Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FThcLgjDLV8YBpH-a9itpVP9_KE.roa
File: FThcLgjDLV8YBpH-a9itpVP9_KE.roa (raw, json)
Hash identifier: NjdR/6UokrPTe6hYk3RQaISDsJDD9mvDyEeeDFe6ssE=
Subject key identifier: 15:38:5C:2E:08:C3:2D:5F:18:06:91:FE:6B:D8:AD:A5:53:FD:FC:A1
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01980E323C2E1680FC669E98493E5E2AD7B7
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FThcLgjDLV8YBpH-a9itpVP9_KE.roa
Signing time: Tue 15 Jul 2025 13:07:09 +0000
ROA not before: Tue 15 Jul 2025 13:07:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31715
IP address blocks: 31.56.181.0/24 maxlen: 24
31.58.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Jul 2025 05:54:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0e:32:3c:2e:16:80:fc:66:9e:98:49:3e:5e:2a:d7:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 15 13:07:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15385c2e08c32d5f180691fe6bd8ada553fdfca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a7:13:a6:9c:c9:9d:1b:04:b2:f9:77:05:ce:
06:33:37:9c:bb:77:14:30:b2:81:48:9d:20:41:5a:
8e:51:b4:6b:d7:fd:91:b0:f9:99:5c:a7:70:61:91:
8d:bb:53:ea:b4:67:d3:03:6b:b4:d4:3e:c8:d5:5c:
1f:5c:fa:46:07:2a:52:86:02:8f:10:9e:be:d1:46:
ee:c8:a1:b3:3a:90:02:db:4b:70:62:69:44:e9:73:
90:62:2b:d2:02:c2:24:8d:26:0b:af:0b:b3:41:77:
b0:be:00:24:12:3d:bb:07:91:d0:99:c1:a2:0f:c9:
fb:d0:c0:db:83:d0:d5:af:73:11:cb:b6:2e:6b:8f:
3f:b3:b9:86:50:2c:02:08:ed:3b:8e:a9:9a:80:c7:
36:71:f5:55:7f:f0:03:91:a7:6e:d3:93:64:39:95:
92:2a:99:9b:76:3d:eb:07:a6:92:ed:09:d7:d3:4c:
d8:90:35:a7:d7:82:32:d4:d9:43:91:76:c8:7e:00:
68:cd:c0:d6:b0:33:ec:5d:0d:fb:ec:f7:80:8a:e0:
13:d7:01:f7:4e:04:1a:48:d4:76:25:40:5a:bc:01:
90:ce:a0:6b:37:59:f1:e3:a5:a6:f7:20:dd:d7:a1:
0d:d4:e4:ac:31:1d:e1:65:54:4e:10:8b:65:97:55:
4c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:38:5C:2E:08:C3:2D:5F:18:06:91:FE:6B:D8:AD:A5:53:FD:FC:A1
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FThcLgjDLV8YBpH-a9itpVP9_KE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.181.0/24
31.58.153.0/24
Signature Algorithm: sha256WithRSAEncryption
11:7e:ce:65:48:5f:11:e7:71:dd:9b:18:13:f1:3b:90:81:60:
ed:f8:d1:3e:92:ef:59:68:49:37:9b:93:69:bb:6e:7e:1f:43:
1a:36:3e:c2:27:3d:1d:69:15:58:08:f4:92:98:4c:b9:b9:d7:
ef:28:c5:10:e5:b3:38:74:92:34:64:3f:80:bd:12:c1:f6:fa:
02:e7:fa:d6:c9:79:e0:03:1d:6d:74:c3:36:b3:91:04:02:0b:
5a:d2:c3:4d:b0:20:17:42:d0:b8:6b:a8:36:d4:75:4b:04:d5:
93:71:fa:5c:a9:44:01:80:dc:18:a1:15:9a:e1:00:48:16:6f:
db:29:e0:d7:02:0f:98:6b:d0:9f:88:c0:d8:e1:15:c5:90:53:
c3:87:a0:fd:2f:a1:77:7c:70:48:a0:d0:09:18:3c:4e:80:22:
ee:00:2f:4f:a5:f2:a7:39:48:f6:d7:58:52:2d:fe:41:f6:29:
68:3d:fd:cd:e6:0f:86:45:9d:33:cb:48:f5:c7:42:50:15:bc:
81:27:5a:f9:2c:78:dd:00:84:fd:f3:8b:b0:16:8c:8a:59:a9:
39:45:9f:79:21:8b:03:bc:af:b7:76:23:af:ff:7e:e0:24:a0:
6a:35:06:e2:ef:0a:16:13:0e:0a:fc:3d:6e:41:5e:1f:36:53:
78:13:6c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:32:55 2025 by rpki-client