Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LKgK9J8z9rqXROXtEMvN7K54hF4.roa
File: LKgK9J8z9rqXROXtEMvN7K54hF4.roa (raw, json)
Hash identifier: eHeaoJ/uWZXLh/4nKmAbX55jI3FtU557mZ7U0zlfEvg=
Subject key identifier: 2C:A8:0A:F4:9F:33:F6:BA:97:44:E5:ED:10:CB:CD:EC:AE:78:84:5E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01982C978C6B713CF745433691B5FD67EE12
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LKgK9J8z9rqXROXtEMvN7K54hF4.roa
Signing time: Mon 21 Jul 2025 10:46:26 +0000
ROA not before: Mon 21 Jul 2025 10:46:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 31.56.86.0/24 maxlen: 24
31.57.120.0/24 maxlen: 24
31.57.122.0/24 maxlen: 24
31.57.124.0/24 maxlen: 24
31.57.125.0/24 maxlen: 24
31.57.140.0/24 maxlen: 24
31.57.162.0/23 maxlen: 24
31.57.164.0/23 maxlen: 24
31.57.180.0/24 maxlen: 24
31.57.221.0/24 maxlen: 24
31.58.41.0/24 maxlen: 24
31.58.42.0/24 maxlen: 24
31.58.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Jul 2025 10:52:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2c:97:8c:6b:71:3c:f7:45:43:36:91:b5:fd:67:ee:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 21 10:46:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ca80af49f33f6ba9744e5ed10cbcdecae78845e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c2:64:fd:61:ea:68:5f:6f:84:92:85:8a:bc:
a8:29:b4:d9:a2:00:36:c6:20:e5:21:91:f2:bc:b5:
64:c0:e5:3f:b0:de:25:59:1c:60:d2:41:df:a8:06:
da:61:3a:33:3a:9d:c6:a4:66:d6:26:f7:97:a1:34:
cc:aa:99:b1:27:ab:aa:ed:22:20:48:ef:b8:e7:f4:
0d:90:0c:0c:4d:28:dc:8e:cb:0c:af:f9:8f:31:06:
48:28:f1:cd:f7:82:b8:c2:ad:06:ed:a8:fe:ef:cd:
71:10:95:11:03:dc:36:77:e6:3e:a6:24:a7:1a:28:
8b:96:02:c1:e2:0d:7c:af:6b:f3:74:fb:8f:52:b2:
f2:49:a4:fb:f1:a5:60:72:e5:5b:49:14:e0:83:12:
18:b2:f7:58:74:a1:df:93:20:36:c6:ab:86:f8:6b:
14:82:9f:e9:f3:8a:42:1f:43:46:0d:9e:8a:6b:fa:
e2:e8:75:81:d6:99:45:be:f6:6d:35:fe:1f:f9:ba:
e0:49:58:b4:b6:89:0c:ef:00:4d:e4:35:8d:8f:de:
43:cf:2c:50:fb:28:6a:4e:bf:dd:a9:1e:a5:3f:6f:
7d:b9:a8:cc:4d:52:fa:f9:46:39:77:b9:a1:c4:2f:
3f:15:21:c9:2c:cb:4c:31:f8:a0:25:a6:f3:e4:e8:
ea:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A8:0A:F4:9F:33:F6:BA:97:44:E5:ED:10:CB:CD:EC:AE:78:84:5E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LKgK9J8z9rqXROXtEMvN7K54hF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.86.0/24
31.57.120.0/24
31.57.122.0/24
31.57.124.0/23
31.57.140.0/24
31.57.162.0-31.57.165.255
31.57.180.0/24
31.57.221.0/24
31.58.41.0-31.58.42.255
31.58.48.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:47:5c:e1:a3:7b:72:1d:63:bc:a8:ef:59:ca:cf:5b:df:d3:
6e:2b:a2:e0:f9:16:fb:25:62:70:61:b1:09:84:0f:26:aa:4a:
e3:46:4b:62:6c:94:67:06:58:10:db:36:37:65:a6:bc:28:c0:
ad:01:b4:8b:a0:26:fb:ff:5b:ba:4d:1d:ab:53:2b:81:be:f9:
1d:08:7e:76:e8:e8:9c:5b:fd:e4:a0:68:80:b9:5d:7e:63:7a:
36:ee:b1:2c:a5:bc:08:68:e9:7e:36:62:77:27:b1:85:78:b3:
5d:a3:5d:de:a9:bc:6e:5f:7e:6d:e1:87:22:0c:bc:49:bd:0d:
b6:c6:85:e7:34:36:eb:06:4a:d2:db:0c:9e:3e:0f:77:46:7d:
b0:c3:18:a3:ef:b4:de:15:1d:20:86:d5:21:22:9f:57:9b:ac:
7c:a2:42:9c:1c:88:29:11:d6:67:b4:46:a3:6f:49:1d:8c:25:
43:7c:e6:f3:60:05:95:c7:0f:53:d1:de:93:3c:38:1d:72:e4:
b4:0c:45:94:d5:71:92:9e:38:ea:4e:6e:52:b4:b0:83:0d:81:
b6:5a:2b:64:b4:71:4b:20:61:b3:83:8c:b2:8f:45:6b:3b:cc:
43:70:19:70:e3:3e:83:4f:d5:ff:87:b6:53:25:66:0f:cb:a2:
fc:cd:96:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:48:03 2025 by rpki-client