Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/au8q_6izaRpCf3LbkCyT-7aKKLc.roa
File: au8q_6izaRpCf3LbkCyT-7aKKLc.roa (raw, json)
Hash identifier: ibW/yuoZt2+QvYTyc4jQNoRl983+DMH8NsMEInxXXBI=
Subject key identifier: 6A:EF:2A:FF:A8:B3:69:1A:42:7F:72:DB:90:2C:93:FB:B6:8A:28:B7
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195192D21A4A8AABD136FB23207A725B8A6
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/au8q_6izaRpCf3LbkCyT-7aKKLc.roa
Signing time: Tue 18 Feb 2025 13:09:02 +0000
ROA not before: Tue 18 Feb 2025 13:09:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210538
IP address blocks: 31.57.33.0/24 maxlen: 24
31.57.154.0/24 maxlen: 24
31.57.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Mar 2025 10:36:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:19:2d:21:a4:a8:aa:bd:13:6f:b2:32:07:a7:25:b8:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 18 13:09:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6aef2affa8b3691a427f72db902c93fbb68a28b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cf:f3:05:27:ef:49:e0:63:36:f3:84:32:dc:
5e:2f:64:f0:f3:08:a3:fb:7c:fb:0f:74:e8:2f:a5:
55:f3:bb:8a:66:84:46:e5:bb:e6:8e:77:fc:88:85:
c7:2a:1f:41:22:30:08:bc:9c:e5:2e:ca:8f:96:0b:
52:41:5b:9e:00:01:7c:44:b7:d7:2a:4b:92:9a:cc:
7f:a1:6b:92:57:a2:67:d6:2b:fc:d8:5e:85:e4:6a:
8f:df:ac:c1:6d:b6:b5:85:4e:5a:9c:09:02:87:f9:
37:24:09:8d:45:8f:2e:9c:69:d1:44:88:0b:57:38:
2d:ec:0b:be:10:06:10:fd:6b:d2:0e:df:89:ee:69:
ca:37:dc:ed:e7:16:b9:5e:65:74:6a:4f:df:72:92:
e9:7f:cc:3a:59:8b:84:af:10:09:0c:cd:32:78:9f:
ef:38:b6:ab:24:dc:ba:ba:1a:be:8e:ff:0d:24:3a:
e0:15:af:81:6c:d1:53:eb:74:e9:0e:35:f4:47:e9:
e7:7a:78:1b:34:23:d5:dd:ed:37:1d:2e:b3:e2:0c:
84:8f:c7:95:d8:09:06:27:6f:dc:13:0f:1d:8e:9a:
ee:c0:98:87:e2:fd:1d:f9:bd:94:96:40:02:7b:18:
eb:df:f1:79:18:98:12:c2:5a:a5:d9:2d:df:f6:1e:
38:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EF:2A:FF:A8:B3:69:1A:42:7F:72:DB:90:2C:93:FB:B6:8A:28:B7
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/au8q_6izaRpCf3LbkCyT-7aKKLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.33.0/24
31.57.154.0/24
31.57.156.0/24
Signature Algorithm: sha256WithRSAEncryption
49:61:8f:8a:74:cf:f9:9e:09:a7:9d:49:ca:1d:a1:7c:f0:85:
02:4d:24:89:29:83:2a:8a:18:05:c4:0d:35:f0:6d:3e:22:82:
a3:61:4d:dc:b2:d9:ea:98:91:63:f5:0a:ee:f0:41:b0:c4:fe:
f5:6f:94:ed:ef:45:e6:c7:e9:df:64:0d:5a:da:19:90:1d:31:
26:6f:0b:6d:19:35:c2:88:28:e8:73:53:af:0f:21:3a:5b:ac:
61:c4:09:f2:9b:f7:77:88:e0:7d:2f:f2:1a:ed:2f:80:11:ad:
50:6e:7b:c4:eb:d3:f0:04:1b:96:48:b1:d1:27:f4:51:f5:26:
f5:1b:b1:70:4f:f0:f8:ea:c6:2f:c4:f7:76:95:4e:60:9c:37:
ab:8b:ef:a4:87:cf:df:78:6b:24:0d:17:5d:f2:b3:45:9e:da:
94:96:59:6e:85:46:e5:c8:b9:f3:d7:4f:36:a7:e0:6a:74:c4:
01:6d:c2:db:09:f0:d4:15:65:50:bb:1a:66:11:99:09:67:8e:
bc:56:a3:67:b5:c3:d9:22:7f:b7:bf:8c:90:ec:65:6a:42:0c:
ea:c2:54:78:d5:ce:a1:cd:38:f8:e2:6e:d9:01:06:7b:fa:a8:
32:db:03:d2:63:df:b7:70:c2:e4:e2:a5:b0:3b:1d:b3:70:28:
6c:ef:11:74
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZUZLSGkqKq9E2+yMgenJbimMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMjE4MTMwOTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YWVmMmFmZmE4YjM2OTFhNDI3ZjcyZGI5MDJjOTNmYmI2OGEyOGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzc/zBSfvSeBjNvOEMtxeL2Tw8wij
+3z7D3ToL6VV87uKZoRG5bvmjnf8iIXHKh9BIjAIvJzlLsqPlgtSQVueAAF8RLfX
KkuSmsx/oWuSV6Jn1iv82F6F5GqP36zBbba1hU5anAkCh/k3JAmNRY8unGnRRIgL
Vzgt7Au+EAYQ/WvSDt+J7mnKN9zt5xa5XmV0ak/fcpLpf8w6WYuErxAJDM0yeJ/v
OLarJNy6uhq+jv8NJDrgFa+BbNFT63TpDjX0R+nnengbNCPV3e03HS6z4gyEj8eV
2AkGJ2/cEw8djpruwJiH4v0d+b2UlkACexjr3/F5GJgSwlql2S3f9h444QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGrvKv+os2kaQn9y25Ask/u2iii3MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvYXU4cV82aXphUnBDZjNMYmtDeVQtN2FLS0xjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHzkhAwQA
HzmaAwQAHzmcMA0GCSqGSIb3DQEBCwUAA4IBAQBJYY+KdM/5ngmnnUnKHaF88IUC
TSSJKYMqihgFxA018G0+IoKjYU3cstnqmJFj9Qru8EGwxP71b5Tt70Xmx+nfZA1a
2hmQHTEmbwttGTXCiCjoc1OvDyE6W6xhxAnym/d3iOB9L/Ia7S+AEa1QbnvE69Pw
BBuWSLHRJ/RR9Sb1G7FwT/D46sYvxPd2lU5gnDeri++kh8/feGskDRdd8rNFntqU
llluhUblyLnz1082p+BqdMQBbcLbCfDUFWVQuxpmEZkJZ468VqNntcPZIn+3v4yQ
7GVqQgzqwlR41c6hzTj44m7ZAQZ7+qgy2wPSY9+3cMLk4qWwOx2zcChs7xF0
-----END CERTIFICATE-----
Generated at Fri Apr 18 09:52:21 2025 by rpki-client