Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UE20zNOsQtmqq0tpAkIuVvFszOw.roa
File: UE20zNOsQtmqq0tpAkIuVvFszOw.roa (raw, json)
Hash identifier: YDe6roH0QlwiSEm0nfc0FIvgn8UMUVVFWo8x/u5obl4=
Subject key identifier: 50:4D:B4:CC:D3:AC:42:D9:AA:AB:4B:69:02:42:2E:56:F1:6C:CC:EC
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197C12BB4651A6D983A82BCF2D9338840F1
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UE20zNOsQtmqq0tpAkIuVvFszOw.roa
Signing time: Mon 30 Jun 2025 14:09:16 +0000
ROA not before: Mon 30 Jun 2025 14:09:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 31.56.88.0/24 maxlen: 24
31.56.112.0/21 maxlen: 24
31.57.11.0/24 maxlen: 24
31.57.57.0/24 maxlen: 24
31.57.131.0/24 maxlen: 24
31.57.150.0/24 maxlen: 24
31.57.176.0/24 maxlen: 24
31.57.183.0/24 maxlen: 24
31.57.194.0/24 maxlen: 24
31.58.59.0/24 maxlen: 24
31.58.71.0/24 maxlen: 24
31.58.146.0/24 maxlen: 24
31.59.14.0/24 maxlen: 24
31.59.30.0/24 maxlen: 24
31.59.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Jul 2025 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:2b:b4:65:1a:6d:98:3a:82:bc:f2:d9:33:88:40:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 30 14:09:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=504db4ccd3ac42d9aaab4b6902422e56f16cccec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b5:a4:47:10:ff:90:12:17:cc:b7:c4:f6:c6:
20:c4:9a:78:df:13:fb:62:0a:a5:94:ec:e5:8c:b8:
e1:76:26:42:3d:f8:9a:b1:f1:f7:dc:69:2b:76:d2:
d0:46:c8:1a:3b:2f:b2:c2:2c:bd:67:b7:7d:73:95:
40:0b:0b:71:7f:3f:c5:a1:1b:0a:21:d4:1b:e9:c7:
f2:d0:e6:53:01:d9:b8:cd:28:34:88:b8:0a:71:be:
89:64:1a:3b:a6:0b:e6:82:54:ff:34:68:ed:cb:c6:
27:00:d7:0c:5a:5d:f7:43:cb:b3:d9:1b:ad:4a:19:
b5:41:cb:09:82:ba:cf:b1:34:27:a2:64:6d:7f:25:
c2:c1:3e:27:b5:96:38:24:92:ea:f0:c2:18:7f:8b:
df:1e:5a:54:81:6b:81:a1:b9:16:64:b6:20:02:77:
34:fd:22:58:4f:ec:55:4f:98:6e:36:c9:50:30:4e:
ad:df:10:86:c8:02:e4:2c:10:de:93:26:25:67:a7:
28:15:76:01:c5:b0:16:67:97:e4:b8:b0:45:8a:41:
5d:a3:29:e8:a8:27:34:7f:a8:aa:6d:b6:b4:ae:eb:
47:56:21:7c:6d:7b:f0:85:0d:98:46:d6:b8:77:1c:
59:f1:f8:a9:41:9d:a5:2f:84:99:c1:e9:96:4c:58:
6e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:4D:B4:CC:D3:AC:42:D9:AA:AB:4B:69:02:42:2E:56:F1:6C:CC:EC
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UE20zNOsQtmqq0tpAkIuVvFszOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.88.0/24
31.56.112.0/21
31.57.11.0/24
31.57.57.0/24
31.57.131.0/24
31.57.150.0/24
31.57.176.0/24
31.57.183.0/24
31.57.194.0/24
31.58.59.0/24
31.58.71.0/24
31.58.146.0/24
31.59.14.0/24
31.59.30.0/24
31.59.215.0/24
Signature Algorithm: sha256WithRSAEncryption
87:aa:4c:3e:29:e5:e6:94:8f:c7:ef:f7:9b:59:15:16:24:4b:
56:e2:89:00:e7:38:5b:c1:42:5b:59:2f:49:0e:98:2d:a3:e4:
7d:9c:37:8c:98:47:ee:8c:cf:fa:67:b2:a9:97:e9:59:9a:fa:
c8:c3:cd:74:6f:a2:4a:7d:59:77:30:cf:a2:c8:ff:b0:4a:db:
8c:7e:5e:76:f1:d8:08:3f:8a:91:53:9b:84:f3:9b:46:4b:56:
e5:87:65:e3:f0:a8:c8:94:ab:12:76:4a:e8:1a:9e:95:74:e1:
87:a2:51:10:86:6a:88:44:af:3b:1b:93:ea:cc:ce:19:0f:22:
fc:85:9f:b7:02:29:b1:89:54:d8:04:9f:04:79:9a:04:63:62:
38:f0:d8:64:2a:40:42:ab:75:84:5c:90:f6:fa:d3:cf:34:64:
3b:69:28:42:2f:0a:02:2e:03:90:08:7f:6f:d0:cf:2d:bc:8a:
93:d2:52:8a:3c:58:e0:64:e6:37:18:53:68:c2:a1:d5:08:73:
7d:ca:f0:f1:fb:e7:21:cb:a8:ca:dc:0e:15:b6:3d:04:fa:14:
5c:68:15:10:b2:d3:ce:96:44:1f:15:a9:1c:56:d5:49:43:66:
9b:47:34:1b:85:b7:71:c6:6b:44:31:9c:67:de:ef:7e:5e:4f:
e7:e8:72:95
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgISAZfBK7RlGm2YOoK88tkziEDxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNjMwMTQwOTE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDRkYjRjY2QzYWM0MmQ5YWFhYjRiNjkwMjQyMmU1NmYxNmNjY2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bWkRxD/kBIXzLfE9sYgxJp43xP7
YgqllOzljLjhdiZCPfiasfH33GkrdtLQRsgaOy+ywiy9Z7d9c5VACwtxfz/FoRsK
IdQb6cfy0OZTAdm4zSg0iLgKcb6JZBo7pgvmglT/NGjty8YnANcMWl33Q8uz2Rut
Shm1QcsJgrrPsTQnomRtfyXCwT4ntZY4JJLq8MIYf4vfHlpUgWuBobkWZLYgAnc0
/SJYT+xVT5huNslQME6t3xCGyALkLBDekyYlZ6coFXYBxbAWZ5fkuLBFikFdoyno
qCc0f6iqbba0rutHViF8bXvwhQ2YRta4dxxZ8fipQZ2lL4SZwemWTFhunQIDAQAB
o4ICXTCCAlkwHQYDVR0OBBYEFFBNtMzTrELZqqtLaQJCLlbxbMzsMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvVUUyMHpOT3NRdG1xcTB0cEFrSXVWdkZzek93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQAHzhYAwQD
HzhwAwQAHzkLAwQAHzk5AwQAHzmDAwQAHzmWAwQAHzmwAwQAHzm3AwQAHznCAwQA
Hzo7AwQAHzpHAwQAHzqSAwQAHzsOAwQAHzseAwQAHzvXMA0GCSqGSIb3DQEBCwUA
A4IBAQCHqkw+KeXmlI/H7/ebWRUWJEtW4okA5zhbwUJbWS9JDpgto+R9nDeMmEfu
jM/6Z7Kpl+lZmvrIw810b6JKfVl3MM+iyP+wStuMfl528dgIP4qRU5uE85tGS1bl
h2Xj8KjIlKsSdkroGp6VdOGHolEQhmqIRK87G5PqzM4ZDyL8hZ+3AimxiVTYBJ8E
eZoEY2I48NhkKkBCq3WEXJD2+tPPNGQ7aShCLwoCLgOQCH9v0M8tvIqT0lKKPFjg
ZOY3GFNowqHVCHN9yvDx++chy6jK3A4Vtj0E+hRcaBUQstPOlkQfFakcVtVJQ2ab
RzQbhbdxxmtEMZxn3u9+Xk/n6HKV
-----END CERTIFICATE-----
Generated at Tue Jul 29 07:44:16 2025 by rpki-client