7b9ef7252438a6fea8d533cff87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ac:15:a4:e1:58:ab:e2:95:c0:ec:fd:22:76:
d5:f4:50:a6:16:59:70:15:30:48:07:13:44:8f:16:
20:3b:ac:0b:90:06:08:80:95:eb:34:34:bc:74:d1:
d7:b7:29:bb:44:8e:1f:71:a5:dd:60:79:44:5c:c5:
c8:50:ee:22:69:94:be:2f:dd:ca:0a:d3:08:e4:25:
ce:62:75:54:ea:04:bc:49:91:84:f7:01:2c:a2:fc:
e6:4e:49:ed:69:c3:88:87:8a:bd:9b:e0:28:fe:9f:
8f:c9:ed:19:a3:10:e3:a7:a2:c5:19:7e:a2:48:2a:
dd:9b:ac:9c:06:7f:8a:01:89:e1:1a:f3:6e:17:47:
15:cd:27:ce:86:79:bf:fb:a5:6f:40:c2:30:57:51:
e6:46:17:e1:22:8c:e7:76:14:c7:c3:0e:8b:62:53:
d1:4b:e2:31:05:c9:ea:4c:25:79:61:2e:1b:83:56:
4a:2a:69:8c:d6:b4:6d:da:43:c9:88:50:00:43:ed:
bc:fb:96:10:e3:19:c6:3b:60:ab:c3:6a:15:db:04:
ff:57:b0:78:11:9c:54:9c:bd:45:47:cc:85:aa:ea:
9e:4c:74:27:6a:83:a0:fa:1b:58:35:05:eb:1b:25:
4e:07:0f:03:d0:a7:c1:ff:ed:60:f2:d4:61:90:19:
90:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4C:68:2B:9D:E9:B7:B9:EF:72:52:43:8A:6F:EA:8D:53:3C:FF:87
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/R0xoK53pt7nvclJDim_qjVM8_4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.48.0/24
31.56.57.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0/22
31.56.200.0/22
31.56.208.0/21
31.56.220.0-31.56.231.255
31.56.236.0/22
31.57.10.0/24
31.57.36.0/23
31.57.104.0/21
31.57.118.0/24
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.188.255
31.57.192.0-31.57.196.255
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.230.0/24
31.57.232.0/22
31.57.238.0/24
31.57.249.0-31.57.255.255
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.84.0/22
31.58.141.0/24
31.58.144.0/24
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.151.255
31.59.160.0/20
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:71:61:95:7f:ba:be:ef:ed:ba:81:aa:de:c0:01:b3:2b:02:
27:bb:57:94:a0:d0:9f:5b:25:ca:a2:d5:ff:b1:0d:90:75:21:
3d:31:96:02:10:69:2f:59:9b:1e:d8:b1:43:31:9f:86:05:f3:
29:70:ee:2e:fc:91:de:a2:53:3d:ce:31:f0:cf:7a:f4:52:52:
75:c9:c2:0a:71:1f:97:c3:6a:a5:66:6f:06:df:fa:fd:57:84:
c5:e5:34:97:72:ac:70:bd:ec:c1:9e:c6:e5:54:70:96:6c:1d:
7a:70:08:d7:22:13:e7:0d:4f:5e:f9:9a:c3:4b:ed:19:d0:d3:
06:36:99:58:27:6f:74:45:8b:40:f6:6d:68:37:ed:36:e0:e2:
64:c2:69:f0:de:db:50:df:49:8a:f4:04:db:1d:1e:2d:19:32:
86:b2:36:78:3c:c3:5e:1b:ac:9e:c7:d2:4e:77:f6:16:dc:10:
84:67:08:5c:04:34:e4:f3:e2:fa:77:d9:53:20:b1:87:ac:c0:
63:ef:92:1c:eb:6f:e8:61:25:e2:c3:b7:39:90:10:9e:d8:a1:
22:e7:5c:c9:3a:23:89:ec:47:89:09:33:61:be:cc:93:c4:a1:
6a:19:a3:a7:95:c8:58:d0:1f:31:a9:72:3b:b5:35:be:9c:f9:
bd:a3:68:e8
-----BEGIN CERTIFICATE-----
MIIGZjCCBU6gAwIBAgISAZalgdMDeEo0vwnJ+0lJhCbsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNTA2MTIxMTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzRjNjgyYjlkZTliN2I5ZWY3MjUyNDM4YTZmZWE4ZDUzM2NmZjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6wVpOFYq+KVwOz9InbV9FCmFllw
FTBIBxNEjxYgO6wLkAYIgJXrNDS8dNHXtym7RI4fcaXdYHlEXMXIUO4iaZS+L93K
CtMI5CXOYnVU6gS8SZGE9wEsovzmTkntacOIh4q9m+Ao/p+Pye0ZoxDjp6LFGX6i
SCrdm6ycBn+KAYnhGvNuF0cVzSfOhnm/+6VvQMIwV1HmRhfhIozndhTHww6LYlPR
S+IxBcnqTCV5YS4bg1ZKKmmM1rRt2kPJiFAAQ+28+5YQ4xnGO2Crw2oV2wT/V7B4
EZxUnL1FR8yFquqeTHQnaoOg+htYNQXrGyVOBw8D0KfB/+1g8tRhkBmQHwIDAQAB
o4IDcjCCA24wHQYDVR0OBBYEFEdMaCud6be573JSQ4pv6o1TPP+HMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvUjB4b0s1M3B0N252Y2xKRGltX3FqVk04XzRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBhgYIKwYBBQUHAQcBAf8EggF1MIIBcTCCAW0EAgABMIIB
ZQMEAR84BAMEAB84GAMEAB84MAMEAB84OQMEAR84WgMEAx84aAMEAR84cjAMAwQB
Hzh2AwQCHzh4AwQCHzi0AwQCHzi8AwQCHzjIAwQDHzjQMAwDBAIfONwDBAMfOOAD
BAIfOOwDBAAfOQoDBAEfOSQDBAMfOWgDBAAfOXYDBAMfOXgDBAEfOYQDBAMfOYgD
BAEfOZIDBAIfOagwDAMEBB85sAMEAB85vDAMAwQGHznAAwQAHznEAwQBHznIMAwD
BAQfOdADBAIfOeADBAAfOeYDBAIfOegDBAAfOe4wCwMEAB85+QMDAR84AwQBHzoi
AwQAHzooAwQBHzoyAwQCHzpEAwQCHzpUAwQAHzqNAwQAHzqQAwQCHzqYAwQCHzqs
MAwDBAIfOtwDBAIfOuADBAIfO0wDBAIfO2ADBAIfO3ADBAIfO3gwDAMEAx87iAME
Ax87kAMEBB87oAMEAh874AMEAh876DANBgkqhkiG9w0BAQsFAAOCAQEAfnFhlX+6
vu/tuoGq3sABsysCJ7tXlKDQn1slyqLV/7ENkHUhPTGWAhBpL1mbHtixQzGfhgXz
KXDuLvyR3qJTPc4x8M969FJSdcnCCnEfl8NqpWZvBt/6/VeExeU0l3KscL3swZ7G
5VRwlmwdenAI1yIT5w1PXvmaw0vtGdDTBjaZWCdvdEWLQPZtaDftNuDiZMJp8N7b
UN9JivQE2x0eLRkyhrI2eDzDXhusnsfSTnf2FtwQhGcIXAQ05PPi+nfZUyCxh6zA
Y++SHOtv6GEl4sO3OZAQntihIudcyTojiexHiQkzYb7Mk8Shahmjp5XIWNAfMaly
O7U1vpz5vaNo6A==
-----END CERTIFICATE-----
Generated at Fri May 9 19:03:30 2025 by rpki-client