Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_gs332Z8ECtJoCc-4huOvC5uFuc.roa
File: _gs332Z8ECtJoCc-4huOvC5uFuc.roa (raw, json)
Hash identifier: IxwMfHbYIHp2WyrCkGN+80d32iHClEkrT8Yl1Ulqu+M=
Subject key identifier: FE:0B:37:DF:66:7C:10:2B:49:A0:27:3E:E2:1B:8E:BC:2E:6E:16:E7
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196905F0D89399656C3D0C049ED9947D0E8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_gs332Z8ECtJoCc-4huOvC5uFuc.roa
Signing time: Fri 02 May 2025 09:41:10 +0000
ROA not before: Fri 02 May 2025 09:41:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.48.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.176.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.184.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/22 maxlen: 24
31.56.224.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.57.10.0/24 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.103.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.111.0/24 maxlen: 24
31.57.115.0/24 maxlen: 24
31.57.118.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.171.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.196.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.230.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.238.0/24 maxlen: 24
31.57.249.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.50.0/24 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.86.0/24 maxlen: 24
31.58.141.0/24 maxlen: 24
31.58.144.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.196.0/22 maxlen: 24
31.58.204.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.36.0/22 maxlen: 24
31.59.44.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 02 May 2025 11:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:5f:0d:89:39:96:56:c3:d0:c0:49:ed:99:47:d0:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 2 09:41:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe0b37df667c102b49a0273ee21b8ebc2e6e16e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6c:02:bc:56:1c:d0:4b:9b:aa:d3:63:dc:85:
55:23:46:11:d8:69:56:38:b8:2a:e5:47:3f:45:d7:
42:7f:83:a7:97:1f:8e:e6:69:f9:a7:0d:79:1e:e9:
95:21:14:51:3d:dc:19:46:03:fc:3e:19:40:39:64:
47:cf:bd:f3:93:3d:39:ea:65:fb:8d:25:3b:52:83:
79:e0:96:7c:ac:7c:43:e9:1e:e2:5e:a7:9e:c3:54:
e3:e0:c8:4e:4e:e7:d2:57:c6:36:0c:4b:53:a4:7d:
f5:d9:c8:b5:a4:1c:f3:1d:ac:bd:51:4f:95:74:49:
99:4a:13:66:d2:2f:57:4d:49:9a:20:ed:b3:14:8a:
76:a8:7b:66:53:c5:ce:04:14:6e:fb:f2:26:2c:a0:
e8:06:c3:d3:c5:ba:fa:17:c3:86:42:8d:81:52:5a:
65:c8:3a:5e:ec:e0:a7:d5:52:ec:76:2f:e1:3d:ee:
42:f4:22:f7:ba:7c:a6:91:5f:3c:40:08:ed:03:e3:
68:b9:1a:44:77:43:5e:dd:67:a2:b1:0c:ee:d0:67:
f7:77:19:5d:d4:3a:3a:9d:dc:fd:b3:e1:2d:a6:59:
6c:64:16:64:96:42:57:47:7a:4c:72:1e:fb:1d:fc:
68:03:dd:f3:ff:ac:1c:d7:0d:ee:2c:cb:7f:51:5b:
af:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0B:37:DF:66:7C:10:2B:49:A0:27:3E:E2:1B:8E:BC:2E:6E:16:E7
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_gs332Z8ECtJoCc-4huOvC5uFuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.48.0/24
31.56.57.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.176.0/20
31.56.200.0/22
31.56.208.0/21
31.56.220.0-31.56.231.255
31.56.236.0/22
31.57.10.0/24
31.57.36.0/23
31.57.103.0-31.57.111.255
31.57.115.0/24
31.57.118.0/24
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.188.255
31.57.192.0-31.57.196.255
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.230.0/24
31.57.232.0/22
31.57.238.0/24
31.57.249.0-31.57.255.255
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.84.0/22
31.58.141.0/24
31.58.144.0/24
31.58.152.0/22
31.58.172.0/22
31.58.196.0/22
31.58.204.0/22
31.58.220.0-31.58.227.255
31.59.36.0/22
31.59.44.0/22
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.151.255
31.59.160.0/20
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:5c:a6:19:80:4e:18:f7:d0:e1:f9:27:2e:6a:3c:72:21:99:
f7:ca:0c:9a:ee:84:10:9e:7c:01:49:81:0d:c7:e3:e0:5f:ea:
68:8a:f3:cd:76:56:8a:50:f2:ca:4b:62:27:8f:c1:07:92:68:
9c:ca:95:c7:8a:d2:bb:11:2e:39:44:65:dc:d1:f4:1f:f3:77:
14:85:d4:55:26:06:a5:d3:b8:ad:d2:6f:b2:2b:4b:85:64:3e:
ff:4b:b5:67:df:19:70:69:fd:00:cf:a9:3e:46:de:b6:ce:fd:
72:c1:65:7b:ec:ee:53:72:b8:fe:63:cb:7e:4d:a7:9c:cd:af:
10:dc:00:a0:dc:60:04:02:fb:ab:a3:08:bf:ca:51:f7:7e:4d:
6e:2e:dc:b1:2a:b1:7a:37:1c:73:b2:03:78:2a:c9:31:76:e9:
72:06:63:1a:9f:26:62:8f:c4:a0:db:3c:ef:a3:01:f4:8b:f8:
fe:78:43:3f:fd:d8:1b:55:83:2b:23:b0:01:24:b1:ce:d0:e3:
c4:90:1c:4d:e4:b5:a4:8d:cf:9f:67:23:16:78:7c:62:ee:8e:
c9:7b:0f:39:3b:3c:3d:01:a0:22:81:15:8f:21:17:5f:ec:73:
b8:3f:1b:a4:e0:f3:10:f4:cb:fc:18:ab:0b:7a:8f:76:6a:82:
2a:bb:ee:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 17:21:13 2025 by rpki-client