Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZVM-p-H2MnblLpfiyED1G_vz0Nw.roa
File: ZVM-p-H2MnblLpfiyED1G_vz0Nw.roa (raw, json)
Hash identifier: hd1Zkig7kuvCCNkZ6dQDTwVfxuGuukJyLVya+2+TgBw=
Subject key identifier: 65:53:3E:A7:E1:F6:32:76:E5:2E:97:E2:C8:40:F5:1B:FB:F3:D0:DC
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197C4CA23797F0B5B230A27CF0F6C18DFB1
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZVM-p-H2MnblLpfiyED1G_vz0Nw.roa
Signing time: Tue 01 Jul 2025 07:01:11 +0000
ROA not before: Tue 01 Jul 2025 07:01:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 31.56.88.0/24 maxlen: 24
31.57.11.0/24 maxlen: 24
31.57.57.0/24 maxlen: 24
31.57.131.0/24 maxlen: 24
31.57.150.0/24 maxlen: 24
31.57.176.0/24 maxlen: 24
31.57.183.0/24 maxlen: 24
31.57.194.0/24 maxlen: 24
31.58.59.0/24 maxlen: 24
31.58.71.0/24 maxlen: 24
31.58.146.0/24 maxlen: 24
31.59.14.0/24 maxlen: 24
31.59.30.0/24 maxlen: 24
31.59.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Jul 2025 06:38:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:ca:23:79:7f:0b:5b:23:0a:27:cf:0f:6c:18:df:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 1 07:01:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65533ea7e1f63276e52e97e2c840f51bfbf3d0dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:17:20:65:27:df:10:56:18:43:5b:97:a0:82:
9e:34:1f:a7:ba:41:45:88:e8:7f:94:8a:c8:58:2d:
1d:6e:34:8b:94:85:de:6b:08:6e:f0:f6:69:d9:29:
26:7e:41:b7:0c:0c:40:15:04:cf:72:f2:34:27:60:
94:bb:9a:1f:fe:a9:f1:ed:9b:0d:d4:1e:b2:13:77:
64:ab:3d:c5:be:88:05:b2:a4:e3:b0:54:93:91:91:
46:05:fd:01:69:a2:24:67:73:28:20:51:7e:72:9a:
c4:37:49:0a:99:d4:f5:4b:50:d6:d3:18:ad:12:12:
6f:ad:ea:8d:23:ec:fa:d9:51:f4:70:c8:a6:33:81:
9f:8d:f2:5d:65:6a:02:df:61:ec:a9:b3:d3:44:e8:
b3:bd:29:60:f5:fd:6c:b4:c9:d1:4f:15:18:89:55:
15:76:a5:b0:5e:ac:d6:d6:2b:88:f1:77:f2:ea:bd:
37:56:ca:91:f2:6b:54:09:95:b9:58:a1:6b:3d:d8:
a9:e6:a2:c0:0e:85:4c:98:36:df:46:8e:4d:8e:c7:
27:18:d4:2b:51:83:46:8f:5c:38:4e:8e:24:f9:76:
8f:8f:be:0a:77:28:36:43:b9:03:bf:52:66:46:fc:
e5:f4:6a:85:e8:c0:65:ac:40:c5:68:6f:0f:fb:33:
a5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:53:3E:A7:E1:F6:32:76:E5:2E:97:E2:C8:40:F5:1B:FB:F3:D0:DC
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZVM-p-H2MnblLpfiyED1G_vz0Nw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.88.0/24
31.57.11.0/24
31.57.57.0/24
31.57.131.0/24
31.57.150.0/24
31.57.176.0/24
31.57.183.0/24
31.57.194.0/24
31.58.59.0/24
31.58.71.0/24
31.58.146.0/24
31.59.14.0/24
31.59.30.0/24
31.59.215.0/24
Signature Algorithm: sha256WithRSAEncryption
13:1d:f8:7e:c4:f8:35:1f:35:7f:64:2e:f3:1a:82:bf:bd:01:
20:55:b8:d8:81:8d:4d:84:96:ee:ff:c3:c8:07:82:05:00:62:
b6:00:54:01:9f:2c:ab:b2:56:5b:93:5d:b9:71:ae:7a:b4:ea:
4b:9d:f5:67:cb:6a:27:51:be:b7:86:52:8c:a4:bb:60:35:12:
69:9f:c1:6f:ce:89:0c:da:f2:d8:79:12:fe:72:e0:86:69:22:
c2:5b:66:6c:86:76:18:5e:e1:d4:77:cb:ab:15:30:77:87:55:
e9:a8:ac:a7:77:10:fc:84:1b:1e:da:de:f2:b7:d4:ff:df:32:
8c:b0:73:80:cc:12:5b:27:de:24:f7:a4:28:13:1f:e9:b2:1c:
70:11:6f:f7:ce:12:68:94:44:38:81:7d:af:67:d6:87:5a:de:
29:3e:62:83:9b:9f:64:65:de:c0:22:92:40:5f:76:45:4e:64:
40:35:c7:fc:92:8c:fb:26:8f:26:9d:7d:af:15:6d:4f:8c:f4:
3a:33:30:94:3d:90:c5:66:68:08:37:c0:85:4d:7a:40:48:bd:
b6:ab:da:96:ee:28:17:de:65:2d:1b:de:12:8b:8c:27:ee:bb:
0b:ca:5f:bf:8a:e6:1b:6d:ad:49:69:eb:ed:d8:77:35:35:c5:
88:61:36:cd
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgISAZfEyiN5fwtbIwonzw9sGN+xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNzAxMDcwMTExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTUzM2VhN2UxZjYzMjc2ZTUyZTk3ZTJjODQwZjUxYmZiZjNkMGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRcgZSffEFYYQ1uXoIKeNB+nukFF
iOh/lIrIWC0dbjSLlIXeawhu8PZp2SkmfkG3DAxAFQTPcvI0J2CUu5of/qnx7ZsN
1B6yE3dkqz3FvogFsqTjsFSTkZFGBf0BaaIkZ3MoIFF+cprEN0kKmdT1S1DW0xit
EhJvreqNI+z62VH0cMimM4GfjfJdZWoC32HsqbPTROizvSlg9f1stMnRTxUYiVUV
dqWwXqzW1iuI8Xfy6r03VsqR8mtUCZW5WKFrPdip5qLADoVMmDbfRo5NjscnGNQr
UYNGj1w4To4k+XaPj74Kdyg2Q7kDv1JmRvzl9GqF6MBlrEDFaG8P+zOlsQIDAQAB
o4ICVzCCAlMwHQYDVR0OBBYEFGVTPqfh9jJ25S6X4shA9Rv789DcMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvWlZNLXAtSDJNbmJsTHBmaXlFRDFHX3Z6ME53LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQAHzhYAwQA
HzkLAwQAHzk5AwQAHzmDAwQAHzmWAwQAHzmwAwQAHzm3AwQAHznCAwQAHzo7AwQA
HzpHAwQAHzqSAwQAHzsOAwQAHzseAwQAHzvXMA0GCSqGSIb3DQEBCwUAA4IBAQAT
Hfh+xPg1HzV/ZC7zGoK/vQEgVbjYgY1NhJbu/8PIB4IFAGK2AFQBnyyrslZbk125
ca56tOpLnfVny2onUb63hlKMpLtgNRJpn8FvzokM2vLYeRL+cuCGaSLCW2ZshnYY
XuHUd8urFTB3h1XpqKyndxD8hBse2t7yt9T/3zKMsHOAzBJbJ94k96QoEx/pshxw
EW/3zhJolEQ4gX2vZ9aHWt4pPmKDm59kZd7AIpJAX3ZFTmRANcf8koz7Jo8mnX2v
FW1PjPQ6MzCUPZDFZmgIN8CFTXpASL22q9qW7igX3mUtG94Si4wn7rsLyl+/iuYb
ba1Jaevt2Hc1NcWIYTbN
-----END CERTIFICATE-----
Generated at Tue Jul 29 07:37:17 2025 by rpki-client