Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kS7oepUGuJgHm9rB_E45A9g7uCc.roa
File: kS7oepUGuJgHm9rB_E45A9g7uCc.roa (raw, json)
Hash identifier: br3neQOD2kT1hm4++Hxx7t6HisAg62lwlhVDRpTKTYg=
Subject key identifier: 91:2E:E8:7A:95:06:B8:98:07:9B:DA:C1:FC:4E:39:03:D8:3B:B8:27
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01981C64D91D6A9A4A53578484D59EE7311E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kS7oepUGuJgHm9rB_E45A9g7uCc.roa
Signing time: Fri 18 Jul 2025 07:17:07 +0000
ROA not before: Fri 18 Jul 2025 07:17:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 31.56.42.0/23 maxlen: 23
31.56.220.0/24 maxlen: 24
31.57.52.0/24 maxlen: 24
31.57.186.0/24 maxlen: 24
31.57.238.0/24 maxlen: 24
31.59.172.0/24 maxlen: 24
31.59.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Jul 2025 10:46:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1c:64:d9:1d:6a:9a:4a:53:57:84:84:d5:9e:e7:31:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 18 07:17:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=912ee87a9506b898079bdac1fc4e3903d83bb827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a5:69:97:0b:ca:f6:4f:8e:00:3b:24:35:4e:
6d:2b:b2:b9:76:3c:f0:1a:4c:a8:76:c3:a3:38:df:
fd:90:41:74:6e:80:ab:7d:59:c7:a2:c1:b9:fa:45:
0c:ed:0a:ed:4b:c2:e1:59:1e:72:89:43:08:67:7f:
2a:14:cd:13:1d:3b:7b:42:b0:fb:ba:aa:eb:8d:03:
1a:eb:e4:98:6e:fe:67:7b:45:0f:cb:9a:b0:5d:24:
1e:d0:17:92:bf:f1:28:4a:d7:87:8c:e2:6d:8f:5e:
5c:94:13:47:ce:53:42:74:e8:29:23:11:ae:2c:b4:
ed:95:c4:6e:27:8f:8c:2e:53:bc:6a:a8:03:57:69:
25:4b:09:d0:2e:f1:66:21:e9:31:f3:3d:ca:d8:63:
af:a7:71:5e:78:d4:78:3c:c8:30:ee:7f:fa:c9:ee:
d2:71:23:4a:2e:e2:0c:ce:0f:55:83:c8:3c:e9:17:
00:11:e2:d3:b0:72:20:1f:ce:d2:f2:b1:11:46:a2:
ef:70:44:98:a0:59:b7:52:d7:56:4f:3a:a1:b5:5a:
06:2f:7d:8e:67:8f:c7:aa:e2:e1:f7:ad:3f:1e:af:
14:13:f2:26:1d:57:74:3f:bb:b1:b8:8d:fd:05:34:
6d:68:d2:b6:68:0e:08:16:4d:c7:37:7e:3f:12:d9:
a3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2E:E8:7A:95:06:B8:98:07:9B:DA:C1:FC:4E:39:03:D8:3B:B8:27
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kS7oepUGuJgHm9rB_E45A9g7uCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.42.0/23
31.56.220.0/24
31.57.52.0/24
31.57.186.0/24
31.57.238.0/24
31.59.172.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:67:07:63:4d:f2:6f:b4:81:f5:62:b2:ba:93:f3:6c:78:6c:
69:d2:de:00:62:cf:a2:26:ad:53:a1:8b:9a:5b:4c:dc:0f:0b:
c9:45:e0:86:0b:35:d1:8d:f8:40:d6:2b:87:4e:a5:2f:e5:5b:
34:8d:a0:52:61:1c:91:65:bc:3e:9a:e0:d1:49:ce:30:a0:31:
95:95:d8:10:24:9a:d8:ef:ba:44:cc:e1:c3:71:a5:1d:0e:9b:
4c:e7:90:f7:1f:ca:46:ff:12:68:a1:ba:72:f9:3e:04:c1:cc:
16:59:f3:9b:1c:f1:b8:5e:8f:42:5b:98:db:69:7e:30:f3:e0:
cf:84:f9:88:8c:13:54:42:83:ae:d7:c1:c5:22:3c:f9:7d:7a:
5a:c4:04:3d:5a:e4:4f:52:8a:33:63:9b:8d:db:1b:c9:81:e9:
a7:41:ae:a9:ce:a3:4c:86:e5:b6:09:2d:a2:9d:e4:85:41:c6:
88:99:1c:72:9d:b4:63:e3:35:0b:2f:9b:a1:cc:57:e6:72:0f:
45:be:8d:b4:9e:f2:85:c1:57:6e:1e:61:e1:49:7d:f9:32:35:
c0:6c:a0:5f:c0:89:d7:68:b8:46:1d:2f:fa:fb:ce:a3:9c:bd:
c0:17:34:51:1b:66:aa:b4:39:d1:04:ab:b5:69:12:f5:64:3f:
d5:77:84:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:38:20 2025 by rpki-client