Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ESqP9Y3Ql2xQ0cgLnYN7qCK-6MY.roa
File: ESqP9Y3Ql2xQ0cgLnYN7qCK-6MY.roa (raw, json)
Hash identifier: MBDp7UqGYMO6mBuS4YTy7z3a950Od8zSh2Uni+dRH+g=
Subject key identifier: 11:2A:8F:F5:8D:D0:97:6C:50:D1:C8:0B:9D:83:7B:A8:22:BE:E8:C6
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196E4856B14EEBECCE9CAD12492463B3BB0
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ESqP9Y3Ql2xQ0cgLnYN7qCK-6MY.roa
Signing time: Sun 18 May 2025 17:51:11 +0000
ROA not before: Sun 18 May 2025 17:51:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399486
IP address blocks: 31.57.188.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 May 2025 07:04:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e4:85:6b:14:ee:be:cc:e9:ca:d1:24:92:46:3b:3b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 18 17:51:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=112a8ff58dd0976c50d1c80b9d837ba822bee8c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:10:8d:fd:73:31:54:4e:e7:8e:fa:ad:ed:90:
4a:b5:82:f6:c3:8f:30:5f:ca:b7:71:d9:7f:36:1f:
9c:e6:cf:8a:a7:34:43:c9:ac:59:ec:8a:76:16:40:
a8:b4:2f:5a:a5:93:95:11:8d:c7:4f:ac:69:ef:a5:
d4:10:a8:90:be:b7:f2:71:2f:c7:5f:2f:c1:5d:ad:
ce:bd:b3:8c:97:fc:5c:af:ac:76:ef:d0:1f:c6:b1:
28:a0:ea:de:a2:fc:d3:1e:fa:2f:ba:66:5c:4c:15:
79:15:b3:56:a2:2b:3d:cb:de:e1:08:71:e5:9e:0c:
5b:e5:fd:97:e3:0c:de:84:e4:24:60:64:2e:43:6c:
84:23:a3:d8:f4:b6:f7:24:68:b6:66:ac:d7:fb:da:
c1:4a:99:6e:fb:b2:0d:7a:69:ca:e2:b5:21:3e:57:
38:e4:d7:b1:50:b5:f6:24:64:94:7a:0f:b4:4f:4c:
62:23:ee:93:5d:df:e7:09:f2:58:5b:11:e6:e3:45:
ce:0e:6b:58:d1:09:7a:e2:b1:cf:83:38:ee:22:63:
1a:bf:9a:b0:eb:58:60:6b:33:a6:bc:b4:93:3b:35:
60:db:d8:5b:7c:ac:4d:2d:ed:23:61:28:f7:95:f6:
86:17:77:3a:46:f9:0d:d0:71:15:57:6f:9f:b1:5f:
70:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2A:8F:F5:8D:D0:97:6C:50:D1:C8:0B:9D:83:7B:A8:22:BE:E8:C6
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ESqP9Y3Ql2xQ0cgLnYN7qCK-6MY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.188.0/24
31.57.219.0/24
Signature Algorithm: sha256WithRSAEncryption
71:c1:10:53:5f:a8:0d:38:28:54:ca:99:6b:15:9b:d2:5f:2c:
9d:a3:6b:b1:3f:c9:cc:a2:a1:c6:a4:8c:88:87:3f:ab:7b:9f:
3a:e2:ca:3c:1e:1d:11:fa:7a:b5:7d:0a:a3:f9:ee:ad:58:e7:
3d:7f:36:a6:24:3c:cf:ed:5a:20:78:67:14:02:dc:82:aa:5f:
d2:2f:bd:8b:d2:ea:fd:fd:f4:db:66:57:16:3c:98:b6:d9:12:
7c:b4:0a:73:1e:47:52:a2:60:fd:4e:06:6b:17:b8:5f:b6:89:
35:c1:47:82:0a:20:1e:33:04:c8:89:cd:fc:ca:a6:b0:ed:3e:
57:a3:ed:16:cb:59:58:43:94:66:7d:95:49:b8:e9:e7:ce:52:
a9:71:2b:b4:fe:65:d6:20:27:34:c4:62:61:1f:4d:b6:79:b3:
cb:6c:63:c2:ce:43:79:bf:10:82:01:4c:72:a9:b5:22:4b:d8:
5a:28:4e:19:1c:c6:99:ba:83:47:1e:7f:f8:63:7b:32:fd:07:
36:00:60:3c:e7:07:cb:51:97:7e:49:a6:51:68:b1:09:d0:4d:
2e:60:a2:17:d9:e0:a3:65:45:47:b2:79:b9:90:8d:32:b0:8b:
84:c3:6d:45:4b:a1:4d:f7:d3:90:48:e0:47:e0:9a:1d:f1:4a:
a9:a0:4c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 03:58:51 2025 by rpki-client