Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8gfor3fPMD0oeXKi_PkXnEAprsw.roa
File: 8gfor3fPMD0oeXKi_PkXnEAprsw.roa (raw, json)
Hash identifier: pIZchqZ309gtFH4gjNVRaHFb0ljm+rBg2R/2JHz3csw=
Subject key identifier: F2:07:E8:AF:77:CF:30:3D:28:79:72:A2:FC:F9:17:9C:40:29:AE:CC
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197224DD46F6A315891E10956F8E93E0D5D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8gfor3fPMD0oeXKi_PkXnEAprsw.roa
Signing time: Fri 30 May 2025 17:46:55 +0000
ROA not before: Fri 30 May 2025 17:46:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56106
IP address blocks: 31.56.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Jun 2025 16:22:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:22:4d:d4:6f:6a:31:58:91:e1:09:56:f8:e9:3e:0d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 30 17:46:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f207e8af77cf303d287972a2fcf9179c4029aecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fc:33:ed:e0:6f:31:9b:ab:b0:d5:be:13:79:
22:45:9a:e0:05:16:bc:c1:c3:c9:4b:39:4f:e9:c5:
59:36:1b:a5:3c:e0:be:44:e1:e9:6f:a8:51:84:46:
86:a1:1f:6b:62:45:f0:ca:7a:61:fd:0c:3c:9a:e0:
cb:ea:70:fe:69:2f:79:ad:b4:d3:56:93:7c:70:2e:
6b:42:84:65:e6:85:6d:a6:03:1b:a6:fc:25:44:40:
9f:39:a9:8a:04:f7:c2:46:60:d6:db:b6:c5:cb:8b:
cb:1f:c5:e9:49:cc:fb:41:37:e3:3e:e6:cb:b3:2a:
71:41:34:93:a2:62:fe:bd:26:78:be:fd:1d:e6:a0:
9e:b8:ad:0e:c0:3f:f3:7f:ff:60:8b:66:c2:5a:c7:
38:eb:93:e5:86:58:20:7f:60:02:89:47:4f:3d:e9:
f4:72:78:3b:10:bd:d8:35:39:dd:cd:ef:73:1e:97:
75:05:4c:8d:b1:9f:62:57:20:0d:ac:9f:fb:30:55:
16:86:b7:80:b5:2b:bb:cf:51:9b:40:48:98:78:ec:
8f:c6:bb:89:39:c6:a5:9f:f4:f9:72:4a:35:68:ae:
f1:12:e9:04:84:b0:ac:93:fd:49:e9:2b:b1:11:a4:
76:06:76:52:fa:40:18:b0:4a:a9:8c:2c:3e:ba:31:
a0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:07:E8:AF:77:CF:30:3D:28:79:72:A2:FC:F9:17:9C:40:29:AE:CC
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8gfor3fPMD0oeXKi_PkXnEAprsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.23.0/24
Signature Algorithm: sha256WithRSAEncryption
95:24:03:52:d2:ef:a2:51:3f:05:c3:b5:50:03:a3:27:79:c1:
fd:9d:cf:c3:45:30:89:41:03:70:c7:cf:21:9d:19:b4:91:d5:
7b:4b:e7:a5:90:f5:8e:41:bc:b9:31:92:3b:3c:74:f0:ac:fc:
80:88:24:bd:cc:3e:38:f7:ff:dc:74:97:e7:fd:a7:29:bc:dd:
5a:88:16:40:6c:5f:b9:67:43:00:74:fb:42:05:61:23:02:b9:
2e:cf:76:8f:e1:fc:25:37:39:53:f6:92:83:20:46:a0:65:18:
71:91:65:b5:3a:73:e3:50:62:75:3e:c0:bc:24:46:29:9d:15:
f2:dc:2b:8c:d9:71:56:8e:cf:d4:9b:7b:f9:de:dd:9b:3f:52:
fc:c6:c0:ef:9e:8b:90:f5:03:ae:f4:45:d9:29:f6:17:ce:9f:
68:76:fa:cb:bb:2b:ba:c7:80:99:de:e6:1a:ce:60:c5:68:69:
ec:70:e2:44:c5:b3:cc:27:08:71:12:a7:1d:62:e2:fc:17:86:
de:fc:81:eb:00:53:28:09:54:8e:e9:cf:2e:9b:43:2e:be:17:
e4:bf:d1:f1:79:0a:9b:61:1e:dd:36:d9:14:1e:e9:3b:30:90:
3e:7b:aa:40:f7:1b:29:44:f2:78:31:9c:1c:07:16:55:1d:6f:
38:0e:4c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 04:22:31 2025 by rpki-client