Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/o9928pLSmiIG3F4ZBfxeJiXwd7o.roa
File: o9928pLSmiIG3F4ZBfxeJiXwd7o.roa (raw, json)
Hash identifier: TGgGIUrNAhKRTH+hHl5x/uJdyuHKXACv2OMyQpKFcWI=
Subject key identifier: A3:DF:76:F2:92:D2:9A:22:06:DC:5E:19:05:FC:5E:26:25:F0:77:BA
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019707647BEA997846FBDB90C701D2685FF0
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/o9928pLSmiIG3F4ZBfxeJiXwd7o.roa
Signing time: Sun 25 May 2025 12:21:55 +0000
ROA not before: Sun 25 May 2025 12:21:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 31.56.52.0/22 maxlen: 22
31.56.59.0/24 maxlen: 24
31.57.199.0/24 maxlen: 24
31.59.68.0/24 maxlen: 24
31.59.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 May 2025 05:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:07:64:7b:ea:99:78:46:fb:db:90:c7:01:d2:68:5f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 25 12:21:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3df76f292d29a2206dc5e1905fc5e2625f077ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:21:14:30:5f:cf:0e:bb:5f:0b:27:ac:ab:85:
fa:c7:3f:e3:5e:64:05:ce:3f:d2:86:65:c2:1b:38:
da:d2:95:2e:29:d4:ab:a7:46:ee:87:20:70:bf:b2:
d4:01:4a:1b:fa:a2:cb:d2:51:bf:85:e5:cd:83:4a:
06:42:2a:15:b7:40:d6:e5:63:25:3c:b6:22:f3:04:
a6:a5:5a:f3:b6:1b:d3:72:e3:20:5d:21:91:41:af:
2b:7a:17:fe:aa:ba:7c:f3:c7:1b:38:73:93:b7:90:
c7:da:06:55:c1:bd:2b:37:f4:83:f5:19:3c:d4:9f:
08:60:6f:2d:d6:3a:b4:40:b3:8b:ac:f2:38:58:04:
fa:83:4e:50:31:97:d9:85:d3:d7:51:2f:1c:31:d1:
c5:46:33:3b:db:6c:14:3d:fb:a1:3b:5e:f2:b4:83:
31:0a:13:a3:fa:b8:52:fd:44:0e:ed:93:37:aa:9a:
08:e7:64:ab:c3:3c:1b:71:c7:b6:96:72:99:14:55:
d0:22:39:8d:cd:4f:8f:66:bb:7f:8a:54:48:32:81:
92:d1:a4:ca:77:e9:b7:23:5d:c1:13:40:51:2c:5f:
9d:e7:53:63:cd:dd:4f:bc:01:c6:6e:e4:01:48:56:
43:cb:51:03:a0:98:85:d8:46:7e:8a:9b:1d:8c:5a:
93:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DF:76:F2:92:D2:9A:22:06:DC:5E:19:05:FC:5E:26:25:F0:77:BA
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/o9928pLSmiIG3F4ZBfxeJiXwd7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.52.0/22
31.56.59.0/24
31.57.199.0/24
31.59.68.0/24
31.59.71.0/24
Signature Algorithm: sha256WithRSAEncryption
73:1e:23:99:1b:10:34:41:4d:f8:77:e2:b5:f6:b9:d7:b6:f8:
17:69:e4:73:a2:17:92:f8:b1:f1:0a:24:cc:52:ce:f5:ce:d5:
27:fb:ac:e2:7b:74:20:98:25:90:fe:1e:0c:e6:91:1d:0a:85:
85:ed:5f:af:ab:c0:44:1e:0d:c2:2d:f8:c1:bf:24:67:88:67:
09:39:d1:de:e2:fd:89:cd:1c:cd:74:0f:ef:87:e3:b9:11:e2:
2a:71:9e:83:9e:6d:d3:99:a2:37:99:e9:ab:5a:93:37:bd:45:
92:5d:03:e8:20:50:cc:54:96:58:8e:fe:81:b4:ff:16:f5:07:
b3:26:fb:d7:40:95:4e:1a:75:e5:8e:0c:39:64:64:cc:3c:0e:
d3:09:72:70:7a:30:d2:2d:0b:33:38:51:d9:48:1c:0e:3c:2f:
ea:4e:9a:9b:09:7c:a2:cb:8b:fc:96:9e:cd:ff:16:5f:ce:8e:
ef:07:a9:c7:9b:ab:f2:0e:7d:8e:84:00:e6:4c:85:37:dc:22:
42:bd:22:0b:91:1b:4f:25:9c:d2:5d:a0:e5:76:4c:d0:30:26:
8a:80:f5:f8:0e:b3:24:22:6c:a1:99:8d:07:54:d4:b5:71:9f:
89:a7:64:81:08:ab:91:fe:51:16:6a:81:b2:22:ce:79:ef:fc:
a6:7d:3f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 03:56:44 2025 by rpki-client