Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kADl_BvvqqBA9Hl2lkfNmaT7q-M.roa
File: kADl_BvvqqBA9Hl2lkfNmaT7q-M.roa (raw, json)
Hash identifier: GE5TEF0RrDuQ6f2+AKerevfgoAjtsb9rI3kvemz7jvY=
Subject key identifier: 90:00:E5:FC:1B:EF:AA:A0:40:F4:79:76:96:47:CD:99:A4:FB:AB:E3
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019692511A4696DEF116145A4F45C8C2902E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kADl_BvvqqBA9Hl2lkfNmaT7q-M.roa
Signing time: Fri 02 May 2025 18:45:10 +0000
ROA not before: Fri 02 May 2025 18:45:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.48.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.176.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.184.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/22 maxlen: 24
31.56.224.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.57.10.0/24 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.115.0/24 maxlen: 24
31.57.118.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.171.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.196.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.225.0/24 maxlen: 24
31.57.230.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.238.0/24 maxlen: 24
31.57.249.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.50.0/24 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.86.0/24 maxlen: 24
31.58.141.0/24 maxlen: 24
31.58.144.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.196.0/22 maxlen: 24
31.58.204.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.36.0/22 maxlen: 24
31.59.44.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 04 May 2025 09:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:92:51:1a:46:96:de:f1:16:14:5a:4f:45:c8:c2:90:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 2 18:45:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9000e5fc1befaaa040f479769647cd99a4fbabe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e0:1f:2f:38:c6:7c:bb:e0:d8:76:8a:1f:38:
58:4b:13:6f:ba:57:4c:1a:43:b4:e6:d1:ce:71:05:
d2:1b:f8:3d:72:b1:3e:60:15:8f:31:61:1a:d9:b7:
9d:3a:bd:de:07:eb:9d:cc:75:84:79:55:ca:59:e9:
25:87:46:21:06:29:ed:ff:aa:bf:e5:dd:4d:af:02:
a7:92:90:1e:d1:c9:79:b2:a5:d2:f3:9d:0d:62:51:
ec:f4:c6:31:f6:91:76:6c:5d:e8:9e:6d:5e:dc:6e:
d5:46:2c:3f:28:35:b4:fa:4f:41:92:33:cc:45:44:
3a:0a:88:db:78:6e:c6:3b:f9:29:1d:3e:be:2e:83:
80:1b:94:62:55:a7:fa:5a:dc:ca:4a:a3:ee:81:40:
56:88:96:b1:a8:6e:bd:2e:e1:17:c9:4e:9a:25:5a:
0d:c0:35:0f:9d:81:5c:19:06:15:02:b3:f9:d4:01:
ed:7e:78:67:99:39:00:13:51:bd:87:87:d8:4f:f2:
bd:e6:c1:b4:5b:cd:f2:d6:e4:b5:93:ae:b3:60:12:
bf:41:ba:3d:e4:51:b9:8c:c4:01:05:f1:4a:f5:31:
28:d5:97:af:86:38:55:46:3f:c5:94:20:17:3f:40:
7a:6e:9d:ae:d5:2d:29:b6:f4:80:7a:d7:00:00:6f:
33:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:00:E5:FC:1B:EF:AA:A0:40:F4:79:76:96:47:CD:99:A4:FB:AB:E3
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kADl_BvvqqBA9Hl2lkfNmaT7q-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.48.0/24
31.56.57.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.176.0/20
31.56.200.0/22
31.56.208.0/21
31.56.220.0-31.56.231.255
31.56.236.0/22
31.57.10.0/24
31.57.36.0/23
31.57.104.0/21
31.57.115.0/24
31.57.118.0/24
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.188.255
31.57.192.0-31.57.196.255
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.230.0/24
31.57.232.0/22
31.57.238.0/24
31.57.249.0-31.57.255.255
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.84.0/22
31.58.141.0/24
31.58.144.0/24
31.58.152.0/22
31.58.172.0/22
31.58.196.0/22
31.58.204.0/22
31.58.220.0-31.58.227.255
31.59.36.0/22
31.59.44.0/22
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.151.255
31.59.160.0/20
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
76:db:68:b6:14:3d:c5:73:ef:00:7d:9c:4e:85:40:0e:2e:8f:
80:53:6a:f9:0a:cf:35:1c:22:05:fd:f4:8c:86:e2:e8:18:4f:
f3:63:21:00:57:77:40:c9:ff:3f:12:b7:cf:94:58:d7:cf:3c:
3b:17:74:8d:20:09:c5:a8:ee:f9:75:97:2b:af:b2:36:35:af:
60:2a:2d:20:63:66:a9:1c:a2:22:59:fe:73:da:b9:4f:81:a9:
7d:ec:08:1d:38:7c:78:bf:a0:55:df:78:46:9b:61:02:a1:d8:
6b:52:a4:57:fc:97:3b:b6:a6:6c:a0:5e:37:75:6c:de:67:e8:
be:1b:01:f9:6f:1c:e7:2c:d3:3c:28:d7:65:5e:16:11:c2:4d:
50:f7:19:b1:12:ce:8a:68:e5:06:24:d6:c0:82:de:95:03:16:
73:67:d6:2d:88:cb:96:c9:31:86:0b:99:91:45:d9:61:f1:62:
6b:4d:ec:5d:78:75:d8:d1:9b:f5:03:9d:86:e1:a4:bc:b9:f9:
b2:bf:05:66:93:cc:18:2a:a0:63:bd:f9:b5:dc:bd:a7:73:c6:
cf:9a:52:0b:dc:94:f6:65:ee:2c:c1:13:72:53:a7:56:1e:83:
b7:07:19:ed:5f:20:3b:19:b7:6d:90:95:bc:02:9b:89:64:90:
61:78:da:69
-----BEGIN CERTIFICATE-----
MIIGfjCCBWagAwIBAgISAZaSURpGlt7xFhRaT0XIwpAuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNTAyMTg0NTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDAwZTVmYzFiZWZhYWEwNDBmNDc5NzY5NjQ3Y2Q5OWE0ZmJhYmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+AfLzjGfLvg2HaKHzhYSxNvuldM
GkO05tHOcQXSG/g9crE+YBWPMWEa2bedOr3eB+udzHWEeVXKWeklh0YhBint/6q/
5d1NrwKnkpAe0cl5sqXS850NYlHs9MYx9pF2bF3onm1e3G7VRiw/KDW0+k9BkjPM
RUQ6CojbeG7GO/kpHT6+LoOAG5RiVaf6WtzKSqPugUBWiJaxqG69LuEXyU6aJVoN
wDUPnYFcGQYVArP51AHtfnhnmTkAE1G9h4fYT/K95sG0W83y1uS1k66zYBK/Qbo9
5FG5jMQBBfFK9TEo1ZevhjhVRj/FlCAXP0B6bp2u1S0ptvSAetcAAG8z1QIDAQAB
o4IDijCCA4YwHQYDVR0OBBYEFJAA5fwb76qgQPR5dpZHzZmk+6vjMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEva0FEbF9CdnZxcUJBOUhsMmxrZk5tYVQ3cS1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBngYIKwYBBQUHAQcBAf8EggGNMIIBiTCCAYUEAgABMIIB
fQMEAR84BAMEAB84GAMEAB84MAMEAB84OQMEAR84WgMEAx84aAMEAR84cjAMAwQB
Hzh2AwQCHzh4AwQEHziwAwQCHzjIAwQDHzjQMAwDBAIfONwDBAMfOOADBAIfOOwD
BAAfOQoDBAEfOSQDBAMfOWgDBAAfOXMDBAAfOXYDBAMfOXgDBAEfOYQDBAMfOYgD
BAEfOZIDBAIfOagwDAMEBB85sAMEAB85vDAMAwQGHznAAwQAHznEAwQBHznIMAwD
BAQfOdADBAIfOeADBAAfOeYDBAIfOegDBAAfOe4wCwMEAB85+QMDAR84AwQBHzoi
AwQAHzooAwQBHzoyAwQCHzpEAwQCHzpUAwQAHzqNAwQAHzqQAwQCHzqYAwQCHzqs
AwQCHzrEAwQCHzrMMAwDBAIfOtwDBAIfOuADBAIfOyQDBAIfOywDBAIfO0wDBAIf
O2ADBAIfO3ADBAIfO3gwDAMEAx87iAMEAx87kAMEBB87oAMEAh874AMEAh876DAN
BgkqhkiG9w0BAQsFAAOCAQEAdttothQ9xXPvAH2cToVADi6PgFNq+QrPNRwiBf30
jIbi6BhP82MhAFd3QMn/PxK3z5RY1888Oxd0jSAJxaju+XWXK6+yNjWvYCotIGNm
qRyiIln+c9q5T4GpfewIHTh8eL+gVd94RpthAqHYa1KkV/yXO7ambKBeN3Vs3mfo
vhsB+W8c5yzTPCjXZV4WEcJNUPcZsRLOimjlBiTWwILelQMWc2fWLYjLlskxhguZ
kUXZYfFia03sXXh12NGb9QOdhuGkvLn5sr8FZpPMGCqgY735tdy9p3PGz5pSC9yU
9mXuLMETclOnVh6DtwcZ7V8gOxm3bZCVvAKbiWSQYXjaaQ==
-----END CERTIFICATE-----
Generated at Sat May 10 03:52:24 2025 by rpki-client