Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6km3s2oGppPt45KDIKf4RFaYZCA.roa
File: 6km3s2oGppPt45KDIKf4RFaYZCA.roa (raw, json)
Hash identifier: Gzyi+1daJ9kr8qkonlV57tCoGgIASQ0AVqtlbPg+R6s=
Subject key identifier: EA:49:B7:B3:6A:06:A6:93:ED:E3:92:83:20:A7:F8:44:56:98:64:20
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01969A29C46A1DE4B8F3F4F750C80E59F77D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6km3s2oGppPt45KDIKf4RFaYZCA.roa
Signing time: Sun 04 May 2025 07:19:10 +0000
ROA not before: Sun 04 May 2025 07:19:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 31.56.113.0/24 maxlen: 24
31.56.154.0/24 maxlen: 24
31.56.158.0/24 maxlen: 24
31.56.159.0/24 maxlen: 24
31.56.168.0/24 maxlen: 24
31.56.169.0/24 maxlen: 24
31.56.170.0/24 maxlen: 24
31.56.171.0/24 maxlen: 24
31.56.174.0/24 maxlen: 24
31.56.175.0/24 maxlen: 24
31.57.24.0/22 maxlen: 24
31.57.28.0/22 maxlen: 24
31.57.48.0/22 maxlen: 24
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.105.0/24 maxlen: 24
31.57.106.0/24 maxlen: 24
31.57.107.0/24 maxlen: 24
31.57.108.0/24 maxlen: 24
31.57.109.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.212.0/22 maxlen: 24
217.60.0.0/21 maxlen: 24
217.60.0.0/24 maxlen: 24
217.60.1.0/24 maxlen: 24
217.60.2.0/24 maxlen: 24
217.60.4.0/24 maxlen: 24
217.60.5.0/24 maxlen: 24
217.60.6.0/24 maxlen: 24
217.60.12.0/22 maxlen: 24
217.60.12.0/24 maxlen: 24
217.60.13.0/24 maxlen: 24
217.60.14.0/24 maxlen: 24
217.60.24.0/22 maxlen: 24
217.60.36.0/22 maxlen: 24
217.60.44.0/22 maxlen: 24
217.60.56.0/21 maxlen: 24
217.60.56.0/24 maxlen: 24
217.60.57.0/24 maxlen: 24
217.60.58.0/24 maxlen: 24
217.60.59.0/24 maxlen: 24
217.60.60.0/24 maxlen: 24
217.60.61.0/24 maxlen: 24
217.60.62.0/24 maxlen: 24
217.60.63.0/24 maxlen: 24
217.60.188.0/22 maxlen: 24
217.60.192.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 May 2025 07:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9a:29:c4:6a:1d:e4:b8:f3:f4:f7:50:c8:0e:59:f7:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 4 07:19:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea49b7b36a06a693ede3928320a7f84456986420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f6:b3:fd:7a:c5:1c:78:6f:d5:4b:09:86:b5:
e3:5f:ed:a8:35:93:47:30:e9:63:d6:34:6a:25:5e:
08:c5:52:29:a3:18:b0:68:dc:0e:62:aa:b8:47:35:
10:f8:3f:2a:25:0a:f9:72:fa:3e:e9:77:a3:0e:3c:
54:f7:fd:6c:b0:1b:28:99:1c:6a:0d:7f:13:43:dd:
b3:2b:ea:ea:a0:ee:86:f0:67:06:88:6b:86:19:09:
a2:ad:33:9e:44:73:47:b2:06:05:76:9c:4b:39:55:
84:b7:12:a2:a3:8f:e9:16:ca:a3:e8:b4:b0:13:ee:
c0:3e:6c:b0:eb:bf:33:0b:db:3a:b7:fa:bb:d2:d0:
44:21:55:f7:ec:d6:1c:b9:37:3d:19:1e:fc:4b:77:
36:b2:12:24:70:1f:31:14:98:c9:84:ea:07:47:68:
c4:15:1c:b6:51:06:17:9d:80:59:ec:19:69:a3:fb:
83:fa:c8:5e:6d:ac:cf:b5:36:2e:79:bf:71:df:80:
e4:e4:db:18:12:cc:e8:35:01:fb:8c:6c:cc:15:89:
5e:cf:28:1c:dd:27:69:3b:0c:1c:b5:df:c5:a1:9f:
c3:a0:4b:10:72:cf:c1:e2:de:f1:84:44:f8:ea:bc:
5d:f3:9f:8d:07:08:06:0f:4d:d5:0f:3e:66:56:e5:
28:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:49:B7:B3:6A:06:A6:93:ED:E3:92:83:20:A7:F8:44:56:98:64:20
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6km3s2oGppPt45KDIKf4RFaYZCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.113.0/24
31.56.154.0/24
31.56.158.0/23
31.56.168.0/22
31.56.174.0/23
31.57.24.0/21
31.57.48.0/20
31.57.105.0-31.57.109.255
31.58.34.0/23
31.58.212.0/22
217.60.0.0/21
217.60.12.0/22
217.60.24.0/22
217.60.36.0/22
217.60.44.0/22
217.60.56.0/21
217.60.188.0-217.60.195.255
Signature Algorithm: sha256WithRSAEncryption
90:31:80:97:e4:b0:19:94:98:66:db:44:7b:88:38:1a:98:43:
f1:b0:5e:2d:08:c0:94:16:64:5c:04:9c:9c:8b:e5:4b:56:85:
f9:06:1d:9d:fc:c5:36:e0:9f:a5:10:0e:63:f7:ad:a8:94:36:
16:5e:6b:30:5b:fb:5e:5a:30:f6:6d:9d:8c:90:45:0d:3d:f5:
fb:c8:d6:a1:bc:f5:73:d3:af:42:41:d8:ae:3f:16:06:dd:ba:
01:1c:9b:bc:f0:6d:c4:94:4f:57:be:83:06:56:24:4f:31:04:
60:85:4e:22:60:aa:4e:36:43:df:97:ea:7e:1d:f8:8e:a0:de:
ac:69:92:6c:b5:5a:43:5f:95:b8:72:ec:67:95:89:ab:1a:35:
ee:6b:70:b4:e5:5e:8a:bc:48:53:59:fa:b7:66:c9:be:ff:db:
0f:fb:10:e7:93:99:fd:71:74:35:1a:b7:ec:b4:56:ca:4d:25:
57:d2:85:81:58:63:d9:d6:ab:88:b4:19:34:29:ac:72:58:21:
4d:43:74:09:3e:dc:61:82:73:50:c2:26:93:c4:99:2c:06:0e:
f2:9d:06:96:8d:63:a2:6b:6a:1e:05:bf:52:2c:4c:92:ad:3d:
57:80:ca:29:29:8f:87:cc:a3:ce:37:e7:54:e9:ab:4d:96:ef:
f4:00:36:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:34:34 2025 by rpki-client