Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_A1VpkBLavMVfWOGix9eKmLQZiA.roa
File: _A1VpkBLavMVfWOGix9eKmLQZiA.roa (raw, json)
Hash identifier: H41/OOuJRuCHNoYAAdGRjqSRwgDBMbGrTR/RxdJkNho=
Subject key identifier: FC:0D:55:A6:40:4B:6A:F3:15:7D:63:86:8B:1F:5E:2A:62:D0:66:20
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0198078C43EBBB90DD5FDE297F5DC8C238F6
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_A1VpkBLavMVfWOGix9eKmLQZiA.roa
Signing time: Mon 14 Jul 2025 06:08:09 +0000
ROA not before: Mon 14 Jul 2025 06:08:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 31.59.128.0/24 maxlen: 24
94.183.168.0/24 maxlen: 24
217.60.239.0/24 maxlen: 24
217.60.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Jul 2025 10:07:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:07:8c:43:eb:bb:90:dd:5f:de:29:7f:5d:c8:c2:38:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 14 06:08:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc0d55a6404b6af3157d63868b1f5e2a62d06620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:98:a4:3b:19:48:93:59:0e:08:26:15:00:45:
49:77:73:fd:43:4f:26:13:ac:75:6a:92:6b:98:6e:
32:8c:24:df:4d:e8:4e:aa:96:ca:fa:d4:ed:37:0d:
0e:8d:e1:84:85:2d:27:1d:56:81:d3:40:fd:49:f3:
e0:95:2b:e4:ee:6c:cb:6c:2c:28:ea:ed:8c:1c:9c:
f1:a4:c6:30:f8:fc:ec:eb:cf:c2:fa:be:4f:d8:be:
af:71:49:3e:a3:87:1e:b4:59:70:94:e8:a2:f7:91:
3b:91:53:ce:1d:00:16:31:71:e5:c2:92:d5:ad:b7:
fc:7e:e5:dc:2d:dd:7a:4f:c4:79:b6:c6:ce:c8:b0:
b6:38:04:90:39:a4:97:f9:48:4c:76:87:97:29:8f:
32:f4:79:38:85:e5:54:48:9d:49:ca:64:93:a6:59:
eb:12:07:bc:e1:ab:61:23:e0:49:0a:f7:03:fc:96:
cf:ba:e4:9c:12:92:f1:36:d9:6e:fc:45:04:bb:b2:
af:11:34:c3:83:a7:12:70:66:98:18:1c:f7:c4:9b:
60:b3:89:69:5e:e0:ff:26:75:d1:eb:14:8e:68:66:
85:8f:b0:15:9d:29:1b:93:4f:83:8c:6f:ad:6b:59:
1b:3d:fe:bd:e2:3e:a5:96:b8:9a:6f:4b:f6:c5:51:
01:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0D:55:A6:40:4B:6A:F3:15:7D:63:86:8B:1F:5E:2A:62:D0:66:20
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_A1VpkBLavMVfWOGix9eKmLQZiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.128.0/24
94.183.168.0/24
217.60.239.0/24
217.60.247.0/24
Signature Algorithm: sha256WithRSAEncryption
54:3e:c2:12:29:c0:74:e4:18:9a:63:8d:7a:80:05:52:d0:84:
ff:13:69:ae:98:6b:ce:94:61:ae:d8:bc:2c:33:cf:c4:bd:9e:
69:4e:7c:6f:96:e5:06:24:fa:5c:8f:f4:f8:c1:c6:88:de:3e:
5d:7c:91:73:e9:07:0e:8b:5c:ef:bb:4e:7f:fb:ac:38:5b:c8:
8b:dc:bb:f6:1b:96:7c:20:17:20:47:0c:e6:8d:c5:db:07:38:
78:9a:3b:8e:ce:96:65:70:10:14:b4:60:ba:c0:32:b5:54:02:
bf:fc:1b:3e:61:46:0e:b9:3f:2f:28:e6:45:17:11:42:d6:a5:
79:3e:0e:3c:6f:a1:84:a7:65:b6:ab:3c:31:ad:52:e5:21:00:
7b:3c:17:3a:90:7f:a9:a9:12:34:f2:fc:fe:54:99:ea:fe:ca:
29:3b:8c:5e:2a:db:ee:25:0c:0c:b0:1a:42:17:d3:8c:e0:e7:
37:c1:fc:e1:a6:dc:27:ae:2c:33:b7:d0:c0:67:9d:45:3f:2c:
1f:ac:a4:8e:34:a2:72:c0:32:f3:26:31:50:d6:17:36:72:b3:
97:9c:8b:c5:fe:ed:f5:e9:37:d6:03:9f:03:1c:ab:19:72:8e:
a2:c8:e0:70:b4:4c:99:9a:dd:f1:1c:a9:7e:a4:02:ff:b3:b3:
5a:24:c3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:34:53 2025 by rpki-client