Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3psgDnon6wmtQWY6_3FE-n9DIB8.roa
File: 3psgDnon6wmtQWY6_3FE-n9DIB8.roa (raw, json)
Hash identifier: UHZuRdfn/xnA3EbUVyTajexuAFevfwzz+NOTfEW4UhU=
Subject key identifier: DE:9B:20:0E:7A:27:EB:09:AD:41:66:3A:FF:71:44:FA:7F:43:20:1F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196C817E2B58AE3BDEF3A666AA07D3580B8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3psgDnon6wmtQWY6_3FE-n9DIB8.roa
Signing time: Tue 13 May 2025 05:22:10 +0000
ROA not before: Tue 13 May 2025 05:22:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 31.56.86.0/24 maxlen: 24
31.56.107.0/24 maxlen: 24
31.57.122.0/24 maxlen: 24
31.57.124.0/24 maxlen: 24
31.57.125.0/24 maxlen: 24
31.57.140.0/24 maxlen: 24
31.57.162.0/23 maxlen: 23
31.57.164.0/23 maxlen: 23
31.57.180.0/24 maxlen: 24
31.57.196.0/24 maxlen: 24
31.57.221.0/24 maxlen: 24
31.58.41.0/24 maxlen: 24
31.58.42.0/24 maxlen: 24
31.58.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 May 2025 07:55:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:17:e2:b5:8a:e3:bd:ef:3a:66:6a:a0:7d:35:80:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 13 05:22:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de9b200e7a27eb09ad41663aff7144fa7f43201f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:23:4d:62:90:b4:60:5a:5c:0e:9d:ba:79:55:
b1:9a:56:5a:52:ef:cd:75:e2:e8:7e:3b:55:6a:dc:
9c:0b:7f:7c:58:08:15:46:10:2b:69:c9:a7:c7:e3:
73:b1:ef:45:d6:dd:91:37:02:c8:aa:e4:16:bc:d1:
db:60:f0:bd:4a:49:fd:c0:82:bd:96:e0:1b:60:49:
19:d8:56:28:85:8d:08:1d:29:df:09:5d:de:2e:8d:
59:63:a6:47:8a:f1:09:da:7f:f2:72:4c:ab:be:96:
16:e8:b9:59:71:4c:f1:08:ea:70:64:98:4b:33:20:
87:f0:f7:e3:47:67:40:d3:d1:7f:a6:83:69:89:27:
f5:a5:f1:0f:e3:d4:3e:61:69:db:d3:f2:f1:cb:47:
0e:93:5b:28:19:4b:42:5e:12:1e:6b:d1:ec:c4:6c:
35:64:a1:a4:95:75:c0:2c:78:05:54:a4:dc:ba:01:
71:c4:b2:4c:45:c8:46:d9:01:2d:04:89:84:8e:8a:
05:bf:ca:5d:6a:dd:95:72:05:7f:8f:5a:f3:fe:00:
fe:4d:bb:3c:28:b4:fd:c5:68:00:65:d3:6d:9f:5e:
36:0f:4c:ef:66:da:a3:d2:3c:c8:01:07:b8:c2:3e:
a7:90:d2:b4:d0:26:4c:0b:8f:43:15:ab:05:50:66:
42:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:9B:20:0E:7A:27:EB:09:AD:41:66:3A:FF:71:44:FA:7F:43:20:1F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3psgDnon6wmtQWY6_3FE-n9DIB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.86.0/24
31.56.107.0/24
31.57.122.0/24
31.57.124.0/23
31.57.140.0/24
31.57.162.0-31.57.165.255
31.57.180.0/24
31.57.196.0/24
31.57.221.0/24
31.58.41.0-31.58.42.255
31.58.48.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:db:07:21:3a:af:64:5d:e6:cd:09:7f:1b:8c:6f:27:cd:50:
0c:ad:04:c9:f9:8c:3e:45:35:9f:3e:68:cb:96:f1:d2:e0:02:
74:17:dd:d6:09:ce:77:41:12:87:f7:59:1a:34:c4:87:12:c4:
0d:b5:f0:04:8e:8e:fa:c7:24:89:d6:b8:e3:87:d6:62:86:89:
5e:1b:2a:35:3a:a1:08:5b:48:74:10:82:c4:2b:e1:71:31:81:
79:c8:a6:16:97:f7:d0:6a:fc:e7:43:34:2c:28:0f:d4:d4:4b:
5b:18:7d:a7:89:7f:5d:60:e7:e3:ac:a7:59:df:f8:58:21:70:
86:40:a1:78:9f:92:fa:6c:9d:06:f9:7c:e2:14:e1:b0:90:dc:
b5:d7:cc:b7:08:7d:76:29:25:69:4e:46:b3:8f:02:f9:31:c4:
12:5b:7b:c7:18:6b:84:de:be:dc:00:fd:2e:3b:a5:ca:23:02:
33:20:2f:68:68:b4:a1:d8:40:74:08:87:05:0e:2a:93:d3:8a:
4a:ce:88:fb:21:b1:c4:6a:ca:47:b6:59:b9:5e:41:83:16:a2:
28:f3:9c:98:2a:c6:35:ca:aa:0d:fa:05:92:cc:8b:04:9a:d1:
19:3b:1f:de:00:10:3f:12:39:5c:51:7c:75:b5:35:fe:2d:c8:
9f:46:32:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 04:35:01 2025 by rpki-client