Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lOnU1DiwC0gnCJ9DoqgRyZmCi5s.roa
File: lOnU1DiwC0gnCJ9DoqgRyZmCi5s.roa (raw, json)
Hash identifier: ERMrhEfdJbRiPvIMFR+Y52N6tmb9AJsfw3ADMoS8t9c=
Subject key identifier: 94:E9:D4:D4:38:B0:0B:48:27:08:9F:43:A2:A8:11:C9:99:82:8B:9B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197A321A60175EDE79CA5AB3ACF0DA4E33B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lOnU1DiwC0gnCJ9DoqgRyZmCi5s.roa
Signing time: Tue 24 Jun 2025 18:09:40 +0000
ROA not before: Tue 24 Jun 2025 18:09:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 31.56.86.0/24 maxlen: 24
31.56.107.0/24 maxlen: 24
31.57.122.0/24 maxlen: 24
31.57.124.0/24 maxlen: 24
31.57.125.0/24 maxlen: 24
31.57.140.0/24 maxlen: 24
31.57.180.0/24 maxlen: 24
31.57.196.0/24 maxlen: 24
31.57.221.0/24 maxlen: 24
31.58.41.0/24 maxlen: 24
31.58.42.0/24 maxlen: 24
31.58.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 28 Jun 2025 07:10:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a3:21:a6:01:75:ed:e7:9c:a5:ab:3a:cf:0d:a4:e3:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 24 18:09:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94e9d4d438b00b4827089f43a2a811c999828b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:25:60:de:40:55:cd:0f:7a:7a:18:82:c6:38:
7d:d6:d6:d9:c9:a7:a8:2f:4b:e4:a0:fc:95:2b:59:
ba:68:7a:c1:86:df:79:a8:76:0a:bf:90:7e:9c:35:
3b:39:94:0b:3e:9d:77:33:4c:89:a6:6e:eb:53:b1:
41:87:2b:8c:4f:06:53:dd:bf:3a:9b:4a:ba:04:88:
e0:70:de:5c:03:a9:6a:7f:51:f4:e5:d3:01:90:27:
4a:90:00:a2:3f:b2:93:5d:bd:d3:d0:91:db:d5:27:
a2:99:ba:bd:05:44:f6:d0:28:ce:38:d9:29:92:0c:
5f:eb:43:ad:b2:cd:28:d8:f6:d7:18:43:6c:2e:c4:
98:8c:5d:74:bc:93:b2:e0:71:18:8a:a9:05:b2:a4:
65:48:a2:0b:09:12:d4:4b:8f:ff:b8:bb:80:82:17:
0f:34:af:0f:eb:14:4d:02:31:c1:99:4b:16:5e:90:
51:ec:5d:50:8e:f6:ea:9d:22:58:0f:a3:52:f9:49:
d2:1f:73:13:a8:c4:9a:d9:57:7d:89:71:57:14:ae:
fc:e4:60:de:e7:ab:7e:8e:c8:02:ad:b5:b3:bc:d6:
85:89:3c:d6:1f:ec:1d:62:64:29:1a:1a:56:a5:85:
a3:17:e2:ec:33:83:d1:7b:61:e7:0a:29:a3:a2:b5:
3d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E9:D4:D4:38:B0:0B:48:27:08:9F:43:A2:A8:11:C9:99:82:8B:9B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lOnU1DiwC0gnCJ9DoqgRyZmCi5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.86.0/24
31.56.107.0/24
31.57.122.0/24
31.57.124.0/23
31.57.140.0/24
31.57.180.0/24
31.57.196.0/24
31.57.221.0/24
31.58.41.0-31.58.42.255
31.58.48.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:91:84:17:22:f0:b2:cc:a9:5f:83:f5:0e:f1:b9:7a:ef:e3:
6c:17:33:14:e5:2c:76:39:72:f4:56:54:52:1d:91:06:52:da:
8f:1e:5b:7f:6f:64:24:0e:54:ce:f9:87:6b:d7:02:25:bd:ea:
f0:38:8f:d5:ed:1a:62:54:3d:42:e0:56:fe:fd:a9:c8:fe:fb:
70:71:4f:af:f8:19:8c:a2:01:4b:4b:c1:42:20:e7:c7:d9:8d:
da:66:6a:35:69:73:c5:3f:8d:6d:4d:1a:be:d2:bf:1f:e7:c7:
65:88:22:28:4e:7c:75:c3:ab:b5:63:77:b6:20:8e:48:3a:60:
9b:c0:7d:b9:f6:b4:05:24:29:49:3b:49:db:40:85:6b:ac:65:
1b:7d:95:5c:90:60:d6:01:f1:0f:2d:33:43:ca:fb:2f:5a:27:
92:fa:dd:ac:fa:ee:2c:e0:46:3c:b5:a8:09:11:23:23:5f:c6:
37:42:ce:0f:80:56:ae:71:57:ae:b4:15:42:51:87:20:eb:7b:
75:36:cf:0c:68:6f:7e:32:c4:2e:ae:8c:8f:09:06:f4:c2:40:
12:8b:c4:ff:48:46:0c:db:44:c0:60:aa:0f:20:57:cb:d0:e4:
2d:e3:da:87:32:7c:86:ff:a7:ab:8e:ba:a1:dc:79:88:6c:0a:
b5:ff:04:87
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 29 07:46:22 2025 by rpki-client