Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/H17X51KCFuzo1VpxNTIEVU_reVg.roa
File: H17X51KCFuzo1VpxNTIEVU_reVg.roa (raw, json)
Hash identifier: TTmmCMc4wvVDDyPvHwPv4w+MCjsluRjIy84GSh5AQhM=
Subject key identifier: 1F:5E:D7:E7:52:82:16:EC:E8:D5:5A:71:35:32:04:55:4F:EB:79:58
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A015CCA904E4AE81727CB137A671491954
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/H17X51KCFuzo1VpxNTIEVU_reVg.roa
Signing time: Tue 18 Aug 2026 16:55:29 +0000
ROA not before: Tue 18 Aug 2026 16:55:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 31.56.8.0/21 maxlen: 24
31.56.79.0/24 maxlen: 24
31.56.107.0/24 maxlen: 24
31.56.126.0/24 maxlen: 24
31.57.114.0/24 maxlen: 24
31.57.116.0/24 maxlen: 24
31.59.79.0/24 maxlen: 24
31.59.228.0/24 maxlen: 24
2a14:6e40:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 26 Aug 2026 17:37:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:15:cc:a9:04:e4:ae:81:72:7c:b1:37:a6:71:49:19:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 18 16:55:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1f5ed7e7528216ece8d55a71353204554feb7958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e3:ed:1c:9c:4e:64:5a:8b:ae:47:56:ce:c8:
8d:be:91:99:d5:fe:d7:f5:4e:54:e8:01:3c:32:2e:
37:37:bc:e5:83:c1:61:09:ce:07:02:00:69:23:2f:
13:a1:64:e6:22:b8:66:84:80:e3:3e:07:33:2e:7d:
e3:45:1d:bd:42:a3:55:a6:2f:15:57:6b:b3:35:1b:
a8:70:1c:d4:56:46:7e:f4:d7:50:8a:dd:ca:a4:5d:
bd:aa:c6:3d:db:d6:24:6f:1f:0e:ad:ae:35:40:aa:
52:53:da:12:b7:4a:24:8c:13:e8:4c:13:dd:6d:f8:
32:2f:62:19:f4:32:a5:fb:74:70:7c:0f:ba:d8:ba:
8d:9c:4e:e3:2b:5b:2c:95:61:0b:d2:9e:76:b5:76:
2f:eb:b0:7d:73:dd:20:40:0f:21:c5:48:ad:7e:0d:
e8:9b:aa:e3:30:9b:b1:5a:22:af:40:30:99:38:c7:
e2:85:dc:20:1e:4d:2f:66:4d:b2:24:62:17:1f:11:
0f:21:f4:3d:21:01:5b:50:90:74:61:f7:d3:db:d5:
ea:c0:07:86:60:9d:d1:43:28:91:24:a0:24:b7:d5:
ae:7b:dc:93:66:41:76:a5:77:99:8e:b8:a1:aa:20:
e6:52:6f:ed:7d:6e:13:5f:04:31:d2:4b:41:7e:ae:
99:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:5E:D7:E7:52:82:16:EC:E8:D5:5A:71:35:32:04:55:4F:EB:79:58
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/H17X51KCFuzo1VpxNTIEVU_reVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.8.0/21
31.56.79.0/24
31.56.107.0/24
31.56.126.0/24
31.57.114.0/24
31.57.116.0/24
31.59.79.0/24
31.59.228.0/24
IPv6:
2a14:6e40:2::/48
Signature Algorithm: sha256WithRSAEncryption
66:70:33:c3:15:c6:66:2c:39:96:e9:f2:ac:db:bc:14:5f:6f:
cf:9e:a5:a9:8a:46:0c:d3:94:2d:cf:fc:fd:0a:be:25:d4:cd:
af:2b:f7:f6:05:ce:ed:ab:fd:87:b4:05:4f:b1:91:3a:44:63:
b8:5b:20:c1:0c:0c:3f:bc:82:40:a3:f1:d0:6b:7a:a4:5c:56:
1d:e3:75:e6:82:5e:4a:9a:81:46:9f:69:dd:0f:92:b8:4c:d3:
e5:12:e4:9f:e2:8b:b0:53:75:87:52:68:ec:4d:0a:01:8e:33:
f8:f0:8d:7d:db:73:b4:f8:af:2e:a7:ba:99:0a:f7:c8:97:31:
ee:05:ca:69:7a:21:10:ec:4f:d7:c0:73:a4:fa:ca:d1:d4:90:
8c:d5:1e:e3:2a:2c:48:93:33:98:12:e1:6f:1e:35:e2:6e:0b:
6a:a9:37:94:b7:fd:94:4d:e5:74:78:98:78:a8:d8:bf:8f:12:
d7:27:7e:dc:a1:dd:ee:8f:80:87:32:64:2a:9c:bf:b3:14:1f:
88:08:af:65:6c:dc:24:63:f2:be:a9:4d:c7:8f:d7:47:f1:02:
74:65:34:17:12:85:a9:2b:f7:de:d0:95:1e:2f:4a:c2:6c:2e:
20:db:4c:5c:b9:24:1e:15:b9:62:e9:19:69:ed:7b:ad:54:1e:
17:fe:87:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 10:07:19 2026 by rpki-client