Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/oR1-HwsMGquIswQN_kaXfYp9VHk.roa
File: oR1-HwsMGquIswQN_kaXfYp9VHk.roa (raw, json)
Hash identifier: RFDkDlrw5OhzmbABosxU34T4enAQ1Mlq6k80IJGn2Q0=
Subject key identifier: A1:1D:7E:1F:0B:0C:1A:AB:88:B3:04:0D:FE:46:97:7D:8A:7D:54:79
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019683090E14787987E39D6779028F28EC77
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/oR1-HwsMGquIswQN_kaXfYp9VHk.roa
Signing time: Tue 29 Apr 2025 19:32:10 +0000
ROA not before: Tue 29 Apr 2025 19:32:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 31.56.49.0/24 maxlen: 24
31.56.156.0/24 maxlen: 24
31.56.192.0/22 maxlen: 22
31.56.204.0/22 maxlen: 22
31.56.210.0/24 maxlen: 24
31.56.212.0/24 maxlen: 24
31.56.216.0/22 maxlen: 22
31.56.223.0/24 maxlen: 24
31.56.232.0/22 maxlen: 24
31.56.234.0/24 maxlen: 24
31.57.92.0/22 maxlen: 22
31.57.129.0/24 maxlen: 24
31.57.132.0/24 maxlen: 24
31.57.142.0/24 maxlen: 24
31.57.151.0/24 maxlen: 24
31.57.191.0/24 maxlen: 24
31.57.206.0/24 maxlen: 24
31.58.33.0/24 maxlen: 24
31.58.90.0/24 maxlen: 24
31.58.157.0/24 maxlen: 24
31.58.160.0/24 maxlen: 24
31.58.163.0/24 maxlen: 24
31.58.168.0/24 maxlen: 24
31.58.224.0/24 maxlen: 24
31.58.230.0/23 maxlen: 24
31.58.231.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.108.0/24 maxlen: 24
31.59.109.0/24 maxlen: 24
31.59.110.0/24 maxlen: 24
31.59.171.0/24 maxlen: 24
31.59.236.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 15:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:09:0e:14:78:79:87:e3:9d:67:79:02:8f:28:ec:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 29 19:32:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a11d7e1f0b0c1aab88b3040dfe46977d8a7d5479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8e:26:d5:3a:54:b3:e5:89:49:2d:52:14:fd:
b4:4e:2e:62:cf:e7:57:bb:00:59:d9:2c:2c:09:b7:
20:eb:75:15:7d:cb:4c:18:05:94:c8:16:2d:02:7c:
58:a2:d6:84:7a:f2:b3:1b:21:e0:0f:84:39:e9:18:
29:90:ef:30:4c:ee:22:09:36:2e:bc:0b:d8:f8:cb:
68:3f:4d:e4:0f:71:d5:6a:a4:fc:56:d7:66:48:f2:
45:e3:cd:ff:c9:73:f3:52:6d:69:41:6a:f1:98:ec:
80:ba:5a:73:d3:7c:41:3f:ee:59:1a:3e:54:f8:67:
53:bb:ff:b1:c9:36:82:21:1f:a8:39:6b:e1:00:48:
f8:af:3f:d4:91:3d:2d:07:4f:f8:59:f0:a3:86:21:
9f:a0:f1:90:56:3c:cf:5e:2d:0c:5c:f8:ec:dc:53:
a7:b7:71:80:43:02:11:20:4b:88:b3:30:1b:79:f5:
98:fc:4b:34:8f:89:a7:03:89:1f:53:7a:bf:3e:bf:
2c:22:a2:18:e3:3f:1d:c6:be:98:22:ad:52:13:4f:
5b:97:5a:16:47:5d:1f:78:9f:5c:63:02:78:da:6a:
87:27:ba:e8:9c:24:dd:f1:23:44:61:4a:38:8a:7c:
91:05:33:a1:a9:55:2f:04:a7:56:9a:41:ab:cd:1b:
77:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:1D:7E:1F:0B:0C:1A:AB:88:B3:04:0D:FE:46:97:7D:8A:7D:54:79
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/oR1-HwsMGquIswQN_kaXfYp9VHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.49.0/24
31.56.156.0/24
31.56.192.0/22
31.56.204.0/22
31.56.210.0/24
31.56.212.0/24
31.56.216.0/22
31.56.223.0/24
31.56.232.0/22
31.57.92.0/22
31.57.129.0/24
31.57.132.0/24
31.57.142.0/24
31.57.151.0/24
31.57.191.0/24
31.57.206.0/24
31.58.33.0/24
31.58.90.0/24
31.58.157.0/24
31.58.160.0/24
31.58.163.0/24
31.58.168.0/24
31.58.224.0/24
31.58.230.0/23
31.59.57.0/24
31.59.108.0-31.59.110.255
31.59.171.0/24
31.59.236.0/22
Signature Algorithm: sha256WithRSAEncryption
47:cf:4f:91:df:ec:f8:9c:30:3f:90:65:33:30:b2:05:b6:2c:
5e:1e:4f:86:0f:55:f3:f0:cc:2e:a3:1c:a0:b7:3d:65:68:a4:
f4:53:f2:3f:15:3e:35:e0:08:61:3e:58:db:90:8d:05:7f:0e:
15:be:2f:10:bf:7d:5b:7b:e6:36:92:cc:bd:07:01:fc:fd:6c:
08:c9:31:42:50:e8:11:c8:df:7e:87:25:f6:25:90:b0:2e:b5:
69:f8:1d:75:b8:2a:1a:e8:69:e1:69:15:b7:03:07:bd:53:7f:
14:80:08:83:9a:bb:b4:6d:b0:20:3c:a1:8d:f3:bd:fa:5e:83:
c8:02:e4:99:ce:5f:ec:68:81:7a:37:8c:93:94:b3:da:32:63:
46:68:d0:e3:74:8c:70:a7:44:5c:d7:ad:f8:bc:77:9b:87:98:
81:cf:56:db:4b:53:20:63:c1:5c:fe:f8:47:dd:d7:f3:3e:56:
92:6a:45:87:81:a4:ba:8d:2a:e9:1d:57:f7:62:ee:f9:14:9d:
42:4a:52:4c:fb:78:f0:bb:75:d3:2d:70:8f:69:62:7d:50:75:
51:93:ec:b9:8d:9f:6a:3f:5a:40:ce:90:1a:dd:33:13:7d:a9:
27:ad:7c:78:41:25:3b:68:83:5f:20:53:ae:56:f7:ef:2b:2e:
d3:68:67:2e
-----BEGIN CERTIFICATE-----
MIIFrDCCBJSgAwIBAgISAZaDCQ4UeHmH451neQKPKOx3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNDI5MTkzMjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTFkN2UxZjBiMGMxYWFiODhiMzA0MGRmZTQ2OTc3ZDhhN2Q1NDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvo4m1TpUs+WJSS1SFP20Ti5iz+dX
uwBZ2SwsCbcg63UVfctMGAWUyBYtAnxYotaEevKzGyHgD4Q56RgpkO8wTO4iCTYu
vAvY+MtoP03kD3HVaqT8VtdmSPJF483/yXPzUm1pQWrxmOyAulpz03xBP+5ZGj5U
+GdTu/+xyTaCIR+oOWvhAEj4rz/UkT0tB0/4WfCjhiGfoPGQVjzPXi0MXPjs3FOn
t3GAQwIRIEuIszAbefWY/Es0j4mnA4kfU3q/Pr8sIqIY4z8dxr6YIq1SE09bl1oW
R10feJ9cYwJ42mqHJ7ronCTd8SNEYUo4inyRBTOhqVUvBKdWmkGrzRt34wIDAQAB
o4ICuDCCArQwHQYDVR0OBBYEFKEdfh8LDBqriLMEDf5Gl32KfVR5MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvb1IxLUh3c01HcXVJc3dRTl9rYVhmWXA5VkhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHNBggrBgEFBQcBBwEB/wSBvTCBujCBtwQCAAEwgbADBAAf
ODEDBAAfOJwDBAIfOMADBAIfOMwDBAAfONIDBAAfONQDBAIfONgDBAAfON8DBAIf
OOgDBAIfOVwDBAAfOYEDBAAfOYQDBAAfOY4DBAAfOZcDBAAfOb8DBAAfOc4DBAAf
OiEDBAAfOloDBAAfOp0DBAAfOqADBAAfOqMDBAAfOqgDBAAfOuADBAEfOuYDBAAf
OzkwDAMEAh87bAMEAB87bgMEAB87qwMEAh877DANBgkqhkiG9w0BAQsFAAOCAQEA
R89Pkd/s+JwwP5BlMzCyBbYsXh5Phg9V8/DMLqMcoLc9ZWik9FPyPxU+NeAIYT5Y
25CNBX8OFb4vEL99W3vmNpLMvQcB/P1sCMkxQlDoEcjffocl9iWQsC61afgddbgq
Guhp4WkVtwMHvVN/FIAIg5q7tG2wIDyhjfO9+l6DyALkmc5f7GiBejeMk5Sz2jJj
RmjQ43SMcKdEXNet+Lx3m4eYgc9W20tTIGPBXP74R93X8z5WkmpFh4Gkuo0q6R1X
92Lu+RSdQkpSTPt48Lt10y1wj2lifVB1UZPsuY2faj9aQM6QGt0zE32pJ618eEEl
O2iDXyBTrlb37ysu02hnLg==
-----END CERTIFICATE-----
Generated at Sun May 11 09:40:41 2025 by rpki-client