Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1nY6DFeAsU1fek_f2caHoRiY9-I.roa
File: 1nY6DFeAsU1fek_f2caHoRiY9-I.roa (raw, json)
Hash identifier: +Ivx2I9CNuE73BEsM1oQlHcYASQlMFkfAwyMnJxjZZs=
Subject key identifier: D6:76:3A:0C:57:80:B1:4D:5F:7A:4F:DF:D9:C6:87:A1:18:98:F7:E2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196FDB452501AC9A8BD54D148457A00A263
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1nY6DFeAsU1fek_f2caHoRiY9-I.roa
Signing time: Fri 23 May 2025 15:12:55 +0000
ROA not before: Fri 23 May 2025 15:12:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208483
IP address blocks: 31.57.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 30 May 2025 19:09:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fd:b4:52:50:1a:c9:a8:bd:54:d1:48:45:7a:00:a2:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 23 15:12:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6763a0c5780b14d5f7a4fdfd9c687a11898f7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:65:94:9b:c6:31:b2:2e:83:19:3a:8f:49:58:
21:c7:68:ec:11:ab:e8:bd:6e:03:b9:8b:5a:2d:61:
41:4f:71:7e:17:e5:f1:a2:89:7a:f4:c4:f4:ae:8e:
7d:17:fc:97:72:e2:71:20:86:13:80:ab:fa:6f:ba:
8d:fb:0b:22:20:70:75:60:b6:27:0f:b2:0c:f8:8e:
74:d3:53:57:6e:fe:f6:18:70:30:aa:e4:01:22:0d:
0e:f2:f7:3a:4a:f0:3a:61:0e:85:12:4b:76:43:e0:
9d:08:81:26:a0:a0:3d:ad:87:6e:6a:71:e9:e3:f9:
ef:6b:4b:86:b0:d2:51:a2:ca:a3:ba:16:5c:cf:08:
a5:15:08:57:32:b4:84:86:60:e5:09:06:e8:b4:33:
32:f8:3a:dc:84:5a:b1:a0:4f:3b:6b:13:91:9a:20:
bb:56:c6:7a:63:33:0b:37:3d:96:8a:fb:05:1a:df:
0c:14:73:45:29:8f:d7:6e:6d:10:40:3b:75:3f:f8:
25:16:16:ed:7f:3a:46:db:39:75:27:f1:c7:43:5d:
02:ed:7e:dd:c9:ea:d6:c3:44:07:62:42:21:34:97:
f4:9a:fe:2b:63:55:f6:b2:5e:86:36:59:a9:46:ed:
0c:8a:37:59:f6:d3:f0:7c:2b:87:29:ca:b7:65:80:
2a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:76:3A:0C:57:80:B1:4D:5F:7A:4F:DF:D9:C6:87:A1:18:98:F7:E2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1nY6DFeAsU1fek_f2caHoRiY9-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.225.0/24
Signature Algorithm: sha256WithRSAEncryption
75:ef:d0:4c:14:b1:e5:db:70:41:8f:19:ab:84:e6:22:f0:1c:
d6:a1:e3:46:1c:1e:c1:0a:57:50:fe:13:41:8a:be:72:00:d9:
f0:6d:19:58:6c:ca:de:dd:53:34:6e:fe:16:2d:94:a3:12:78:
af:68:e3:eb:72:1f:63:30:6e:8a:40:da:5a:45:45:63:6c:33:
ab:19:bf:a0:90:a2:66:74:21:45:93:41:2a:d1:b2:9b:fc:e3:
f7:39:81:d1:01:97:ac:bf:a2:00:5b:4f:0d:5b:02:5c:71:4d:
92:11:8d:23:d3:09:c7:4f:7d:a5:70:b3:44:e4:db:b3:72:7b:
46:fb:73:3d:6c:35:96:c0:da:4c:00:d1:57:58:cb:32:19:3a:
08:95:29:4c:9c:71:fc:38:38:82:14:ce:ce:28:43:5d:7c:f2:
77:91:a1:84:08:b4:08:04:bd:ca:0c:d0:da:c7:45:e3:8d:bd:
78:c1:e6:5a:24:9e:27:1b:e6:76:a4:3f:00:9f:cb:52:24:e7:
7d:6e:97:74:d5:00:44:86:ee:d3:41:d0:87:8d:5c:39:4b:87:
52:91:d6:9d:7f:16:82:25:0f:48:a7:0d:54:bb:95:96:b4:71:
09:cd:39:54:7c:38:75:f6:8f:e6:ba:09:22:1a:45:98:17:7d:
16:d5:2d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 03:33:38 2025 by rpki-client