Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wiMPbaxU7GHXtxXjXqAKn6guBTI.roa
File: wiMPbaxU7GHXtxXjXqAKn6guBTI.roa (raw, json)
Hash identifier: 4Db9o5x0WraebMicOoPoqbeFOOUgr8NvfY2FrGLZYR0=
Subject key identifier: C2:23:0F:6D:AC:54:EC:61:D7:B7:15:E3:5E:A0:0A:9F:A8:2E:05:32
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196D81620027843CD804F5491163A951E4E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wiMPbaxU7GHXtxXjXqAKn6guBTI.roa
Signing time: Fri 16 May 2025 07:54:10 +0000
ROA not before: Fri 16 May 2025 07:54:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39521
IP address blocks: 31.57.12.0/23 maxlen: 24
31.57.14.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 May 2025 16:44:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:16:20:02:78:43:cd:80:4f:54:91:16:3a:95:1e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 16 07:54:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2230f6dac54ec61d7b715e35ea00a9fa82e0532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d9:4f:8a:06:98:a1:e6:a7:6e:c2:13:04:2d:
51:04:0e:87:21:da:b6:6e:dc:d4:5c:11:0a:2d:f0:
4f:3f:7d:08:86:9f:65:fa:2c:51:0d:2e:e0:32:b8:
af:65:d7:8c:56:d2:17:c2:2f:18:e2:85:bf:66:e8:
d1:e6:64:97:92:6d:45:ff:7f:ab:cb:d2:95:ee:63:
5b:dd:09:7c:4b:c1:12:8c:47:f9:8e:5e:c6:39:da:
44:e8:e3:0f:94:fe:ae:12:67:bf:09:8b:81:5b:61:
74:e4:e6:36:51:92:87:54:1d:1d:e3:d6:59:28:af:
8b:7b:96:d7:e6:35:77:ee:c3:5f:45:bf:d5:35:31:
89:4f:94:95:84:73:27:54:17:12:18:0a:f1:d0:99:
ae:f2:56:a1:e7:33:78:20:d6:2d:6a:1e:b1:15:78:
e6:0f:71:96:d1:e4:b9:07:5d:bc:61:38:06:1c:da:
62:9b:a5:19:c1:ae:1a:ad:0c:7f:53:16:37:0b:9d:
6d:92:75:0d:f7:6e:dd:f2:00:13:a5:74:fc:f9:b9:
28:11:f8:2f:ca:d5:b7:18:0c:16:21:ae:1e:bc:63:
4b:e4:97:7e:a4:4e:99:75:87:38:f6:f7:75:8a:e7:
f3:ab:c5:17:6b:c7:ec:54:69:21:5b:26:15:79:6a:
f6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:23:0F:6D:AC:54:EC:61:D7:B7:15:E3:5E:A0:0A:9F:A8:2E:05:32
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wiMPbaxU7GHXtxXjXqAKn6guBTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.12.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:e6:10:71:9a:30:36:46:44:4e:31:b9:39:19:73:c8:26:b1:
6c:c8:3f:aa:7d:35:05:7e:2d:a1:d0:f7:de:b9:b2:d1:34:c5:
d7:0a:1f:b6:86:7b:a9:c1:82:e1:b7:be:ab:c5:21:b0:e7:38:
6f:82:bf:d5:d5:ff:2e:41:f1:cf:f2:9a:68:a4:e8:3b:38:59:
48:46:cd:f2:7d:1e:72:a3:70:dc:78:50:c1:80:a5:9c:40:79:
dd:18:2c:a6:1c:8a:fd:61:94:e0:ae:69:7c:17:e6:df:51:32:
18:b0:3c:52:5c:63:89:33:a8:8a:f6:1b:b1:69:6f:98:f3:d7:
67:14:09:b6:d5:cb:f5:80:9c:40:25:da:e2:75:13:20:fd:c1:
61:e4:08:21:0f:1b:ea:11:af:3c:d5:34:e6:8a:cb:be:ba:a5:
dc:5c:8c:b8:62:0e:72:2c:b7:68:44:60:1d:c9:d1:f6:2f:fe:
2c:e0:f4:07:fc:f7:0c:41:95:aa:2a:96:73:85:f4:8b:c1:49:
1b:b2:64:c4:c0:d8:e8:c6:c8:bb:ba:b2:a2:36:39:08:a9:ed:
14:23:22:9c:13:85:4d:c5:b3:e4:db:8b:a3:8d:02:84:ef:cf:
bb:92:46:e0:fd:16:71:a1:12:17:56:c8:63:af:aa:82:a2:dc:
97:2c:4f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 04:32:06 2025 by rpki-client