Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2E1CEXMJlTHSGnXfWLHVIvf6IK4.roa
File: 2E1CEXMJlTHSGnXfWLHVIvf6IK4.roa (raw, json)
Hash identifier: +8ZqKfCvIVqYtoC1n7YUJWJZRtt/Uq5KPThKgQEQP9Q=
Subject key identifier: D8:4D:42:11:73:09:95:31:D2:1A:75:DF:58:B1:D5:22:F7:FA:20:AE
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01975962385C79FA128E081A9768D5010E04
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2E1CEXMJlTHSGnXfWLHVIvf6IK4.roa
Signing time: Tue 10 Jun 2025 10:28:18 +0000
ROA not before: Tue 10 Jun 2025 10:28:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212477
IP address blocks: 31.59.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Jun 2025 14:44:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:62:38:5c:79:fa:12:8e:08:1a:97:68:d5:01:0e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 10 10:28:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d84d421173099531d21a75df58b1d522f7fa20ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:80:5e:5f:3c:1c:5c:73:1d:6c:a6:81:1c:66:
53:2c:b5:cc:aa:33:34:8e:58:6e:62:19:b3:34:29:
8f:96:52:e7:23:41:a7:bc:4d:e9:5b:be:5c:38:24:
26:f8:4b:63:ac:eb:89:e8:2c:e5:d9:0e:b2:7c:d4:
e6:0a:17:cc:d4:1b:0b:30:f6:e0:8f:c1:99:01:4e:
15:ee:16:2e:d6:3a:21:09:d8:a6:0f:73:2d:70:ed:
67:d4:fe:ea:b0:7a:32:d3:3c:9c:6c:b6:bc:83:f9:
65:49:8f:8b:95:03:f7:e9:96:f9:23:39:bd:8d:2a:
a2:76:f0:f0:0e:ec:35:1f:24:b5:af:64:10:99:d9:
56:46:f6:bc:fa:fc:f8:fb:e1:d2:d5:ba:0a:86:29:
76:1f:2d:86:5d:6d:fe:a3:4b:31:8a:61:b0:97:c0:
e6:a2:dc:33:af:88:1c:b7:34:54:02:95:e8:af:75:
c1:7a:c2:9c:e8:41:a3:b7:a1:f8:83:5e:bd:b5:c3:
bc:3d:17:1c:82:56:04:e5:9d:b7:ab:ea:36:d5:ab:
b8:ab:2c:ba:3e:46:aa:5c:34:5b:e6:24:bc:1e:05:
ac:bf:45:a7:3d:c4:79:28:1c:ea:29:cf:3f:ec:c0:
9f:c4:1c:69:12:ed:b0:0a:78:64:05:f0:0a:24:30:
f5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:4D:42:11:73:09:95:31:D2:1A:75:DF:58:B1:D5:22:F7:FA:20:AE
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2E1CEXMJlTHSGnXfWLHVIvf6IK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.128.0/24
Signature Algorithm: sha256WithRSAEncryption
18:e5:ae:ff:51:42:f8:a0:b8:99:29:ef:61:57:da:37:7a:d9:
af:15:f1:0a:03:1f:b2:a1:9a:20:ec:10:09:e7:da:37:b2:64:
05:f1:68:95:cf:3a:e8:b6:59:cd:08:8e:77:75:af:7c:e1:7f:
b6:40:29:c9:4a:6e:ad:37:4a:ac:d1:da:2d:c4:a0:fc:d0:83:
74:8f:be:7d:37:05:d8:b2:2e:cc:fe:8c:5d:5f:16:b9:30:83:
f3:0d:ef:b6:73:2f:bf:fc:39:6d:65:29:a1:12:4b:e2:7d:5b:
d4:b6:2c:29:4d:cd:e6:b8:23:c6:e1:77:e5:64:e3:d9:b8:0c:
a9:9f:dd:45:0d:bb:cb:29:ff:84:9e:ca:87:3c:37:c8:2d:3e:
91:64:1d:ec:61:da:02:1b:0c:b0:d0:e0:1f:64:39:e1:4b:ad:
92:92:73:ef:ce:60:d1:cf:e9:17:18:93:5b:96:69:23:b2:78:
7a:93:c2:2a:e8:4e:af:ce:00:68:fe:2c:04:51:d9:ce:0d:74:
61:73:98:41:2e:ad:8f:ec:5a:ef:c2:98:0a:f1:40:3b:e6:0d:
58:40:3b:f4:d9:db:7a:a4:9d:eb:b9:69:47:2b:0b:3f:6d:9a:
9e:61:95:79:58:b7:a2:62:95:4c:55:9d:c9:25:9d:f3:69:04:
9a:89:78:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:48:54 2025 by rpki-client