Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cqBLNM4m0zucIycps8uoxqUqh5o.roa
File: cqBLNM4m0zucIycps8uoxqUqh5o.roa (raw, json)
Hash identifier: nkTngWY0agTt1Fk0BiAdQyVymkR/z9jfwIsUBsvU1XM=
Subject key identifier: 72:A0:4B:34:CE:26:D3:3B:9C:23:27:29:B3:CB:A8:C6:A5:2A:87:9A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01982E5F7ACDE09E47C5CD4C016904C313D6
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cqBLNM4m0zucIycps8uoxqUqh5o.roa
Signing time: Mon 21 Jul 2025 19:04:25 +0000
ROA not before: Mon 21 Jul 2025 19:04:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 31.59.128.0/24 maxlen: 24
94.183.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Jul 2025 05:24:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2e:5f:7a:cd:e0:9e:47:c5:cd:4c:01:69:04:c3:13:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 21 19:04:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72a04b34ce26d33b9c232729b3cba8c6a52a879a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a0:77:23:bc:ab:f0:6e:2e:b2:a3:6f:c9:73:
44:a7:f8:bd:4b:87:61:c7:25:5a:70:3a:ed:4c:26:
c8:48:79:9a:df:42:84:27:64:fc:d3:f8:31:f3:fa:
7e:f3:0f:58:cb:c9:10:bb:2a:0b:2b:5c:53:ab:d0:
8e:00:67:b1:64:a2:1a:62:36:5b:04:fd:0f:9d:20:
83:fa:7d:0f:e7:d5:d6:a2:3e:7d:db:35:ae:95:a9:
cb:2d:ca:f5:51:1e:fb:0d:10:9d:ea:f1:e4:65:90:
d0:95:63:b9:57:36:4e:0d:45:c5:43:c5:4a:c3:b9:
28:b9:95:24:12:77:a1:8e:a8:59:08:bc:77:c1:96:
89:d3:21:eb:5f:02:fa:8f:00:e4:6b:d2:3a:96:b0:
7e:fc:24:2d:d6:a3:c4:1a:87:46:a5:3b:e8:6d:66:
73:1c:76:36:4a:5a:c8:90:d2:b6:d5:df:a1:a9:1f:
0a:da:48:1f:79:c6:33:a7:4a:cd:d4:62:4f:b0:cd:
c6:91:d7:10:1a:5a:f9:17:75:d4:1d:2a:55:7a:51:
de:2c:ba:c3:72:e8:93:3a:18:73:ed:e5:b6:2d:d7:
25:41:7d:b1:57:97:36:e8:84:2d:35:bf:b4:c2:0b:
d0:46:12:05:42:79:57:d2:46:9e:61:84:89:de:ab:
f3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A0:4B:34:CE:26:D3:3B:9C:23:27:29:B3:CB:A8:C6:A5:2A:87:9A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cqBLNM4m0zucIycps8uoxqUqh5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.128.0/24
94.183.168.0/24
Signature Algorithm: sha256WithRSAEncryption
51:90:c0:fe:78:a5:f2:ad:c7:5d:f7:0c:bf:06:17:1d:23:bb:
be:7a:e7:d2:9a:45:0b:89:c3:ad:0d:a9:bb:b4:15:20:5a:4e:
ed:9a:98:de:ce:37:68:3e:ff:2f:f8:ec:54:35:02:c6:3d:6c:
b5:34:91:9b:98:5a:a6:13:03:cf:a6:7e:c8:fb:cf:64:60:1a:
71:01:7b:55:7e:18:98:50:95:e6:ec:ac:e6:ab:22:5a:ec:e6:
cd:02:de:c0:1d:52:34:84:cf:b0:8f:4c:18:66:c6:b5:d6:f5:
c9:ef:84:1e:1b:f5:0c:d8:b1:01:9b:41:fc:52:e9:17:44:6d:
de:ca:c2:b2:73:36:6b:5f:86:df:37:63:ef:eb:5e:f9:91:e2:
d1:6c:40:fe:ae:79:32:b6:e3:3f:02:54:af:49:4e:fd:20:39:
74:62:2f:65:8b:36:b0:5a:ed:b3:4b:26:b8:3c:d1:0d:e0:17:
19:e0:f9:3e:63:76:dd:54:99:ac:af:d6:1a:29:98:b6:ae:f7:
8f:5e:f2:83:20:a7:d9:53:2d:61:5d:88:78:22:d3:8c:81:42:
a9:de:3b:a6:eb:8e:52:7e:fb:3c:2d:f5:c3:93:d5:57:b4:40:
6b:89:0c:6d:a6:e2:c8:40:e1:6a:23:92:ba:68:47:88:3f:ce:
a5:4b:63:74
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZguX3rN4J5Hxc1MAWkEwxPWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNzIxMTkwNDI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MmEwNGIzNGNlMjZkMzNiOWMyMzI3MjliM2NiYThjNmE1MmE4NzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqB3I7yr8G4usqNvyXNEp/i9S4dh
xyVacDrtTCbISHma30KEJ2T80/gx8/p+8w9Yy8kQuyoLK1xTq9COAGexZKIaYjZb
BP0PnSCD+n0P59XWoj592zWulanLLcr1UR77DRCd6vHkZZDQlWO5VzZODUXFQ8VK
w7kouZUkEnehjqhZCLx3wZaJ0yHrXwL6jwDka9I6lrB+/CQt1qPEGodGpTvobWZz
HHY2SlrIkNK21d+hqR8K2kgfecYzp0rN1GJPsM3GkdcQGlr5F3XUHSpVelHeLLrD
cuiTOhhz7eW2LdclQX2xV5c26IQtNb+0wgvQRhIFQnlX0kaeYYSJ3qvzMwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHKgSzTOJtM7nCMnKbPLqMalKoeaMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvY3FCTE5NNG0wenVjSXljcHM4dW94cVVxaDVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzuAAwQA
XreoMA0GCSqGSIb3DQEBCwUAA4IBAQBRkMD+eKXyrcdd9wy/BhcdI7u+eufSmkUL
icOtDam7tBUgWk7tmpjezjdoPv8v+OxUNQLGPWy1NJGbmFqmEwPPpn7I+89kYBpx
AXtVfhiYUJXm7KzmqyJa7ObNAt7AHVI0hM+wj0wYZsa11vXJ74QeG/UM2LEBm0H8
UukXRG3eysKyczZrX4bfN2Pv6175keLRbED+rnkytuM/AlSvSU79IDl0Yi9lizaw
Wu2zSya4PNEN4BcZ4Pk+Y3bdVJmsr9YaKZi2rvePXvKDIKfZUy1hXYh4ItOMgUKp
3jum645Sfvs8LfXDk9VXtEBriQxtpuLIQOFqI5K6aEeIP86lS2N0
-----END CERTIFICATE-----
Generated at Tue Jul 29 07:44:43 2025 by rpki-client