Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hCI8AvLk3GDmSZnhvVTW6yma_Uo.roa
File: hCI8AvLk3GDmSZnhvVTW6yma_Uo.roa (raw, json)
Hash identifier: Qc36d3TB/PbmGwu6JtyT3pkYRpqIwUHPhpWV99GzQqs=
Subject key identifier: 84:22:3C:02:F2:E4:DC:60:E6:49:99:E1:BD:54:D6:EB:29:9A:FD:4A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019677004ECB34C826ADEFB7ACEC1C1C5481
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hCI8AvLk3GDmSZnhvVTW6yma_Uo.roa
Signing time: Sun 27 Apr 2025 11:27:10 +0000
ROA not before: Sun 27 Apr 2025 11:27:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.200.0/24 maxlen: 24
31.56.202.0/24 maxlen: 24
31.57.32.0/24 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.103.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.118.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.171.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.196.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.215.0/24 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.230.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.238.0/24 maxlen: 24
31.57.249.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.50.0/24 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.86.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
31.59.233.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Apr 2025 14:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:00:4e:cb:34:c8:26:ad:ef:b7:ac:ec:1c:1c:54:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 27 11:27:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84223c02f2e4dc60e64999e1bd54d6eb299afd4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c0:15:07:18:6c:7d:55:cb:f6:a8:1c:84:d0:
9c:0d:03:5a:1a:40:e8:e2:97:44:d6:46:f0:19:03:
71:ec:69:04:80:04:2e:34:4c:65:0c:d1:cb:5b:66:
b5:15:ac:e1:e9:8e:2f:60:e5:e9:d3:b1:2e:22:e0:
d4:3f:a0:d4:29:45:15:1c:bc:7b:20:64:c1:17:9d:
7c:5b:40:24:c6:71:e7:f4:b6:3c:ff:50:d0:0b:12:
e4:ee:b2:16:ce:7e:6c:37:99:0e:76:85:ca:ca:e2:
30:5d:39:6f:e5:84:58:34:17:b2:cc:b0:6d:0f:ac:
a3:bf:4e:d8:06:70:51:b4:89:8e:f5:cf:a5:a8:73:
c4:6d:8c:49:14:68:d3:f0:42:93:77:c5:58:07:97:
2f:2f:a2:98:2d:a5:3e:71:a0:29:24:4e:d0:01:72:
07:ad:27:7b:da:c3:55:7c:e0:fb:2e:06:e8:cf:00:
49:29:19:d1:19:16:06:7c:94:6d:bf:21:a9:97:2f:
5f:20:d1:63:3e:02:87:cb:24:34:e9:14:33:62:dc:
ea:ab:83:1f:b1:26:58:b5:69:24:05:d8:31:0a:05:
f7:12:9a:bd:f1:c4:2a:21:86:75:0e:fe:7b:ea:97:
81:4a:64:39:13:cb:c7:95:1d:ff:48:4e:67:3b:a0:
be:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:22:3C:02:F2:E4:DC:60:E6:49:99:E1:BD:54:D6:EB:29:9A:FD:4A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hCI8AvLk3GDmSZnhvVTW6yma_Uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.57.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.32.0/24
31.57.36.0/23
31.57.103.0-31.57.111.255
31.57.118.0/24
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.188.255
31.57.192.0-31.57.196.255
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.230.0/24
31.57.232.0/22
31.57.238.0/24
31.57.249.0-31.57.255.255
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.151.255
31.59.160.0/20
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
75:7c:b1:30:58:aa:27:47:70:57:bc:26:96:b1:2a:33:5c:41:
0d:4b:3a:3b:7d:91:83:25:4d:88:b6:31:4b:ca:58:00:7f:04:
d4:e3:35:f2:75:39:78:55:93:f4:3f:9d:34:4c:b5:0b:49:0d:
22:f6:89:3d:95:2c:1b:72:79:68:6e:a0:30:4d:3a:eb:bc:04:
a6:86:72:99:e4:43:c4:25:3f:af:7c:01:12:a7:7d:66:81:6b:
f5:15:2c:dd:0b:40:a0:44:73:cf:a5:b9:2b:c9:8e:cd:42:06:
85:31:9c:65:bd:04:70:83:8d:d2:0d:8b:0f:c0:e3:09:f2:8c:
fc:3c:b8:d5:7f:22:8f:47:41:36:17:ab:f8:2d:26:00:09:47:
7b:26:5d:5d:2b:8e:36:ad:0d:4f:e7:3c:93:8e:e4:87:df:f0:
0e:17:13:7f:d3:e4:00:e5:fa:58:e2:68:d1:71:70:a3:e8:28:
35:a1:0b:1a:31:bf:a5:1c:d9:0c:0a:38:fe:16:30:e5:f9:47:
06:c1:2e:29:db:f4:54:b8:08:69:5b:72:8c:0b:d1:2a:ac:65:
58:82:c2:73:b7:7a:6d:93:d5:83:e5:c4:25:13:fa:54:b3:7a:
65:dd:b0:b4:b8:cc:5c:da:a6:0c:f7:ee:b9:9b:79:05:f5:28:
ec:62:a4:0b
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgISAZZ3AE7LNMgmre+3rOwcHFSBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNDI3MTEyNzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDIyM2MwMmYyZTRkYzYwZTY0OTk5ZTFiZDU0ZDZlYjI5OWFmZDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocAVBxhsfVXL9qgchNCcDQNaGkDo
4pdE1kbwGQNx7GkEgAQuNExlDNHLW2a1Fazh6Y4vYOXp07EuIuDUP6DUKUUVHLx7
IGTBF518W0AkxnHn9LY8/1DQCxLk7rIWzn5sN5kOdoXKyuIwXTlv5YRYNBeyzLBt
D6yjv07YBnBRtImO9c+lqHPEbYxJFGjT8EKTd8VYB5cvL6KYLaU+caApJE7QAXIH
rSd72sNVfOD7LgbozwBJKRnRGRYGfJRtvyGply9fINFjPgKHyyQ06RQzYtzqq4Mf
sSZYtWkkBdgxCgX3Epq98cQqIYZ1Dv576peBSmQ5E8vHlR3/SE5nO6C+KwIDAQAB
o4IDQjCCAz4wHQYDVR0OBBYEFIQiPALy5Nxg5kmZ4b1U1uspmv1KMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvaENJOEF2TGszR0RtU1puaHZWVFc2eW1hX1VvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBVgYIKwYBBQUHAQcBAf8EggFFMIIBQTCCAT0EAgABMIIB
NQMEAR84BAMEAB84GAMEAB84OQMEAR84WgMEAx84aAMEAR84cjAMAwQBHzh2AwQC
Hzh4AwQCHzjIAwQAHzkgAwQBHzkkMAwDBAAfOWcDBAQfOWADBAAfOXYDBAMfOXgD
BAEfOYQDBAMfOYgDBAEfOZIDBAIfOagwDAMEBB85sAMEAB85vDAMAwQGHznAAwQA
HznEAwQBHznIMAwDBAQfOdADBAIfOeADBAAfOeYDBAIfOegDBAAfOe4wCwMEAB85
+QMDAR84AwQBHzoiAwQAHzooAwQBHzoyAwQCHzpEAwQCHzpUAwQCHzqYAwQCHzqs
MAwDBAIfOtwDBAIfOuADBAIfO0wDBAIfO2ADBAIfO3ADBAIfO3gwDAMEAx87iAME
Ax87kAMEBB87oAMEAh874AMEAh876DANBgkqhkiG9w0BAQsFAAOCAQEAdXyxMFiq
J0dwV7wmlrEqM1xBDUs6O32RgyVNiLYxS8pYAH8E1OM18nU5eFWT9D+dNEy1C0kN
IvaJPZUsG3J5aG6gME0667wEpoZymeRDxCU/r3wBEqd9ZoFr9RUs3QtAoERzz6W5
K8mOzUIGhTGcZb0EcION0g2LD8DjCfKM/Dy41X8ij0dBNher+C0mAAlHeyZdXSuO
Nq0NT+c8k47kh9/wDhcTf9PkAOX6WOJo0XFwo+goNaELGjG/pRzZDAo4/hYw5flH
BsEuKdv0VLgIaVtyjAvRKqxlWILCc7d6bZPVg+XEJRP6VLN6Zd2wtLjMXNqmDPfu
uZt5BfUo7GKkCw==
-----END CERTIFICATE-----
Generated at Fri May 9 16:33:00 2025 by rpki-client