Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5aAmaxhPaclbzmYwjGmQ92igAHE.roa
File: 5aAmaxhPaclbzmYwjGmQ92igAHE.roa (raw, json)
Hash identifier: OWsY5lvDW0Q8kxZ/9LuwjYYHMXW4qbWPN9/FsUwZklM=
Subject key identifier: E5:A0:26:6B:18:4F:69:C9:5B:CE:66:30:8C:69:90:F7:68:A0:00:71
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196D2E11E7411E28E820D5F88D4A4A37D5F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5aAmaxhPaclbzmYwjGmQ92igAHE.roa
Signing time: Thu 15 May 2025 07:38:10 +0000
ROA not before: Thu 15 May 2025 07:38:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58212
IP address blocks: 31.57.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 24 May 2025 12:09:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d2:e1:1e:74:11:e2:8e:82:0d:5f:88:d4:a4:a3:7d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 15 07:38:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5a0266b184f69c95bce66308c6990f768a00071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:38:7b:64:29:49:fd:c3:91:38:47:49:67:07:
ff:82:03:a4:a5:78:44:74:67:82:98:0f:64:91:32:
32:96:5b:82:64:c9:a4:28:d9:5b:85:b0:15:53:72:
10:fd:19:8f:dd:65:97:2c:67:43:b9:07:c0:f3:e6:
91:89:02:39:90:fa:df:05:6a:fd:4a:64:14:d5:ed:
00:18:32:08:50:86:0f:41:10:09:e1:ab:49:19:58:
1c:22:aa:6b:ab:9e:f0:41:16:48:c7:e7:e7:62:39:
6e:14:ab:65:66:d9:88:f8:e2:5c:e1:2c:b4:b3:3a:
5e:69:09:29:6d:11:65:21:b7:b7:74:40:22:9a:a7:
50:b1:bd:4e:7d:87:65:93:6a:c0:a0:52:14:4f:37:
ec:e2:4f:44:87:42:d7:73:e0:d0:f5:da:01:92:51:
88:e7:0d:17:f0:90:24:b6:0f:4f:b1:e7:d7:e0:fd:
07:81:83:2f:f1:ae:cd:54:f5:0a:55:94:83:2d:5e:
84:80:00:15:67:3a:f6:c4:64:8a:a7:d3:68:33:8e:
3c:17:40:b2:c7:4d:16:12:68:82:fb:99:1d:b1:e9:
5c:3d:72:2e:73:ba:cd:86:66:32:bd:73:78:a1:47:
98:76:92:ab:ea:1b:6d:16:30:b2:e5:24:79:64:ee:
05:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A0:26:6B:18:4F:69:C9:5B:CE:66:30:8C:69:90:F7:68:A0:00:71
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5aAmaxhPaclbzmYwjGmQ92igAHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.190.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:0c:a2:18:be:b6:49:8a:e9:e7:6f:6b:9a:06:e2:49:97:44:
6f:41:3f:f5:cc:36:5f:72:86:d9:e2:4b:d9:55:6c:ad:c4:5c:
20:ad:97:46:67:32:89:68:7c:59:57:aa:7b:8e:22:79:23:00:
27:ec:a4:c3:74:e9:14:b4:66:06:b8:bb:6a:63:69:9e:4f:61:
82:48:0b:17:73:a3:a4:09:64:b9:14:7d:1f:d5:13:37:db:16:
3c:b7:a1:be:38:5f:ef:9c:70:91:2f:70:49:77:6e:41:33:36:
0f:e9:7b:ba:14:50:3d:7d:d4:6b:1e:f1:a0:e4:cf:20:71:2d:
9b:a9:13:b0:ce:66:c1:5a:4e:5f:d4:d2:14:a0:16:94:51:e1:
8a:36:c5:01:f0:2f:0f:65:14:4e:22:06:5e:87:b4:f5:20:d6:
d3:fd:25:1c:74:6e:2d:76:ff:f3:df:a2:15:12:65:07:96:d9:
5e:4f:cb:73:1f:41:5b:34:7c:d3:db:33:e1:6f:85:3a:fd:a2:
9c:2f:1a:60:0b:bf:1d:40:db:74:30:98:92:ca:24:fb:ae:77:
25:a4:85:bb:0e:0c:20:58:1f:fd:1e:e7:15:1c:d1:33:7c:de:
8f:6d:2f:4f:88:14:18:ac:60:50:16:5d:74:00:23:35:a9:3b:
d1:de:a1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 04:32:10 2025 by rpki-client