Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3UxG0zWb31AVW5p0DMIdqV8pNCg.roa
File: 3UxG0zWb31AVW5p0DMIdqV8pNCg.roa (raw, json)
Hash identifier: ZEylUGli8PPbsmStNCDQCQDLDYViGVkHdasHO76Oinc=
Subject key identifier: DD:4C:46:D3:35:9B:DF:50:15:5B:9A:74:0C:C2:1D:A9:5F:29:34:28
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01983749950A67F344B3692040F5E5F1ECDB
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3UxG0zWb31AVW5p0DMIdqV8pNCg.roa
Signing time: Wed 23 Jul 2025 12:37:05 +0000
ROA not before: Wed 23 Jul 2025 12:37:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 31.56.52.0/22 maxlen: 22
31.56.190.0/24 maxlen: 24
31.57.161.0/24 maxlen: 24
31.57.199.0/24 maxlen: 24
31.59.68.0/24 maxlen: 24
31.59.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 26 Jul 2025 18:09:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:37:49:95:0a:67:f3:44:b3:69:20:40:f5:e5:f1:ec:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 23 12:37:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd4c46d3359bdf50155b9a740cc21da95f293428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b8:a4:3d:65:12:e0:7e:4d:2e:2b:59:b2:5b:
a7:e0:08:6a:53:76:04:b7:2e:ff:4b:fe:44:6e:95:
b2:ef:af:a1:69:05:6c:c0:a2:f7:d2:20:70:cf:f2:
fa:c7:2f:2f:ad:75:3e:fa:43:8c:2a:19:1c:d5:1c:
cb:e2:17:8b:05:5d:55:0a:1b:a5:e1:25:2e:6c:96:
3f:3d:d5:a5:b9:ed:49:21:67:56:cf:46:1d:31:7d:
c3:59:21:a0:ba:24:95:79:11:aa:87:87:a1:92:ac:
c6:3b:08:b9:41:d2:e5:cd:9b:05:25:36:41:2d:60:
5a:d4:8d:8e:32:ba:63:75:4e:b6:cf:29:e9:b5:e5:
0d:0d:66:68:fc:8e:71:ca:ea:1c:3b:28:c4:dc:0b:
88:aa:8c:66:0d:cc:e2:26:3b:cb:e4:dd:0f:77:d2:
bb:b1:8d:7d:19:0b:01:fb:72:04:57:81:72:13:dd:
84:7d:33:85:16:2c:65:53:0d:ed:7d:c1:d1:cd:6e:
99:6d:9e:bf:8d:c6:3c:05:ba:9f:66:15:f3:52:8d:
c2:37:d7:19:bd:a8:dc:2f:2f:03:1c:a3:c1:22:4b:
fb:03:df:f3:62:82:6a:5e:e4:80:5a:8f:ca:01:4e:
e3:2b:40:92:52:cf:62:bc:98:89:ea:fb:9d:6a:e6:
f7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4C:46:D3:35:9B:DF:50:15:5B:9A:74:0C:C2:1D:A9:5F:29:34:28
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3UxG0zWb31AVW5p0DMIdqV8pNCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.52.0/22
31.56.190.0/24
31.57.161.0/24
31.57.199.0/24
31.59.68.0/24
31.59.71.0/24
Signature Algorithm: sha256WithRSAEncryption
29:c9:f1:96:3a:aa:5c:9c:50:1c:fd:a3:4f:0c:ba:0d:eb:76:
bf:e5:5b:52:38:06:8e:9d:2e:4c:0e:46:4e:fe:02:a5:55:5e:
ff:a5:52:33:35:3d:cd:84:f0:46:21:58:aa:fe:5d:ca:11:f1:
c2:11:e0:f9:10:88:0e:01:f4:da:68:f6:0b:51:8c:42:b8:8f:
a2:20:32:a8:38:82:3c:87:cb:ab:8d:e8:d4:58:88:d5:ef:c2:
90:e6:13:4e:33:73:56:bb:98:f1:67:e4:3d:45:e3:97:1f:0b:
ae:50:a8:67:9f:8f:a9:eb:5f:08:b2:ff:f9:80:21:7f:38:44:
54:1f:15:2e:f7:fc:c7:81:85:46:c8:9f:ed:43:22:e3:5e:c3:
33:a7:85:9f:62:b9:36:2a:c1:b9:09:99:d4:ae:87:99:8b:3b:
1c:48:26:c3:64:a1:2a:04:39:2e:48:7a:7f:20:be:aa:24:23:
d4:b6:78:7f:1b:ed:30:c2:f3:08:20:be:43:53:98:c8:ba:bd:
15:ae:61:18:00:e3:15:0a:73:17:97:f2:6b:c1:b0:34:b1:dc:
a1:ee:15:96:36:ff:9b:aa:92:57:45:45:fb:91:69:41:7a:58:
b1:d7:10:cb:43:fd:cc:57:16:f0:f3:cd:eb:57:08:fd:e2:06:
ca:5f:73:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:40:14 2025 by rpki-client