Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/45_vwlh_8ARzzTJLi0dfnynOXag.roa
File: 45_vwlh_8ARzzTJLi0dfnynOXag.roa (raw, json)
Hash identifier: 9isjQr18p4Fh1d3RS+U0VDB997eRNOcF6yT2L5FV1Ek=
Subject key identifier: E3:9F:EF:C2:58:7F:F0:04:73:CD:32:4B:8B:47:5F:9F:29:CE:5D:A8
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197C5CBE2CFEAD5E919137F2330E239E2C8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/45_vwlh_8ARzzTJLi0dfnynOXag.roa
Signing time: Tue 01 Jul 2025 11:42:42 +0000
ROA not before: Tue 01 Jul 2025 11:42:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 31.56.42.0/23 maxlen: 23
31.56.180.0/23 maxlen: 23
31.56.190.0/23 maxlen: 23
31.57.238.0/24 maxlen: 24
31.58.87.0/24 maxlen: 24
31.58.220.0/23 maxlen: 23
31.59.138.0/23 maxlen: 23
31.59.168.0/23 maxlen: 23
31.59.172.0/24 maxlen: 24
31.59.173.0/24 maxlen: 24
31.59.174.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 02 Jul 2025 13:08:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:cb:e2:cf:ea:d5:e9:19:13:7f:23:30:e2:39:e2:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 1 11:42:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e39fefc2587ff00473cd324b8b475f9f29ce5da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ad:f9:eb:40:0f:74:31:be:8b:a1:26:88:14:
b9:00:03:8e:49:c5:fc:5d:bc:53:b6:fc:83:8f:ad:
2c:e8:04:00:12:81:87:8a:b8:bd:77:ba:96:c7:35:
81:aa:89:81:8a:29:44:f9:b2:44:b6:21:a4:4f:30:
0f:18:83:63:eb:96:7d:44:26:0b:cc:76:08:a1:27:
2d:70:56:6e:1b:82:d1:4d:b9:80:46:45:47:89:6d:
4c:f9:09:a3:0b:55:9d:2f:a5:98:72:5e:f2:d5:f8:
6f:52:95:5a:93:ae:89:df:53:ba:80:e4:2a:cd:2c:
5f:6f:e3:e4:fc:be:15:90:5d:37:ce:5d:d5:74:17:
7c:5c:9d:f1:14:f4:41:a3:97:25:84:18:42:7b:ef:
cd:1f:d5:af:b0:9a:0c:cf:06:5d:36:b1:d7:d6:89:
70:db:9a:18:45:56:55:2c:39:ff:31:24:cb:6e:a4:
da:37:f9:56:a4:08:1c:ff:8c:6a:6e:83:76:af:fe:
8d:07:d6:d8:7f:ec:6c:21:6f:0f:05:c3:fb:8c:3f:
96:ea:d7:52:fa:c6:4a:ae:e4:e7:5b:0d:cb:5d:fa:
9b:e5:8a:c3:54:51:60:6f:35:87:76:e0:ac:66:4b:
a1:9d:e9:6e:68:7c:5e:a0:bc:27:ac:69:14:ec:ea:
b4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:9F:EF:C2:58:7F:F0:04:73:CD:32:4B:8B:47:5F:9F:29:CE:5D:A8
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/45_vwlh_8ARzzTJLi0dfnynOXag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.42.0/23
31.56.180.0/23
31.56.190.0/23
31.57.238.0/24
31.58.87.0/24
31.58.220.0/23
31.59.138.0/23
31.59.168.0/23
31.59.172.0/22
Signature Algorithm: sha256WithRSAEncryption
89:5e:84:4d:3c:fc:1b:6c:28:3e:3e:23:87:9d:10:7e:01:94:
2c:d4:68:50:80:59:c3:02:fd:4e:bc:da:96:dd:25:49:27:ad:
89:2e:fd:8d:81:da:87:c0:76:59:9e:3b:47:0f:6c:55:8d:ad:
22:92:5c:2d:24:f7:43:bf:76:f0:a3:11:85:16:1c:cf:cc:9a:
56:01:c8:28:1d:fa:12:ef:90:8c:ab:e7:f3:12:77:41:df:9f:
1c:5e:c8:fa:ea:bb:35:10:03:c4:04:6c:a2:4a:93:1f:99:a8:
fd:9b:c2:f6:de:83:bb:71:16:6f:b1:e5:f5:13:1f:5b:5a:4c:
22:72:87:16:e0:0e:e3:6f:66:6b:2a:12:c2:ce:80:47:a9:21:
3f:c4:ab:4c:6d:72:ba:74:62:9d:71:cf:a4:de:02:9e:42:95:
9f:e3:fd:06:4d:3d:e2:be:a0:1e:d2:74:1c:b6:32:93:d3:fe:
6e:75:c2:77:06:3f:8c:8e:11:92:16:0c:80:60:06:d5:12:61:
0f:29:fa:75:82:47:dd:1b:68:c7:bd:a3:34:94:45:dd:e9:31:
4c:ca:94:35:dc:9d:0e:73:04:17:f5:a1:92:75:a5:c4:c3:81:
29:4f:da:1d:f5:dc:f2:2f:d6:ae:e0:e0:b3:de:20:18:c2:04:
4a:3f:10:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:36:56 2025 by rpki-client