Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Zox4sqGP6Qicbu-syakIRZ1m0OI.roa
File: Zox4sqGP6Qicbu-syakIRZ1m0OI.roa (raw, json)
Hash identifier: r7pCXUNuC4lO+TACWAALLpVE/jFqH9I2jO1G/7k9es0=
Subject key identifier: 66:8C:78:B2:A1:8F:E9:08:9C:6E:EF:AC:C9:A9:08:45:9D:66:D0:E2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197C12BB50FEAF7B862604E0C79E0AFF1B2
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Zox4sqGP6Qicbu-syakIRZ1m0OI.roa
Signing time: Mon 30 Jun 2025 14:09:16 +0000
ROA not before: Mon 30 Jun 2025 14:09:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 31.56.42.0/23 maxlen: 23
31.56.180.0/23 maxlen: 23
31.56.190.0/23 maxlen: 23
31.57.120.0/23 maxlen: 23
31.57.126.0/23 maxlen: 23
31.57.238.0/24 maxlen: 24
31.58.87.0/24 maxlen: 24
31.58.220.0/23 maxlen: 23
31.59.138.0/23 maxlen: 23
31.59.168.0/23 maxlen: 23
31.59.172.0/24 maxlen: 24
31.59.173.0/24 maxlen: 24
31.59.174.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 01 Jul 2025 11:40:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:2b:b5:0f:ea:f7:b8:62:60:4e:0c:79:e0:af:f1:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 30 14:09:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=668c78b2a18fe9089c6eefacc9a908459d66d0e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d6:6f:87:b0:03:a9:2e:3b:b0:7f:dc:34:18:
41:ba:5f:70:62:35:69:7b:ad:25:05:95:4c:c5:5c:
d5:d6:35:01:46:0e:16:d0:33:77:3f:b5:bb:25:4c:
63:c4:25:5d:6f:af:34:c9:b5:ca:4c:83:38:d6:96:
4d:a8:f6:d1:5d:d3:e9:6b:84:eb:94:15:43:bd:37:
d4:e5:2d:0e:c6:25:46:10:06:6f:0c:9b:58:e9:fc:
14:df:c6:a0:fe:e2:a3:7c:4f:de:50:7e:29:90:80:
3c:d4:a2:1e:cf:41:60:13:6f:88:f6:c5:6d:24:5b:
16:69:65:45:de:1c:d2:ac:a5:cb:9d:64:b1:3f:b6:
a9:e5:87:5c:a7:9d:17:82:43:e2:20:c5:46:e0:c6:
cf:5e:e9:97:33:06:63:30:7b:63:dc:d1:20:6f:87:
c0:53:a3:3d:aa:f4:5b:a6:63:85:1f:7c:72:e2:96:
9c:21:d8:51:b6:64:75:58:a2:d4:14:ef:9a:7c:27:
8c:fa:dc:be:39:a2:fe:4a:9d:c5:f8:92:fc:57:8c:
c4:f3:bb:96:7b:df:64:69:45:2d:39:9d:99:74:d7:
6a:da:39:41:d3:71:dc:e4:8f:53:c8:56:96:02:24:
46:d3:a3:6e:aa:f0:af:5e:d2:20:5f:b9:a2:62:2f:
27:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8C:78:B2:A1:8F:E9:08:9C:6E:EF:AC:C9:A9:08:45:9D:66:D0:E2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Zox4sqGP6Qicbu-syakIRZ1m0OI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.42.0/23
31.56.180.0/23
31.56.190.0/23
31.57.120.0/23
31.57.126.0/23
31.57.238.0/24
31.58.87.0/24
31.58.220.0/23
31.59.138.0/23
31.59.168.0/23
31.59.172.0/22
Signature Algorithm: sha256WithRSAEncryption
92:a9:fe:23:d9:b3:9f:b5:85:ea:95:57:e7:2e:a5:a9:f1:96:
36:33:86:18:e6:47:a7:bb:0e:ec:f9:22:39:00:42:00:8b:ce:
25:5f:8d:e5:98:76:4c:da:28:ea:8a:b8:be:cd:01:33:2b:ec:
1d:41:2c:18:f2:82:62:c6:9f:d2:e9:39:33:f5:92:61:e4:41:
f5:61:cf:ec:01:1b:a0:21:a7:b0:ce:d0:9f:00:8b:f1:69:1d:
ae:c0:54:a8:20:bc:28:38:0c:74:74:28:ee:93:be:fd:42:a7:
a2:66:29:3d:40:85:ef:24:43:73:c8:42:e2:f8:f9:f1:15:dd:
2b:e4:4d:af:17:f3:4f:5c:3b:23:13:ff:60:05:b6:01:b8:5f:
cf:2c:15:65:ef:30:6c:68:04:1c:59:42:80:ff:a5:80:84:96:
48:b8:a0:52:af:ba:0e:9d:66:5e:44:c3:96:22:96:9e:13:0a:
1f:51:2f:0e:2e:6f:e0:94:42:96:50:00:dc:51:c2:75:92:58:
34:6a:d5:e3:0f:c3:96:2a:28:ac:b5:99:3e:04:59:e1:b4:7a:
83:b3:dd:38:b3:00:2a:5b:b3:ee:da:95:30:49:11:7f:a0:41:
4e:ed:b6:58:ce:89:d7:2c:10:88:94:b9:75:1b:4e:7f:36:24:
8a:53:55:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:34:27 2025 by rpki-client