Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7-IiWE9Ndw17lUyHyKd4fuMnKak.roa
File: 7-IiWE9Ndw17lUyHyKd4fuMnKak.roa (raw, json)
Hash identifier: vYQhC13SRUPPH7JPzoIjWLGQGpGTPgQrLiU3QniMReQ=
Subject key identifier: EF:E2:22:58:4F:4D:77:0D:7B:95:4C:87:C8:A7:78:7E:E3:27:29:A9
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196D4A9F73B6E1375DB7B218EA23F99F38A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7-IiWE9Ndw17lUyHyKd4fuMnKak.roa
Signing time: Thu 15 May 2025 15:57:10 +0000
ROA not before: Thu 15 May 2025 15:57:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 31.56.52.0/22 maxlen: 22
31.56.59.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.57.199.0/24 maxlen: 24
31.59.68.0/24 maxlen: 24
31.59.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 25 May 2025 12:21:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d4:a9:f7:3b:6e:13:75:db:7b:21:8e:a2:3f:99:f3:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 15 15:57:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efe222584f4d770d7b954c87c8a7787ee32729a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bd:12:43:43:77:b3:4b:38:d2:fc:a6:69:5d:
e2:44:3f:ff:da:24:a7:79:68:72:2f:36:5f:1c:5a:
2e:ca:e7:6c:63:e1:bf:f2:63:56:03:9c:72:da:5f:
2d:be:43:12:83:5c:54:40:84:b2:48:e9:47:21:d7:
cc:3e:f8:10:25:5c:2a:87:13:f3:7e:76:d3:e5:51:
dd:bf:18:31:69:46:f8:10:bc:b2:f2:06:67:7a:01:
fa:8a:3b:3b:a1:9d:b5:9d:ba:a1:37:ed:81:94:ae:
5b:54:54:e3:a2:7d:9b:84:3f:40:89:af:c4:a8:c4:
b5:6c:f0:eb:fb:fd:1f:c9:90:5b:e3:b8:4e:ed:fa:
90:17:84:a3:5f:18:06:73:cf:51:c1:dd:b7:f1:7a:
af:a1:8f:d3:95:dd:5e:02:42:8c:e2:76:b6:05:fe:
59:89:81:0b:ca:2a:bf:d4:47:e2:5c:3a:b5:86:52:
7f:b5:18:9d:4e:13:e8:98:19:e3:87:d4:aa:f3:b0:
17:cc:85:35:5f:11:09:55:70:9b:41:34:40:05:5a:
a7:7b:bb:fe:b1:ec:f8:49:72:61:b1:a6:39:8a:96:
bc:c0:f8:78:75:dd:85:c7:a1:bd:4c:8f:41:5e:4f:
e4:32:3b:d9:d9:c5:a4:a1:68:1c:6e:44:ac:bf:ba:
c6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E2:22:58:4F:4D:77:0D:7B:95:4C:87:C8:A7:78:7E:E3:27:29:A9
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7-IiWE9Ndw17lUyHyKd4fuMnKak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.52.0/22
31.56.59.0/24
31.56.77.0/24
31.57.199.0/24
31.59.68.0/24
31.59.71.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:19:b4:58:43:3d:fa:f9:9b:bd:3f:bf:e5:f8:6b:34:c3:cc:
5a:e6:4b:c3:07:c0:75:f9:6a:df:23:76:e7:f7:44:48:7f:1b:
03:05:22:2c:16:da:20:ee:88:c6:dc:38:6e:e2:92:8f:ab:58:
7a:d6:4a:fe:2a:a0:ce:b2:eb:f4:7f:0a:b9:64:1a:a2:87:b1:
55:0a:25:02:fc:5b:9c:9c:8b:4a:f7:c8:88:2a:7c:e7:36:79:
4d:10:37:96:6e:22:6d:0d:a1:d2:1c:d7:0b:00:39:3f:c5:a6:
5a:23:df:0f:77:00:c1:e8:fa:1a:96:7b:4a:aa:58:62:81:57:
61:69:e9:bc:01:56:2d:27:28:85:f1:91:d6:a2:19:ae:ba:54:
07:ff:c1:dd:f7:f9:a6:04:d4:09:ec:7f:df:c8:62:9a:5f:f9:
44:db:ca:f5:a0:20:9b:57:ce:f6:40:6d:f4:69:5f:03:c2:9f:
c7:cd:da:c9:62:87:7b:76:78:4d:54:fa:95:56:6b:13:c6:09:
c6:e7:c3:c2:88:eb:bd:55:ff:f9:a1:d9:9a:e3:ea:da:cf:d7:
6b:82:bd:73:6a:bd:34:75:a1:67:40:bf:8a:93:4a:78:0b:45:
7e:e4:53:08:2f:ea:d4:ef:77:49:39:a4:8f:ce:35:2e:17:fe:
ff:79:f8:7d
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZbUqfc7bhN123shjqI/mfOKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNTE1MTU1NzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZmUyMjI1ODRmNGQ3NzBkN2I5NTRjODdjOGE3Nzg3ZWUzMjcyOWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnb0SQ0N3s0s40vymaV3iRD//2iSn
eWhyLzZfHFouyudsY+G/8mNWA5xy2l8tvkMSg1xUQISySOlHIdfMPvgQJVwqhxPz
fnbT5VHdvxgxaUb4ELyy8gZnegH6ijs7oZ21nbqhN+2BlK5bVFTjon2bhD9Aia/E
qMS1bPDr+/0fyZBb47hO7fqQF4SjXxgGc89Rwd238XqvoY/Tld1eAkKM4na2Bf5Z
iYELyiq/1EfiXDq1hlJ/tRidThPomBnjh9Sq87AXzIU1XxEJVXCbQTRABVqne7v+
sez4SXJhsaY5ipa8wPh4dd2Fx6G9TI9BXk/kMjvZ2cWkoWgcbkSsv7rGUwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFO/iIlhPTXcNe5VMh8ineH7jJympMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvNy1JaVdFOU5kdzE3bFV5SHlLZDRmdU1uS2FrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCHzg0AwQA
Hzg7AwQAHzhNAwQAHznHAwQAHztEAwQAHztHMA0GCSqGSIb3DQEBCwUAA4IBAQCx
GbRYQz36+Zu9P7/l+Gs0w8xa5kvDB8B1+WrfI3bn90RIfxsDBSIsFtog7ojG3Dhu
4pKPq1h61kr+KqDOsuv0fwq5ZBqih7FVCiUC/FucnItK98iIKnznNnlNEDeWbiJt
DaHSHNcLADk/xaZaI98PdwDB6PoalntKqlhigVdhaem8AVYtJyiF8ZHWohmuulQH
/8Hd9/mmBNQJ7H/fyGKaX/lE28r1oCCbV872QG30aV8Dwp/HzdrJYod7dnhNVPqV
VmsTxgnG58PCiOu9Vf/5odma4+raz9drgr1zar00daFnQL+Kk0p4C0V+5FMIL+rU
73dJOaSPzjUuF/7/efh9
-----END CERTIFICATE-----
Generated at Thu Jun 5 03:54:00 2025 by rpki-client