Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cB-2XTkFKYGvkzfXZZBW1rJGMI4.roa
File: cB-2XTkFKYGvkzfXZZBW1rJGMI4.roa (raw, json)
Hash identifier: kOQYsqeUuOxA7A9pUe8xQxy1uS4w8LwJnkGlKLQDeH8=
Subject key identifier: 70:1F:B6:5D:39:05:29:81:AF:93:37:D7:65:90:56:D6:B2:46:30:8E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197165937BACB36BA7AE9EE93C64C68686C
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cB-2XTkFKYGvkzfXZZBW1rJGMI4.roa
Signing time: Wed 28 May 2025 10:03:55 +0000
ROA not before: Wed 28 May 2025 10:03:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 31.56.113.0/24 maxlen: 24
31.56.154.0/24 maxlen: 24
31.56.158.0/24 maxlen: 24
31.56.159.0/24 maxlen: 24
31.56.168.0/24 maxlen: 24
31.56.169.0/24 maxlen: 24
31.56.170.0/24 maxlen: 24
31.56.171.0/24 maxlen: 24
31.56.174.0/24 maxlen: 24
31.56.175.0/24 maxlen: 24
31.57.24.0/22 maxlen: 24
31.57.28.0/22 maxlen: 24
31.57.48.0/22 maxlen: 24
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.105.0/24 maxlen: 24
31.57.106.0/24 maxlen: 24
31.57.107.0/24 maxlen: 24
31.57.108.0/24 maxlen: 24
31.57.109.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.212.0/22 maxlen: 24
217.60.0.0/21 maxlen: 24
217.60.0.0/24 maxlen: 24
217.60.1.0/24 maxlen: 24
217.60.2.0/24 maxlen: 24
217.60.4.0/24 maxlen: 24
217.60.5.0/24 maxlen: 24
217.60.6.0/24 maxlen: 24
217.60.12.0/22 maxlen: 24
217.60.12.0/24 maxlen: 24
217.60.13.0/24 maxlen: 24
217.60.14.0/24 maxlen: 24
217.60.24.0/22 maxlen: 24
217.60.36.0/22 maxlen: 24
217.60.60.0/22 maxlen: 24
217.60.60.0/24 maxlen: 24
217.60.61.0/24 maxlen: 24
217.60.62.0/24 maxlen: 24
217.60.63.0/24 maxlen: 24
217.60.188.0/22 maxlen: 24
217.60.192.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Jun 2025 08:57:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:16:59:37:ba:cb:36:ba:7a:e9:ee:93:c6:4c:68:68:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 28 10:03:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=701fb65d39052981af9337d7659056d6b246308e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c9:d6:cc:78:f6:de:38:f3:c5:e1:fc:cb:b4:
b4:30:ce:7f:53:90:5c:0b:05:5a:04:d3:f8:89:a7:
5f:18:e8:8e:ab:56:b6:df:a8:6b:e4:3a:bc:de:32:
f5:7d:b7:0b:a5:ee:e4:6a:b0:7d:0d:d5:e5:75:ad:
ad:b3:75:ca:70:86:82:dc:56:f2:4f:6d:12:af:7b:
99:90:0b:5d:89:fb:00:a8:a0:b7:04:bb:54:35:aa:
fa:28:e1:80:6f:ca:d3:0f:7e:fc:2d:bb:0f:54:b1:
7b:8e:85:ad:5d:0a:06:b1:a2:45:4c:f1:25:10:94:
93:a4:d0:85:98:be:3c:0f:24:82:fd:35:4d:11:0e:
fa:d1:04:4e:c0:72:b4:ea:bc:bd:b1:76:e1:66:4c:
7f:bd:2a:21:e4:ac:b7:5b:79:33:0a:d4:ab:36:16:
f9:0b:2e:47:c7:7b:90:ab:64:f7:0a:31:bd:8e:fe:
98:ee:33:f0:3e:79:d4:0a:e1:25:5c:dc:ab:70:b2:
b9:1c:7b:44:87:46:ef:d3:85:2a:1d:ae:00:67:2b:
ad:03:60:69:a7:0e:85:44:53:31:e4:c4:23:9e:1c:
66:f7:8b:d7:e1:42:ab:e8:b7:99:9d:93:cd:66:a9:
85:8d:43:d5:d1:80:18:d4:f7:09:8c:7b:33:5f:ac:
52:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1F:B6:5D:39:05:29:81:AF:93:37:D7:65:90:56:D6:B2:46:30:8E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cB-2XTkFKYGvkzfXZZBW1rJGMI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.113.0/24
31.56.154.0/24
31.56.158.0/23
31.56.168.0/22
31.56.174.0/23
31.57.24.0/21
31.57.48.0-31.57.59.255
31.57.105.0-31.57.109.255
31.58.34.0/23
31.58.212.0/22
217.60.0.0/21
217.60.12.0/22
217.60.24.0/22
217.60.36.0/22
217.60.60.0/22
217.60.188.0-217.60.195.255
Signature Algorithm: sha256WithRSAEncryption
9f:a7:16:ab:42:27:34:bb:14:bd:80:0f:f8:72:65:3f:44:2c:
95:db:34:31:9c:a6:35:f8:0d:5c:da:94:1e:8f:55:eb:3a:7d:
b1:8b:ea:ac:ae:67:db:70:e5:a7:fd:7e:1d:55:17:7a:2c:d4:
e4:68:d9:ec:9a:e4:e8:4a:7b:e4:08:5d:e3:85:8a:98:68:f3:
02:b7:ec:7c:6e:47:d0:3c:15:64:42:ab:00:82:18:9f:f0:19:
f4:8a:ad:a7:fe:ab:da:07:f9:d5:dc:b6:f3:9a:38:37:19:12:
eb:b5:c1:a1:e0:67:f3:ac:c1:66:f8:ab:28:a0:b0:6c:c0:25:
d2:7f:b4:5d:92:65:62:0d:65:05:0e:fa:76:f5:45:29:10:8c:
b2:74:b2:7c:36:6f:e2:ac:99:2f:0c:7e:96:77:ca:a7:0c:45:
1c:37:68:06:3f:c2:65:b1:8f:23:78:8e:d9:74:6e:b6:eb:88:
30:0a:4d:08:73:8b:42:5b:ac:49:42:f2:92:3a:e9:ed:5a:a9:
c3:d6:f2:5f:71:58:76:f6:a2:aa:99:1b:9a:0c:79:da:50:8a:
b5:ab:de:4f:7f:de:cf:53:07:eb:2e:d1:c2:5f:cc:81:59:b0:
97:22:26:22:d4:d4:b3:5e:01:f5:5a:ce:d8:a6:d7:75:3c:95:
c7:07:7d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 04:32:09 2025 by rpki-client