Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZdXlwdUrvFP8o-IDQ3s3Gy5CAtI.roa
File: ZdXlwdUrvFP8o-IDQ3s3Gy5CAtI.roa (raw, json)
Hash identifier: sagkkVug5l+8TA42Bhhb/O00DsWjx/cK6T/zbU3Lufc=
Subject key identifier: 65:D5:E5:C1:D5:2B:BC:53:FC:A3:E2:03:43:7B:37:1B:2E:42:02:D2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196FEA42FBC64760789A9C7788290188E7A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZdXlwdUrvFP8o-IDQ3s3Gy5CAtI.roa
Signing time: Fri 23 May 2025 19:34:55 +0000
ROA not before: Fri 23 May 2025 19:34:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213520
IP address blocks: 31.57.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 31 May 2025 16:12:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fe:a4:2f:bc:64:76:07:89:a9:c7:78:82:90:18:8e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 23 19:34:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65d5e5c1d52bbc53fca3e203437b371b2e4202d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:29:e6:83:7b:78:4f:24:df:95:67:95:e5:2c:
c6:4c:f4:93:ea:88:de:36:17:e5:66:fd:f0:a2:5a:
b7:f8:4c:b8:0f:ca:27:41:fe:e3:33:f9:ca:1f:72:
02:8f:02:40:7c:22:f5:d1:c8:52:0c:e2:72:75:d8:
af:ae:8a:39:5b:85:01:fc:ad:a3:13:00:2c:2a:09:
2d:30:44:8f:6a:58:e1:8f:94:66:9a:f4:4f:33:2a:
c7:8c:e7:32:f8:b5:70:ac:fe:f6:9f:48:69:d5:36:
be:2e:9f:7f:a4:5a:ce:11:8d:ea:c9:be:58:56:c9:
56:59:b8:e7:bd:8a:72:ed:3e:31:bb:a9:c7:c3:87:
ef:0b:c1:5d:a3:77:73:a9:1c:c0:0f:b5:6f:39:d2:
c3:b3:ca:e2:45:34:73:e2:30:1d:76:a5:54:e7:4b:
71:44:bf:9b:8f:d7:98:74:02:43:ae:8d:69:52:9d:
73:30:bf:85:e9:b9:cc:e6:b8:b5:98:23:74:09:62:
ba:61:a2:e8:15:36:95:f2:15:d5:be:a0:c4:02:93:
39:bd:d8:e7:e2:bc:f3:79:1d:d6:ab:76:c9:8c:19:
28:40:9a:41:05:2f:89:00:4f:95:e7:3d:41:80:41:
6a:c0:6e:37:a0:58:34:94:b3:81:f4:8a:19:d4:88:
29:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D5:E5:C1:D5:2B:BC:53:FC:A3:E2:03:43:7B:37:1B:2E:42:02:D2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZdXlwdUrvFP8o-IDQ3s3Gy5CAtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.94.0/24
Signature Algorithm: sha256WithRSAEncryption
03:06:09:12:0d:5d:c2:83:57:d8:ac:47:ad:9f:e4:ae:75:c1:
a2:ad:aa:6c:49:52:ee:88:ef:62:35:37:41:79:04:6f:ff:2a:
02:2d:25:92:3f:ca:1c:32:44:55:5a:c4:ce:9d:d7:d4:6e:2e:
75:79:fd:b0:4d:a1:3d:7b:ee:29:c9:b0:06:f3:26:9f:db:2d:
34:54:2a:f5:3e:11:a9:91:80:46:c7:52:1a:1a:85:df:07:f5:
a9:a7:6c:d4:fe:f6:c9:a3:5e:70:5f:a2:59:7a:7c:91:40:f0:
ae:9c:8e:43:6e:6b:b0:26:bf:59:59:5e:b4:9f:a7:d4:67:a1:
84:e0:0f:6b:da:9b:75:27:b3:f7:29:b1:eb:f0:aa:38:16:45:
a1:9b:28:8c:1c:d4:e6:19:61:e4:95:be:6b:35:2f:d9:1c:ec:
db:c1:ce:b2:09:29:23:00:c3:23:04:05:31:df:45:e6:4f:25:
30:6c:30:99:c3:c4:0a:1b:70:23:75:b1:2e:6a:f0:92:52:25:
60:a1:a1:96:17:89:b2:67:46:7a:e6:2e:c0:a7:86:dc:30:e2:
77:e0:29:9c:36:3a:07:e8:3d:bf:c6:0f:e1:a9:ea:12:90:2c:
ce:f1:38:66:11:f7:e2:89:24:dc:ef:5e:c2:c1:8e:9a:d0:b8:
84:f2:c7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 03:42:53 2025 by rpki-client