Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/AInGHdOrn7SjYEIFMBf-899brGQ.roa
File: AInGHdOrn7SjYEIFMBf-899brGQ.roa (raw, json)
Hash identifier: oUGde+I7OBgtFUyQmAhOWh1d/ucUmrCfgzg35Czk6pg=
Subject key identifier: 00:89:C6:1D:D3:AB:9F:B4:A3:60:42:05:30:17:FE:F3:DF:5B:AC:64
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196FDB3674F20BA056721A8F81D2A998308
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/AInGHdOrn7SjYEIFMBf-899brGQ.roa
Signing time: Fri 23 May 2025 15:11:55 +0000
ROA not before: Fri 23 May 2025 15:11:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213613
IP address blocks: 31.56.48.0/24 maxlen: 24
31.57.12.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 May 2025 09:03:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fd:b3:67:4f:20:ba:05:67:21:a8:f8:1d:2a:99:83:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 23 15:11:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0089c61dd3ab9fb4a36042053017fef3df5bac64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0f:f5:e4:3b:62:5a:8c:66:1a:18:1a:c0:f5:
9f:82:c2:1b:32:f6:cf:c2:af:5b:48:6c:66:51:e5:
60:1f:14:df:39:07:8f:63:37:9e:0a:01:04:ce:8f:
9c:2c:b6:b7:d9:d8:3c:61:95:18:25:2f:0e:3a:de:
7d:7b:28:70:9b:6f:6a:dc:da:39:cd:90:39:7c:ae:
9b:68:d2:41:af:1b:4f:3b:d2:28:34:6f:45:57:c8:
29:43:05:aa:ee:a7:71:59:0c:86:16:e5:5d:f2:6f:
9f:2c:b1:f2:ae:47:df:2c:42:6e:19:a7:d9:22:f6:
9a:6b:0c:47:ef:97:54:c9:db:e0:02:3f:6d:6f:03:
bb:79:b7:02:57:2f:e6:1a:6b:5b:81:84:3c:a3:63:
9b:0f:ff:45:c0:89:27:d2:98:bb:b5:78:e8:c6:a5:
98:15:c8:2d:4d:e7:69:18:b0:8e:78:a4:4f:fd:5f:
0c:0d:45:7c:a1:c5:a9:85:ce:44:03:e8:99:aa:1b:
ae:15:53:e0:5f:8b:cc:60:b5:f7:30:52:e4:a1:d0:
0c:fd:78:25:9d:19:dc:43:62:b1:c4:a1:a3:0b:8c:
36:cc:cf:da:0e:24:eb:dc:4e:7a:ed:40:0c:34:25:
56:61:0b:26:5b:c2:78:b1:6b:bb:14:6d:1d:8e:e6:
3e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:89:C6:1D:D3:AB:9F:B4:A3:60:42:05:30:17:FE:F3:DF:5B:AC:64
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/AInGHdOrn7SjYEIFMBf-899brGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.48.0/24
31.57.12.0/23
Signature Algorithm: sha256WithRSAEncryption
50:a2:c5:30:d0:95:f2:e3:90:1e:cb:6c:92:7f:4e:4e:ef:98:
41:17:ad:4a:93:23:87:f8:58:83:ed:e4:84:e9:4b:60:77:97:
07:7b:4b:96:e5:b7:9d:ed:12:05:42:a5:a4:aa:df:49:bf:a9:
9f:70:d3:23:01:d6:bc:19:3e:c3:ec:d2:ce:d2:28:cb:71:ae:
81:12:89:65:90:85:11:d7:96:cf:9d:c9:6d:fe:64:a6:13:e5:
e6:72:f2:75:ad:de:93:fc:21:de:b4:6e:21:ca:d3:48:cb:23:
44:fd:f7:3d:d7:af:95:f2:51:63:6a:98:b9:f0:f2:9e:15:5f:
12:d8:67:27:39:51:55:8a:7a:a0:c6:4d:34:0e:9d:bc:fb:f9:
10:b1:4f:7f:5e:93:6a:34:0c:58:bc:62:3e:60:bb:1c:3b:f4:
e6:9f:89:00:82:af:dd:0b:bd:70:9e:a2:c8:42:8a:d1:79:28:
17:8f:84:01:4b:97:65:63:75:a3:d0:cd:1c:3b:a3:63:fa:c4:
6f:42:4f:16:13:1e:b9:5e:ed:ec:dd:5f:25:7e:63:d0:a0:05:
1e:87:f3:97:2a:da:53:a4:0d:99:0c:ed:01:dc:0b:02:95:09:
d6:66:84:03:cf:fa:5b:37:c7:a2:57:2a:52:d9:29:a0:39:84:
c4:e6:1a:a4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZb9s2dPILoFZyGo+B0qmYMIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNTIzMTUxMTU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDg5YzYxZGQzYWI5ZmI0YTM2MDQyMDUzMDE3ZmVmM2RmNWJhYzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ/15DtiWoxmGhgawPWfgsIbMvbP
wq9bSGxmUeVgHxTfOQePYzeeCgEEzo+cLLa32dg8YZUYJS8OOt59eyhwm29q3No5
zZA5fK6baNJBrxtPO9IoNG9FV8gpQwWq7qdxWQyGFuVd8m+fLLHyrkffLEJuGafZ
IvaaawxH75dUydvgAj9tbwO7ebcCVy/mGmtbgYQ8o2ObD/9FwIkn0pi7tXjoxqWY
FcgtTedpGLCOeKRP/V8MDUV8ocWphc5EA+iZqhuuFVPgX4vMYLX3MFLkodAM/Xgl
nRncQ2KxxKGjC4w2zM/aDiTr3E567UAMNCVWYQsmW8J4sWu7FG0djuY+DwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFACJxh3Tq5+0o2BCBTAX/vPfW6xkMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvQUluR0hkT3JuN1NqWUVJRk1CZi04OTlickdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzgwAwQB
HzkMMA0GCSqGSIb3DQEBCwUAA4IBAQBQosUw0JXy45Aey2ySf05O75hBF61KkyOH
+FiD7eSE6Utgd5cHe0uW5bed7RIFQqWkqt9Jv6mfcNMjAda8GT7D7NLO0ijLca6B
EollkIUR15bPnclt/mSmE+XmcvJ1rd6T/CHetG4hytNIyyNE/fc916+V8lFjapi5
8PKeFV8S2GcnOVFVinqgxk00Dp28+/kQsU9/XpNqNAxYvGI+YLscO/Tmn4kAgq/d
C71wnqLIQorReSgXj4QBS5dlY3Wj0M0cO6Nj+sRvQk8WEx65Xu3s3V8lfmPQoAUe
h/OXKtpTpA2ZDO0B3AsClQnWZoQDz/pbN8eiVypS2SmgOYTE5hqk
-----END CERTIFICATE-----
Generated at Thu Jun 5 03:45:40 2025 by rpki-client