Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hEf36S97h6LFPV3bjrEoM0M71Pg.roa
File: hEf36S97h6LFPV3bjrEoM0M71Pg.roa (raw, json)
Hash identifier: Hma7FNI3Ok3A/QE7SOkgmpeg2SNmWG1UCAdUkKbOqEI=
Subject key identifier: 84:47:F7:E9:2F:7B:87:A2:C5:3D:5D:DB:8E:B1:28:33:43:3B:D4:F8
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019915A20B4736B345DA9EA6756572A5DEC3
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hEf36S97h6LFPV3bjrEoM0M71Pg.roa
Signing time: Thu 04 Sep 2025 16:49:25 +0000
ROA not before: Thu 04 Sep 2025 16:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56655
IP address blocks: 31.56.216.0/22 maxlen: 22
31.57.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Sep 2025 13:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:15:a2:0b:47:36:b3:45:da:9e:a6:75:65:72:a5:de:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 4 16:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8447f7e92f7b87a2c53d5ddb8eb12833433bd4f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ef:41:80:fe:c8:73:28:cb:a1:64:eb:5b:6e:
2d:2d:c5:14:fe:41:59:2c:c5:0d:99:39:9a:0e:75:
25:e5:b4:71:d4:4a:ea:49:ce:38:6a:35:a9:d6:a5:
23:1d:a2:60:f1:c4:a8:f4:0c:2e:fb:97:4e:05:a2:
69:d1:ac:bf:30:37:53:91:40:c7:7d:7f:95:27:92:
9d:2f:82:15:f1:a2:5d:53:ce:b1:6a:de:f8:bb:78:
06:b3:12:83:14:19:31:4e:66:8c:01:83:10:cb:60:
ab:32:35:c7:fe:08:63:ed:b1:d1:92:e2:4d:0c:95:
52:86:c7:b2:f3:5d:d9:cb:f4:45:65:84:e4:95:4a:
fb:94:0b:de:59:b4:b0:3e:dc:fa:14:fc:aa:0c:14:
ba:9c:db:d6:4b:d8:52:e1:56:cb:ee:e8:46:d2:97:
16:25:47:d4:6c:fd:48:e6:fe:c6:8b:51:ab:76:0f:
62:2f:f3:ca:2b:81:26:97:9d:84:c0:d6:4d:4e:71:
b8:31:35:83:f7:6a:c8:28:98:a9:d7:f2:f4:cc:46:
c4:7e:6e:95:27:02:4f:d6:8d:f0:8d:51:bf:93:91:
ef:e6:25:fd:aa:36:25:b1:2b:1a:36:bc:af:5b:13:
5a:06:58:f4:51:2a:9b:42:b4:6c:2b:a3:25:24:35:
68:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:47:F7:E9:2F:7B:87:A2:C5:3D:5D:DB:8E:B1:28:33:43:3B:D4:F8
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hEf36S97h6LFPV3bjrEoM0M71Pg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.216.0/22
31.57.15.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:d9:09:11:b7:51:c6:f9:8a:4f:d7:9d:64:ec:45:37:4c:79:
06:01:f1:4e:4b:37:3d:e4:b0:52:6e:c9:f6:d0:52:3d:64:6d:
d1:35:8c:dd:4e:fb:6e:e1:d1:25:7e:70:0e:c1:9a:75:b6:d3:
39:40:a4:ff:8f:3c:29:63:07:06:5b:5e:07:2a:57:e4:d9:70:
eb:45:cb:32:09:5a:46:6f:a0:5f:e6:7b:29:e6:20:fe:76:32:
2b:f0:60:e6:57:1c:d7:74:2e:e9:6f:44:f7:65:ed:21:44:e7:
b5:77:73:e7:24:67:3c:33:87:a0:cd:65:4b:83:28:7e:2e:69:
7b:fa:d0:c4:89:df:2b:36:86:4c:d4:d0:15:df:91:7e:7a:6c:
4e:94:53:d9:f7:7c:bb:a7:f6:5b:1a:40:84:e5:2f:af:0c:28:
62:35:a8:ad:f6:f4:0e:a1:fd:60:bf:6f:ab:dc:c6:bf:90:bb:
fe:4d:74:8c:fa:da:8e:b4:89:0b:3c:3a:2c:c5:7a:3b:72:8b:
14:d0:f0:56:c3:d4:f2:8e:32:d9:ab:e7:0b:50:da:13:16:d4:
8b:bb:cd:4b:9f:4b:ea:6b:dd:5a:4e:02:ba:6c:c4:74:a0:10:
3f:c7:e4:5e:5f:5d:c6:93:63:08:77:82:c2:4b:b6:4d:d7:5e:
6d:17:d8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:10 2025 by rpki-client