Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bJIY-FbUCWckElnizkaflhdrKKI.roa
File: bJIY-FbUCWckElnizkaflhdrKKI.roa (raw, json)
Hash identifier: CWVEWeykE9Ge8wGb8WoTo4LvsaJhlrJAGOdsOgXoGmQ=
Subject key identifier: 6C:92:18:F8:56:D4:09:67:24:12:59:E2:CE:46:9F:96:17:6B:28:A2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0198D2B1CFCF8A865FAE82F26A2077C07673
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bJIY-FbUCWckElnizkaflhdrKKI.roa
Signing time: Fri 22 Aug 2025 16:52:05 +0000
ROA not before: Fri 22 Aug 2025 16:52:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.28.0/22 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.90.0/24 maxlen: 24
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.180.0/23 maxlen: 23
31.56.188.0/22 maxlen: 24
31.56.190.0/23 maxlen: 23
31.56.191.0/24 maxlen: 24
31.56.192.0/22 maxlen: 22
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.216.0/22 maxlen: 22
31.56.220.0/23 maxlen: 23
31.56.224.0/23 maxlen: 23
31.56.224.0/24 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.230.0/23 maxlen: 23
31.56.236.0/22 maxlen: 24
31.56.236.0/23 maxlen: 23
31.57.12.0/23 maxlen: 24
31.57.14.0/23 maxlen: 24
31.57.24.0/22 maxlen: 24
31.57.28.0/22 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.39.0/24 maxlen: 24
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.94.0/23 maxlen: 23
31.57.120.0/22 maxlen: 24
31.57.120.0/23 maxlen: 23
31.57.124.0/22 maxlen: 24
31.57.126.0/23 maxlen: 23
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.186.0/23 maxlen: 23
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.200.0/24 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.122.0/24 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/23 maxlen: 23
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 23 Aug 2025 05:53:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d2:b1:cf:cf:8a:86:5f:ae:82:f2:6a:20:77:c0:76:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 22 16:52:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c9218f856d40967241259e2ce469f96176b28a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0a:ca:a0:88:cb:bd:a2:8e:4a:a3:3c:06:e9:
1e:39:7f:6e:d4:09:ff:0d:83:32:dd:38:04:54:06:
f5:2c:2c:70:1f:af:a0:70:bf:c2:fb:ba:ff:d8:0b:
35:6b:ed:2a:86:5f:ec:72:77:28:dd:b7:71:2c:16:
04:f6:91:e9:14:cd:86:22:15:f7:fe:13:be:86:c6:
b6:9f:de:e4:ef:68:52:cb:50:83:2e:4d:60:df:6c:
32:65:f2:2a:58:0f:42:ba:f3:01:62:b7:98:cf:a0:
dc:4a:b9:d1:c7:e3:8b:0d:59:f6:8d:6f:8d:e0:8d:
38:8c:e8:79:3f:24:5e:71:69:2d:41:04:1c:cf:ec:
85:58:35:f8:02:fe:2d:42:94:bc:8f:3b:c1:03:6e:
39:75:5b:42:dd:8e:1f:dd:d8:5c:e1:9a:61:95:99:
57:54:59:99:83:15:b9:0a:8e:a9:4a:3b:f7:09:78:
d7:50:ec:f1:d9:d8:67:82:55:5d:8a:71:01:17:c8:
1d:ea:82:5b:6f:77:e9:ca:ee:e5:0d:04:79:3b:0c:
62:e2:d9:12:4e:21:1b:30:c4:8d:30:05:9e:77:16:
4d:1b:d8:6b:f8:05:01:c1:f3:21:6e:bc:d7:24:43:
2a:ee:57:b8:18:f6:b3:13:73:ad:25:e3:19:f6:71:
48:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:92:18:F8:56:D4:09:67:24:12:59:E2:CE:46:9F:96:17:6B:28:A2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bJIY-FbUCWckElnizkaflhdrKKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.28.0/22
31.56.57.0/24
31.56.71.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0-31.56.195.255
31.56.200.0/22
31.56.208.0-31.56.221.255
31.56.224.0/23
31.56.228.0/22
31.56.236.0/22
31.57.12.0/22
31.57.24.0/21
31.57.36.0/22
31.57.52.0-31.57.63.255
31.57.94.0/23
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.122.0/24
31.59.136.0-31.59.151.255
31.59.160.0-31.59.169.255
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:fd:e0:03:1f:bb:34:1f:4b:87:71:9e:ea:30:a5:5e:f3:fd:
15:ab:c2:04:56:4b:bd:7e:cd:77:5d:b4:11:2d:f4:6a:bd:45:
de:9e:b5:c9:21:db:fb:62:a0:e6:f7:29:ee:64:99:b3:6e:00:
8a:2c:71:07:6c:3f:2d:53:1e:34:e0:78:58:4e:17:c3:5d:c2:
49:7e:68:99:df:dd:bd:3f:ee:90:e6:e7:85:bc:56:48:35:8b:
e8:a6:77:de:1d:17:2e:0f:54:be:ee:eb:20:7b:24:b2:c5:81:
07:e2:2b:3a:6c:19:e5:64:1f:fc:3a:1d:3f:12:e2:0f:f1:69:
b7:f0:38:1d:f1:de:41:41:09:8b:b3:57:65:6e:d7:9a:4a:80:
43:08:01:eb:cd:47:a0:60:17:5e:bf:61:92:56:44:63:c9:cf:
d2:eb:b5:ac:61:67:ba:7b:11:b4:1f:ef:97:d6:97:f1:06:78:
44:36:ae:d6:25:8f:83:e4:e8:ee:32:54:5b:c0:f0:64:88:45:
ae:a2:cf:be:cc:8b:a2:65:80:03:0e:c2:31:c7:7b:9b:5a:6e:
34:31:a3:82:1b:09:ed:b8:36:42:5b:b2:93:0c:22:16:32:99:
21:55:1b:11:10:07:3e:ea:34:f0:41:83:7d:39:ac:79:b6:d5:
ce:b5:aa:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:22:38 2025 by rpki-client