Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PfE4O8ulB3tqYXuQ0uY1yuBQ_WQ.roa
File: PfE4O8ulB3tqYXuQ0uY1yuBQ_WQ.roa (raw, json)
Hash identifier: adkchyxZen1Qxw3sVqQw19BSAAZq3qlibCxmWRzTQgw=
Subject key identifier: 3D:F1:38:3B:CB:A5:07:7B:6A:61:7B:90:D2:E6:35:CA:E0:50:FD:64
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019823821C5DFE96E2762524C5EFF83B32D4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PfE4O8ulB3tqYXuQ0uY1yuBQ_WQ.roa
Signing time: Sat 19 Jul 2025 16:26:26 +0000
ROA not before: Sat 19 Jul 2025 16:26:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202678
IP address blocks: 31.59.212.0/24 maxlen: 24
94.183.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 20 Jul 2025 09:51:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:23:82:1c:5d:fe:96:e2:76:25:24:c5:ef:f8:3b:32:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 19 16:26:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3df1383bcba5077b6a617b90d2e635cae050fd64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:49:f7:55:24:74:53:98:ff:80:d7:a2:e4:8d:
f2:3b:48:cf:e0:3d:81:6a:7f:f3:ec:e7:13:a3:42:
8f:31:fb:eb:0d:79:f8:35:ef:83:67:fb:53:ba:69:
bf:cc:0a:12:7c:0a:93:66:42:03:69:64:39:82:70:
c0:40:90:49:5d:5f:7c:37:93:33:26:33:5b:5a:67:
41:98:bc:7f:26:52:3a:8a:98:67:10:d2:0a:80:d1:
fb:75:2c:35:0d:b0:ae:15:37:5f:9e:de:b9:5b:a0:
fa:35:74:56:23:50:18:50:a7:b3:f2:bb:50:76:c6:
f4:c3:25:82:af:4c:73:3d:d2:71:68:9a:98:81:d5:
a9:96:48:bf:90:0f:82:a7:08:60:27:7f:33:fb:e9:
4d:b9:97:d0:17:6d:91:31:81:9c:22:f4:27:0b:a2:
6c:97:2e:d5:78:e7:9f:48:7c:67:9f:06:6f:a1:8e:
02:d4:51:63:c4:77:99:92:93:1c:e1:7d:eb:f0:5f:
7d:87:2b:c4:14:55:b5:1d:c5:2e:72:2b:b4:c1:dd:
9a:2e:fe:af:0e:52:32:3c:33:50:76:33:5e:a6:9e:
b4:e6:f3:c1:da:ce:ed:ce:47:9b:b7:1a:67:93:6a:
17:59:cd:c3:64:dd:dd:d0:ed:e6:00:0a:e3:c8:c3:
d6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F1:38:3B:CB:A5:07:7B:6A:61:7B:90:D2:E6:35:CA:E0:50:FD:64
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PfE4O8ulB3tqYXuQ0uY1yuBQ_WQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.212.0/24
94.183.162.0/24
Signature Algorithm: sha256WithRSAEncryption
90:d4:29:c9:8d:dd:06:dc:c8:4c:50:bd:78:3d:3e:38:78:20:
0e:60:ac:95:b8:36:4e:a7:0b:b4:e8:a4:d3:9f:d2:5d:d3:57:
35:e2:eb:c1:6d:9b:f7:95:35:9c:9a:c8:5e:00:26:f5:97:7e:
d7:ac:e3:cc:21:07:5d:cd:0d:4d:7a:63:7f:9e:d8:32:fb:f7:
47:7a:aa:77:9e:71:2b:3e:31:02:5e:4d:17:f3:50:12:83:95:
4a:97:b4:a6:02:29:75:78:e0:bf:4f:93:18:f9:78:b7:46:a5:
9e:aa:44:a9:0f:d8:24:d4:7d:62:68:f5:dc:42:2c:a5:7b:6f:
29:01:1b:f6:ec:6a:5e:94:f8:3e:78:62:79:12:3e:73:dc:e4:
8d:8c:e1:51:60:e0:25:83:57:cd:e1:d8:0a:c2:be:ec:2b:e8:
7a:cd:a7:7c:73:9c:29:1d:d6:3a:21:45:0d:72:05:ab:33:69:
c3:32:19:d3:b9:38:b6:0f:f8:ae:96:00:28:58:e2:e0:2f:5d:
ca:01:49:d4:8a:98:43:65:31:3a:2f:67:bd:2b:39:51:89:95:
47:68:46:2c:69:ec:64:6f:fc:1d:63:6a:b3:05:67:ae:ac:e9:
89:c5:cb:af:3a:3b:e2:e0:bc:62:1b:3e:20:c0:13:6a:54:da:
a7:04:51:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:47:39 2025 by rpki-client