Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xJ0WUUEHwbpIMn7QZqT9XWQlEbA.roa
File: xJ0WUUEHwbpIMn7QZqT9XWQlEbA.roa (raw, json)
Hash identifier: kqu7qZUSUR4HS+0jFlhM98HmIYSOzCdUgyfvQ1vhzvA=
Subject key identifier: C4:9D:16:51:41:07:C1:BA:48:32:7E:D0:66:A4:FD:5D:64:25:11:B0
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019ED1C2B016F6E1F55D4918357D0EC65866
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xJ0WUUEHwbpIMn7QZqT9XWQlEbA.roa
Signing time: Tue 16 Jun 2026 18:47:37 +0000
ROA not before: Tue 16 Jun 2026 18:47:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 31.57.200.0/24 maxlen: 24
31.57.208.0/22 maxlen: 22
31.57.217.0/24 maxlen: 24
31.58.92.0/22 maxlen: 24
31.58.180.0/24 maxlen: 24
31.58.184.0/21 maxlen: 24
31.58.192.0/20 maxlen: 24
31.59.37.0/24 maxlen: 24
31.59.90.0/23 maxlen: 24
31.59.140.0/22 maxlen: 24
31.59.148.0/22 maxlen: 24
31.59.162.0/24 maxlen: 24
31.59.164.0/24 maxlen: 24
31.59.176.0/21 maxlen: 24
94.183.152.0/24 maxlen: 24
94.183.169.0/24 maxlen: 24
94.183.236.0/24 maxlen: 24
94.183.241.0/24 maxlen: 24
217.60.28.0/22 maxlen: 24
217.60.52.0/22 maxlen: 24
217.60.56.0/22 maxlen: 24
217.60.108.0/22 maxlen: 24
217.60.112.0/22 maxlen: 24
217.60.124.0/22 maxlen: 24
217.60.128.0/22 maxlen: 24
217.60.132.0/22 maxlen: 24
217.60.136.0/22 maxlen: 24
217.60.140.0/22 maxlen: 24
217.60.144.0/22 maxlen: 24
217.60.148.0/22 maxlen: 24
217.60.152.0/22 maxlen: 24
217.60.156.0/22 maxlen: 24
217.60.160.0/20 maxlen: 24
217.60.176.0/21 maxlen: 24
217.60.242.0/24 maxlen: 24
2a14:6e40:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 18 Jun 2026 05:42:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d1:c2:b0:16:f6:e1:f5:5d:49:18:35:7d:0e:c6:58:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 16 18:47:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c49d16514107c1ba48327ed066a4fd5d642511b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:df:81:1b:dc:b4:4b:50:46:3d:c5:e3:f8:cd:
0a:b3:7c:9f:30:27:44:90:95:66:80:b3:54:87:50:
1f:5e:39:93:b1:a4:87:2b:a8:c6:9c:c1:1d:a3:c2:
e9:c7:0b:fe:ed:47:a5:cc:03:a5:8f:06:7e:ca:45:
a4:5d:f7:72:94:a3:3c:04:43:bd:c6:67:fa:49:72:
86:8b:f3:48:7f:09:52:51:6a:68:b9:b0:7a:b8:36:
a8:74:4b:54:11:03:ca:21:a4:a8:61:4e:3a:40:32:
39:9b:14:2c:95:4a:cf:d9:1e:1d:94:d9:5e:f5:b6:
74:47:36:55:ef:79:83:13:07:86:d8:3d:3b:91:b0:
fb:a0:8a:1c:4c:62:62:6a:5c:e1:fd:ea:92:bb:46:
85:a6:39:76:90:d1:30:64:95:ef:37:3f:4e:a5:51:
28:5c:b9:79:46:e7:70:82:1d:6c:c0:18:3c:d7:b9:
ad:5c:a8:e8:c4:8a:4d:22:cc:f2:e2:f1:0a:c9:83:
26:27:75:b2:95:30:a8:bf:38:17:99:42:41:23:4a:
a6:40:2d:df:5f:2c:c6:10:83:7a:f9:28:7f:c2:da:
14:b9:f6:a0:b0:b4:31:b9:2f:1e:69:ef:3a:a0:ea:
9b:bf:bf:fb:18:61:a8:e1:e4:d1:ed:2b:a5:62:91:
f8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9D:16:51:41:07:C1:BA:48:32:7E:D0:66:A4:FD:5D:64:25:11:B0
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xJ0WUUEHwbpIMn7QZqT9XWQlEbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.200.0/24
31.57.208.0/22
31.57.217.0/24
31.58.92.0/22
31.58.180.0/24
31.58.184.0-31.58.207.255
31.59.37.0/24
31.59.90.0/23
31.59.140.0/22
31.59.148.0/22
31.59.162.0/24
31.59.164.0/24
31.59.176.0/21
94.183.152.0/24
94.183.169.0/24
94.183.236.0/24
94.183.241.0/24
217.60.28.0/22
217.60.52.0-217.60.59.255
217.60.108.0-217.60.115.255
217.60.124.0-217.60.183.255
217.60.242.0/24
IPv6:
2a14:6e40:1::/48
Signature Algorithm: sha256WithRSAEncryption
b1:89:46:f0:94:14:ab:81:99:08:66:de:b7:6f:20:7d:8a:47:
ec:a8:a1:6c:5b:b7:af:d5:88:e2:63:28:67:d3:63:96:e1:54:
36:51:e9:2c:58:09:3a:7d:c7:d3:28:bc:ec:3e:95:70:93:49:
c8:93:b8:70:d9:bc:7b:44:c2:42:f8:d1:68:c4:b7:71:98:02:
b0:25:b4:73:a2:f5:52:8a:52:fa:73:18:cb:50:b1:ff:84:44:
94:44:0d:9b:27:75:81:c9:d7:2f:e8:b6:47:de:46:26:63:ca:
5c:8d:a1:c7:21:27:d2:8c:1a:cc:0b:70:af:79:2a:cc:df:9e:
62:69:72:72:0f:06:51:1e:f1:cc:90:49:6d:41:87:e6:7a:43:
38:2c:c1:3e:bb:37:0c:cc:33:2a:05:4d:15:d3:5e:75:af:fe:
4e:d5:ec:71:30:9b:9c:7d:4d:af:66:a8:e4:1e:d6:ef:34:e5:
f0:2f:05:38:db:57:0c:dd:91:d7:f0:7b:f2:a0:1d:e5:0e:9d:
3d:ee:29:74:68:bd:56:78:12:ad:ce:4c:b6:7e:9b:4b:f3:8f:
41:72:00:93:0a:3d:7f:17:24:f1:30:81:09:a1:ab:d6:fb:71:
cf:19:7c:00:f3:58:df:fc:22:f7:96:93:b1:59:e1:d5:06:3e:
15:75:65:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 16:00:41 2026 by rpki-client