Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TgTYE3WnkAaqyJEipspUv9E0uqI.roa
File: TgTYE3WnkAaqyJEipspUv9E0uqI.roa (raw, json)
Hash identifier: xpfPr3YVmAJt+srFSb9oPz8iFHWZlHrlPfiz31w12D0=
Subject key identifier: 4E:04:D8:13:75:A7:90:06:AA:C8:91:22:A6:CA:54:BF:D1:34:BA:A2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196905C4E8BA76843BD546C922C0699260B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TgTYE3WnkAaqyJEipspUv9E0uqI.roa
Signing time: Fri 02 May 2025 09:38:10 +0000
ROA not before: Fri 02 May 2025 09:38:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.48.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.113.0/24 maxlen: 24
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.176.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.184.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/22 maxlen: 24
31.56.224.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.57.10.0/24 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.103.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.106.0/24 maxlen: 24
31.57.107.0/24 maxlen: 24
31.57.108.0/24 maxlen: 24
31.57.111.0/24 maxlen: 24
31.57.115.0/24 maxlen: 24
31.57.118.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.171.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.196.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.230.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.238.0/24 maxlen: 24
31.57.249.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.50.0/24 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.86.0/24 maxlen: 24
31.58.141.0/24 maxlen: 24
31.58.144.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.196.0/22 maxlen: 24
31.58.204.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.36.0/22 maxlen: 24
31.59.44.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 02 May 2025 09:39:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:5c:4e:8b:a7:68:43:bd:54:6c:92:2c:06:99:26:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 2 09:38:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e04d81375a79006aac89122a6ca54bfd134baa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3b:71:db:50:c7:a3:9e:c1:91:1e:90:d2:f7:
66:63:af:b5:d4:56:2c:2f:53:3e:99:59:c1:07:0d:
9e:1c:af:65:5a:cb:66:e5:0b:bb:71:27:2e:61:60:
18:ce:01:cc:f6:fb:26:07:f5:1a:6e:e4:0b:52:35:
2b:94:4b:59:df:5c:83:ec:12:fd:00:56:3c:58:62:
88:1d:fb:3f:cc:e0:aa:0e:70:b9:31:ba:71:83:41:
d6:6c:1a:ff:e5:1d:04:aa:53:0a:90:44:58:62:9d:
52:a6:f3:2b:f2:15:21:a1:aa:ff:7e:2e:dc:80:ce:
b5:67:90:91:6b:60:b0:f2:f1:cc:34:22:3f:c4:60:
45:a7:c6:a3:1e:5a:53:e9:dc:5f:2a:74:34:db:c1:
18:da:86:3b:c9:25:7b:1c:fb:4f:e6:b5:d0:92:32:
8a:82:f0:a5:78:ef:5e:59:66:40:63:83:f3:b2:a8:
de:f8:ba:7d:16:95:c6:e5:f8:73:d7:51:4b:31:e2:
ac:a0:97:2f:1b:a9:c2:7d:1c:3f:78:ac:51:c5:59:
7e:f2:23:e5:9d:43:32:50:a4:4a:6b:21:25:4d:f3:
88:57:dd:4c:f6:fa:2a:84:69:c6:8c:f7:5a:9a:fd:
0c:1e:55:d2:4d:53:27:ea:1f:df:18:4f:81:97:2c:
87:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:04:D8:13:75:A7:90:06:AA:C8:91:22:A6:CA:54:BF:D1:34:BA:A2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TgTYE3WnkAaqyJEipspUv9E0uqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.48.0/24
31.56.57.0/24
31.56.90.0/23
31.56.104.0/21
31.56.113.0-31.56.115.255
31.56.118.0-31.56.123.255
31.56.176.0/20
31.56.200.0/22
31.56.208.0/21
31.56.220.0-31.56.231.255
31.56.236.0/22
31.57.10.0/24
31.57.36.0/23
31.57.103.0-31.57.111.255
31.57.115.0/24
31.57.118.0/24
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.188.255
31.57.192.0-31.57.196.255
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.230.0/24
31.57.232.0/22
31.57.238.0/24
31.57.249.0-31.57.255.255
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.84.0/22
31.58.141.0/24
31.58.144.0/24
31.58.152.0/22
31.58.172.0/22
31.58.196.0/22
31.58.204.0/22
31.58.220.0-31.58.227.255
31.59.36.0/22
31.59.44.0/22
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.151.255
31.59.160.0/20
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
51:cf:62:a9:44:71:43:34:7e:34:33:78:17:8d:ec:81:c6:5d:
fe:02:94:9e:86:2a:55:b2:44:92:3a:ac:0e:62:b5:c2:48:24:
d5:a2:cc:84:9d:e1:51:00:e6:50:e4:08:75:c4:f1:d8:89:f6:
25:16:50:1f:4a:99:26:be:3d:fd:95:15:9c:36:ce:50:99:74:
55:13:63:23:0b:91:0d:bf:70:b8:7a:0c:98:df:b7:46:37:aa:
68:51:9e:07:77:d4:25:9d:86:8a:68:bb:d7:7c:c2:02:eb:6b:
42:ef:32:16:25:59:55:d2:ac:0d:68:e3:36:d7:a2:d2:0f:c2:
fa:2c:ea:6f:48:44:7a:26:59:12:41:13:1f:67:21:47:30:c9:
85:07:c4:c2:3b:e8:a9:ae:a1:a3:b5:58:65:f2:02:7c:6b:59:
69:6d:1e:a9:4a:73:25:4f:b9:85:23:77:73:d3:26:9a:fd:be:
7b:29:d8:02:c4:9b:7d:c3:77:bd:93:55:10:d0:0f:00:ff:cb:
94:1f:5e:57:21:16:04:8a:58:52:9e:8f:95:f4:23:73:49:10:
d8:6b:f3:6d:39:5d:26:35:36:fd:bb:e1:5f:67:f3:90:74:64:
c9:6b:d1:dd:4b:ea:82:97:df:d6:50:23:d5:63:e9:b3:9c:93:
f5:27:98:b0
-----BEGIN CERTIFICATE-----
MIIGjjCCBXagAwIBAgISAZaQXE6Lp2hDvVRskiwGmSYLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNTAyMDkzODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTA0ZDgxMzc1YTc5MDA2YWFjODkxMjJhNmNhNTRiZmQxMzRiYWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTtx21DHo57BkR6Q0vdmY6+11FYs
L1M+mVnBBw2eHK9lWstm5Qu7cScuYWAYzgHM9vsmB/UabuQLUjUrlEtZ31yD7BL9
AFY8WGKIHfs/zOCqDnC5Mbpxg0HWbBr/5R0EqlMKkERYYp1SpvMr8hUhoar/fi7c
gM61Z5CRa2Cw8vHMNCI/xGBFp8ajHlpT6dxfKnQ028EY2oY7ySV7HPtP5rXQkjKK
gvCleO9eWWZAY4Pzsqje+Lp9FpXG5fhz11FLMeKsoJcvG6nCfRw/eKxRxVl+8iPl
nUMyUKRKayElTfOIV91M9voqhGnGjPdamv0MHlXSTVMn6h/fGE+BlyyH5wIDAQAB
o4IDmjCCA5YwHQYDVR0OBBYEFE4E2BN1p5AGqsiRIqbKVL/RNLqiMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvVGdUWUUzV25rQWFxeUpFaXBzcFV2OUUwdXFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBrgYIKwYBBQUHAQcBAf8EggGdMIIBmTCCAZUEAgABMIIB
jQMEAR84BAMEAB84GAMEAB84MAMEAB84OQMEAR84WgMEAx84aDAMAwQAHzhxAwQC
HzhwMAwDBAEfOHYDBAIfOHgDBAQfOLADBAIfOMgDBAMfONAwDAMEAh843AMEAx84
4AMEAh847AMEAB85CgMEAR85JDAMAwQAHzlnAwQEHzlgAwQAHzlzAwQAHzl2AwQD
Hzl4AwQBHzmEAwQDHzmIAwQBHzmSAwQCHzmoMAwDBAQfObADBAAfObwwDAMEBh85
wAMEAB85xAMEAR85yDAMAwQEHznQAwQCHzngAwQAHznmAwQCHznoAwQAHznuMAsD
BAAfOfkDAwEfOAMEAR86IgMEAB86KAMEAR86MgMEAh86RAMEAh86VAMEAB86jQME
AB86kAMEAh86mAMEAh86rAMEAh86xAMEAh86zDAMAwQCHzrcAwQCHzrgAwQCHzsk
AwQCHzssAwQCHztMAwQCHztgAwQCHztwAwQCHzt4MAwDBAMfO4gDBAMfO5ADBAQf
O6ADBAIfO+ADBAIfO+gwDQYJKoZIhvcNAQELBQADggEBAFHPYqlEcUM0fjQzeBeN
7IHGXf4ClJ6GKlWyRJI6rA5itcJIJNWizISd4VEA5lDkCHXE8diJ9iUWUB9KmSa+
Pf2VFZw2zlCZdFUTYyMLkQ2/cLh6DJjft0Y3qmhRngd31CWdhopou9d8wgLra0Lv
MhYlWVXSrA1o4zbXotIPwvos6m9IRHomWRJBEx9nIUcwyYUHxMI76KmuoaO1WGXy
AnxrWWltHqlKcyVPuYUjd3PTJpr9vnsp2ALEm33Dd72TVRDQDwD/y5QfXlchFgSK
WFKej5X0I3NJENhr8205XSY1Nv274V9n85B0ZMlr0d1L6oKX39ZQI9Vj6bOck/Un
mLA=
-----END CERTIFICATE-----
Generated at Sun May 11 15:44:33 2025 by rpki-client