Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8Ia8zBkEifsLBVuU1lro6VIGWTI.roa
File: 8Ia8zBkEifsLBVuU1lro6VIGWTI.roa (raw, json)
Hash identifier: hA9tdcRALOKAf56AvkzndSfJmelb3uoq7k7+C3Se5/c=
Subject key identifier: F0:86:BC:CC:19:04:89:FB:0B:05:5B:94:D6:5A:E8:E9:52:06:59:32
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194E9401E489C8B3810DBA76D46DE933A12
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8Ia8zBkEifsLBVuU1lro6VIGWTI.roa
Signing time: Sun 09 Feb 2025 05:48:00 +0000
ROA not before: Sun 09 Feb 2025 05:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44382
IP address blocks: 31.56.85.0/24 maxlen: 24
31.57.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Feb 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e9:40:1e:48:9c:8b:38:10:db:a7:6d:46:de:93:3a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 9 05:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f086bccc190489fb0b055b94d65ae8e952065932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:df:a5:5f:01:73:ef:36:13:d0:fc:8d:82:8c:
76:0e:19:6b:6f:04:90:cc:68:d7:f1:7c:a4:26:fc:
e9:ed:40:05:11:53:ab:4b:3a:02:9f:53:ee:ac:5d:
f2:df:73:78:23:00:5e:d7:d3:98:6e:53:98:67:48:
0f:6f:13:41:06:0d:23:21:4c:3e:a7:ec:a5:25:5c:
99:0a:21:39:55:6f:88:43:c2:c3:b6:a4:28:ed:29:
36:3a:2c:5d:f1:dc:04:27:df:df:d2:68:0d:3e:c7:
79:94:a4:32:27:42:e9:a1:b1:d5:eb:75:31:99:3a:
04:47:62:e1:94:0f:f3:15:5a:42:58:52:d1:b3:34:
c4:5e:93:b1:b9:86:45:3a:01:cb:4d:3f:60:30:3c:
73:4a:f1:21:88:70:56:15:53:a7:91:ed:37:5e:48:
e5:6a:e7:e1:87:72:a8:b5:07:0c:c7:6e:d1:d9:00:
18:99:36:d8:85:c0:c4:42:98:13:a2:6f:be:0a:e5:
32:15:30:fb:e4:87:9a:11:88:be:67:d8:9c:9a:8f:
66:f0:cf:cd:8f:20:fa:39:aa:4f:2f:31:0b:26:f3:
bc:6f:84:35:a5:dc:0c:06:b6:6e:11:2e:64:dd:a8:
10:cc:61:d6:ed:1f:7f:bb:83:b7:83:28:a1:94:4b:
6b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:86:BC:CC:19:04:89:FB:0B:05:5B:94:D6:5A:E8:E9:52:06:59:32
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8Ia8zBkEifsLBVuU1lro6VIGWTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.85.0/24
31.57.141.0/24
Signature Algorithm: sha256WithRSAEncryption
23:6a:6c:a2:f3:98:98:d1:f9:57:b1:48:b2:7d:df:e6:73:61:
d1:b7:3f:d3:01:d3:86:a2:9e:28:78:d9:11:21:f8:eb:1f:69:
12:90:e3:fd:71:00:0d:e2:0d:23:9b:0f:97:e6:e9:ad:21:70:
83:fa:da:e6:eb:08:79:86:7f:a2:45:bb:e3:66:f5:f7:c8:fa:
ad:b0:81:1d:58:13:ba:89:e9:f9:33:93:d9:18:83:46:87:b4:
a8:52:ef:d3:ec:d8:cf:ec:5a:fb:28:95:43:72:90:1f:75:e3:
7b:71:5d:b7:75:b1:ea:55:26:f9:81:5c:aa:70:3e:7f:98:ea:
83:cb:d5:6c:35:fb:3a:2c:a6:88:02:f0:73:78:5c:0c:86:cb:
73:a7:e9:7b:63:83:d0:aa:6c:21:6c:c4:82:0b:1a:0b:41:4e:
61:8e:a1:41:de:f3:72:b8:a0:79:c7:ec:3f:e2:9e:04:9c:97:
96:61:71:d3:a4:1b:5a:8a:b2:6c:fe:6e:52:b3:9d:00:1f:a4:
2f:c4:3c:5b:85:3e:94:dd:d0:9a:41:ed:9b:6b:cf:a6:40:e2:
bb:70:61:ea:ad:16:59:27:bc:51:9c:f2:17:dc:2c:c6:d7:2c:
b2:9d:5b:89:ba:03:90:95:ea:b2:c5:af:ca:d9:bf:97:8e:2d:
31:26:6d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:44:21 2025 by rpki-client