Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yQ9XHAri7gv-vqq0z4ADZv7cUBA.roa
File: yQ9XHAri7gv-vqq0z4ADZv7cUBA.roa (raw, json)
Hash identifier: GE51+whbq+EwT+6B5ErVwfKUbROStSPmvpDftQxvLcQ=
Subject key identifier: C9:0F:57:1C:0A:E2:EE:0B:FE:BE:AA:B4:CF:80:03:66:FE:DC:50:10
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019735BA6822F2D0D6F6352B78BF3DEB4F1D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yQ9XHAri7gv-vqq0z4ADZv7cUBA.roa
Signing time: Tue 03 Jun 2025 12:18:18 +0000
ROA not before: Tue 03 Jun 2025 12:18:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137517
IP address blocks: 31.59.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Jun 2025 07:03:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:35:ba:68:22:f2:d0:d6:f6:35:2b:78:bf:3d:eb:4f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 3 12:18:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c90f571c0ae2ee0bfebeaab4cf800366fedc5010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ee:17:d5:e4:70:e8:00:8b:b4:3b:57:6b:76:
33:9e:51:a3:6d:62:81:0b:28:68:77:36:35:dc:3c:
4b:f1:26:92:bf:28:ac:5b:6b:a1:ec:dc:10:d6:eb:
d5:58:c6:90:16:83:39:f4:c8:5a:8a:62:69:60:51:
ab:17:e7:bb:a4:5d:07:d9:ca:30:d0:0e:9f:3a:09:
cf:25:d2:63:eb:6c:55:b8:a8:ae:a8:89:00:40:b1:
f9:e4:e6:cf:a6:93:19:52:05:5c:8a:de:f3:8d:e6:
09:bc:fb:87:f9:30:c7:bd:c9:43:13:1f:af:08:a1:
65:bd:80:91:bc:da:49:ca:c4:ad:d7:8c:dd:f0:c4:
2a:12:04:cf:0a:39:6a:b9:a8:a3:ff:f8:76:9f:64:
74:24:1f:b7:34:d3:77:99:c3:cb:e2:ac:12:83:c7:
9f:f1:3c:d4:b0:d9:d5:dd:5a:f6:50:19:cb:30:0d:
21:31:20:8d:40:00:af:cf:53:43:6f:56:7c:0a:ba:
a0:8a:5d:d9:53:85:c6:7f:9b:34:81:3d:93:5f:ed:
56:4a:14:19:89:99:1c:03:9b:4f:e8:bc:84:80:69:
da:14:95:7a:7f:f2:77:64:d2:74:31:b3:a4:64:ab:
d0:b3:40:95:d7:35:ea:7a:34:31:20:36:f6:c9:cc:
e4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:0F:57:1C:0A:E2:EE:0B:FE:BE:AA:B4:CF:80:03:66:FE:DC:50:10
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yQ9XHAri7gv-vqq0z4ADZv7cUBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.213.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:82:da:a0:67:49:c0:dc:09:21:d0:d3:47:82:5d:68:4b:c3:
27:2b:f4:43:df:85:ad:3a:73:c3:f0:14:f0:52:74:32:3a:38:
88:ca:86:c8:6e:5a:2e:fd:75:62:3d:58:50:75:26:88:c0:08:
2c:84:3f:42:0d:0c:dc:f3:69:a3:8f:05:8d:dc:c8:a5:30:d1:
e1:9a:4a:c1:a4:06:e7:94:af:ad:5f:75:13:7b:43:3d:18:f0:
9b:e3:7c:61:e6:e2:8d:0c:f7:cf:2f:5d:40:94:55:be:a9:fc:
8f:d3:b6:dd:c9:15:cc:8b:42:df:32:d1:1b:47:86:b6:15:50:
b2:0e:53:47:83:c3:5b:16:10:75:06:16:79:ef:a9:d0:77:ae:
b3:db:3e:aa:ab:c3:74:08:f5:95:8b:a5:5d:99:dd:77:43:b8:
e6:ae:5a:d7:16:66:1a:f6:ef:24:0f:f4:f6:90:4a:6c:ae:f2:
41:ce:87:f5:28:a9:cd:67:b5:0a:ef:98:85:3c:f6:00:90:a4:
e4:a7:ba:b8:b0:74:83:e7:60:2c:d3:c3:19:c8:66:2d:ad:75:
88:71:83:f2:cf:c4:7a:88:0f:9c:6e:71:54:a9:66:1b:9d:09:
66:9c:c5:85:13:66:15:07:9e:ee:e1:bd:0b:02:3d:91:f9:5d:
3b:6f:f2:c0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZc1umgi8tDW9jUreL89608dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNjAzMTIxODE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTBmNTcxYzBhZTJlZTBiZmViZWFhYjRjZjgwMDM2NmZlZGM1MDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnu4X1eRw6ACLtDtXa3YznlGjbWKB
CyhodzY13DxL8SaSvyisW2uh7NwQ1uvVWMaQFoM59MhaimJpYFGrF+e7pF0H2cow
0A6fOgnPJdJj62xVuKiuqIkAQLH55ObPppMZUgVcit7zjeYJvPuH+TDHvclDEx+v
CKFlvYCRvNpJysSt14zd8MQqEgTPCjlquaij//h2n2R0JB+3NNN3mcPL4qwSg8ef
8TzUsNnV3Vr2UBnLMA0hMSCNQACvz1NDb1Z8Crqgil3ZU4XGf5s0gT2TX+1WShQZ
iZkcA5tP6LyEgGnaFJV6f/J3ZNJ0MbOkZKvQs0CV1zXqejQxIDb2yczkVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMkPVxwK4u4L/r6qtM+AA2b+3FAQMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEveVE5WEhBcmk3Z3YtdnFxMHo0QURadjdjVUJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzvVMA0G
CSqGSIb3DQEBCwUAA4IBAQA9gtqgZ0nA3Akh0NNHgl1oS8MnK/RD34WtOnPD8BTw
UnQyOjiIyobIblou/XViPVhQdSaIwAgshD9CDQzc82mjjwWN3MilMNHhmkrBpAbn
lK+tX3UTe0M9GPCb43xh5uKNDPfPL11AlFW+qfyP07bdyRXMi0LfMtEbR4a2FVCy
DlNHg8NbFhB1BhZ576nQd66z2z6qq8N0CPWVi6Vdmd13Q7jmrlrXFmYa9u8kD/T2
kEpsrvJBzof1KKnNZ7UK75iFPPYAkKTkp7q4sHSD52As08MZyGYtrXWIcYPyz8R6
iA+cbnFUqWYbnQlmnMWFE2YVB57u4b0LAj2R+V07b/LA
-----END CERTIFICATE-----
Generated at Fri Jun 6 16:51:30 2025 by rpki-client