Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wPV6vUwNOAu3OeSgTXxoXGMitoM.roa
File: wPV6vUwNOAu3OeSgTXxoXGMitoM.roa (raw, json)
Hash identifier: 5TrDR3y844WkjxAIKjiAx2XVOX5IsEPLy8xYWE2VGLY=
Subject key identifier: C0:F5:7A:BD:4C:0D:38:0B:B7:39:E4:A0:4D:7C:68:5C:63:22:B6:83
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197E89FB04FF45383FB6A7D6E21AED47291
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wPV6vUwNOAu3OeSgTXxoXGMitoM.roa
Signing time: Tue 08 Jul 2025 06:01:08 +0000
ROA not before: Tue 08 Jul 2025 06:01:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 31.56.49.0/24 maxlen: 24
31.56.156.0/24 maxlen: 24
31.56.210.0/24 maxlen: 24
31.56.212.0/24 maxlen: 24
31.56.223.0/24 maxlen: 24
31.56.234.0/24 maxlen: 24
31.56.235.0/24 maxlen: 24
31.57.129.0/24 maxlen: 24
31.57.132.0/24 maxlen: 24
31.57.142.0/24 maxlen: 24
31.57.151.0/24 maxlen: 24
31.57.191.0/24 maxlen: 24
31.57.206.0/24 maxlen: 24
31.58.33.0/24 maxlen: 24
31.58.90.0/24 maxlen: 24
31.58.157.0/24 maxlen: 24
31.58.160.0/24 maxlen: 24
31.58.163.0/24 maxlen: 24
31.58.168.0/24 maxlen: 24
31.58.224.0/24 maxlen: 24
31.58.230.0/23 maxlen: 24
31.58.231.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.108.0/24 maxlen: 24
31.59.109.0/24 maxlen: 24
31.59.110.0/24 maxlen: 24
31.59.171.0/24 maxlen: 24
31.59.236.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Jul 2025 06:29:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e8:9f:b0:4f:f4:53:83:fb:6a:7d:6e:21:ae:d4:72:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 8 06:01:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0f57abd4c0d380bb739e4a04d7c685c6322b683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2a:7c:da:21:e9:da:16:6e:65:b9:43:06:0f:
37:cb:47:a2:44:72:d5:b7:2b:f6:cf:65:dd:c3:07:
5c:92:96:cb:11:7c:af:08:9a:1c:5f:e9:65:90:90:
65:35:a5:98:05:14:d0:fb:d3:a4:ce:85:d1:92:30:
db:c7:07:fb:bc:58:bb:09:d7:28:ed:49:05:49:23:
ff:3d:6c:16:c3:82:a0:b5:13:6d:4b:1c:0d:d7:32:
fe:10:f8:19:f8:36:c5:49:e5:78:6d:f4:ac:48:0f:
10:6c:92:ef:5f:1d:bb:55:0a:53:63:06:05:65:a2:
97:5a:ca:bd:a1:15:d1:27:c8:5a:99:c8:30:ef:a8:
ec:b4:c3:d6:4e:d7:64:0d:42:2c:bf:99:a7:9d:cb:
e7:f4:e4:6b:c8:71:b0:1e:35:f1:39:69:9e:71:77:
91:00:9b:28:c2:27:7d:76:19:ab:5d:54:8a:dc:56:
6b:9e:f3:98:bb:c0:9f:65:28:ae:22:d5:53:1c:e5:
63:34:b2:71:45:90:69:cd:b9:80:5c:62:98:d7:37:
d8:fa:af:42:cf:78:83:17:09:dd:41:15:a0:04:25:
96:5b:4d:2c:53:04:6b:c5:54:9a:aa:87:b9:e8:47:
1d:2c:1d:3c:82:fb:24:d3:82:41:29:7a:eb:20:c5:
a3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F5:7A:BD:4C:0D:38:0B:B7:39:E4:A0:4D:7C:68:5C:63:22:B6:83
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wPV6vUwNOAu3OeSgTXxoXGMitoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.49.0/24
31.56.156.0/24
31.56.210.0/24
31.56.212.0/24
31.56.223.0/24
31.56.234.0/23
31.57.129.0/24
31.57.132.0/24
31.57.142.0/24
31.57.151.0/24
31.57.191.0/24
31.57.206.0/24
31.58.33.0/24
31.58.90.0/24
31.58.157.0/24
31.58.160.0/24
31.58.163.0/24
31.58.168.0/24
31.58.224.0/24
31.58.230.0/23
31.59.57.0/24
31.59.108.0-31.59.110.255
31.59.171.0/24
31.59.236.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:77:88:b6:1a:34:02:95:1f:cb:e8:c0:91:08:0a:a4:21:92:
94:59:08:bc:d6:14:e9:72:5a:ac:92:8e:bd:fa:67:a9:a2:f6:
7f:07:79:00:91:0e:da:be:05:b1:68:b6:7d:79:0f:ed:9a:f6:
81:a0:f4:6e:a3:b1:c4:2f:26:7e:77:8a:a1:30:46:15:0f:18:
48:57:c2:9f:51:f8:cb:a7:6e:1b:f0:ab:12:f2:37:f0:90:62:
63:a4:4a:65:5e:13:af:ca:34:35:69:e5:0f:df:b2:0c:a4:f8:
8e:a9:d7:36:b1:8f:8c:4e:08:af:bb:97:59:49:a5:5f:77:6a:
68:46:e8:ed:35:b6:4c:e7:2e:a3:23:15:9a:6f:2e:6a:f9:01:
9f:b3:76:3c:4c:68:31:10:d6:2c:7b:63:e9:6d:5e:b9:ad:72:
2a:2a:d5:5a:23:19:18:92:d3:0a:80:80:7d:d2:8f:b9:de:d6:
63:9b:3f:ea:01:db:8e:12:a1:39:b3:aa:5e:70:c0:14:a9:94:
72:cd:88:6d:1a:02:89:f6:ea:16:89:cf:57:8a:f7:92:63:39:
77:f7:4a:fb:9b:4a:80:fe:48:3a:09:9c:f7:bd:b5:39:a8:6c:
15:a6:fa:cd:21:c4:a0:83:0f:57:4c:5e:5a:98:38:45:9b:00:
bd:f4:59:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:34:35 2025 by rpki-client