Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yoAZi1aCMsmQO7oMGCXn9WF1bJI.roa
File: yoAZi1aCMsmQO7oMGCXn9WF1bJI.roa (raw, json)
Hash identifier: z/4wjklGGyIoQJp6CUbBgl4LX48XR3osyjAM0/xTvI4=
Subject key identifier: CA:80:19:8B:56:82:32:C9:90:3B:BA:0C:18:25:E7:F5:61:75:6C:92
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196DF60E1F9ED6AC390B4E7D5C3DDE1BE78
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yoAZi1aCMsmQO7oMGCXn9WF1bJI.roa
Signing time: Sat 17 May 2025 17:53:10 +0000
ROA not before: Sat 17 May 2025 17:53:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214481
IP address blocks: 31.57.95.0/24 maxlen: 24
31.58.51.0/24 maxlen: 24
31.59.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 May 2025 05:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:df:60:e1:f9:ed:6a:c3:90:b4:e7:d5:c3:dd:e1:be:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 17 17:53:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca80198b568232c9903bba0c1825e7f561756c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e4:07:e8:2c:8a:a6:66:2a:cc:a8:79:5e:b4:
6c:6e:ef:3c:7e:00:0f:c9:37:4d:3d:84:a5:b0:a9:
a9:c9:1e:3f:36:66:e6:a8:89:cc:d6:fb:56:b0:fd:
16:12:df:46:dd:2a:4e:b8:9e:fb:01:ca:14:ab:dd:
ec:63:e8:f0:04:f2:4f:b8:6a:a9:d6:7d:75:2a:66:
2b:29:33:0f:cc:65:2c:b4:37:8c:4b:73:27:34:26:
5a:5a:4c:95:a4:23:be:0f:2f:46:12:c7:c3:bc:da:
00:50:cf:e7:98:30:00:a0:3c:d4:65:2d:28:2e:78:
26:3e:9a:94:2a:c0:39:e7:c7:c3:75:fe:55:3b:7e:
4b:f9:24:c8:e6:1a:e5:a0:f3:43:42:2a:e3:cf:ad:
88:00:b2:5e:aa:07:8f:9d:d0:77:c7:26:a5:69:69:
bd:89:1a:f7:24:2e:bc:09:f1:49:25:81:c4:d4:b8:
46:e1:74:2f:e0:af:40:84:3b:6a:45:0b:06:77:e2:
1d:9e:eb:44:bb:c7:39:81:62:01:ab:1d:4f:6e:ef:
dc:03:a1:94:01:db:d7:b6:ec:e2:f8:42:19:99:e0:
71:58:2a:3a:76:9c:7b:53:48:ac:36:95:d9:19:a6:
96:34:63:26:37:16:68:f2:6e:90:72:d6:b9:74:48:
9b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:80:19:8B:56:82:32:C9:90:3B:BA:0C:18:25:E7:F5:61:75:6C:92
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yoAZi1aCMsmQO7oMGCXn9WF1bJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.95.0/24
31.58.51.0/24
31.59.129.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:3b:8c:be:fc:13:35:67:5e:de:aa:fa:d0:43:3c:ae:f1:29:
4c:25:62:94:f6:31:e0:1e:ca:de:25:cb:62:4b:7a:ba:e4:ea:
f9:dc:91:b2:a7:3e:a4:90:8b:75:9a:34:ce:a7:65:64:a6:f3:
00:b7:ef:dc:33:d0:0c:2a:33:91:70:59:90:b7:60:ca:7c:94:
26:f0:bc:be:46:85:82:5e:9f:d6:4e:51:da:33:29:e9:2f:a0:
fc:ea:17:a8:58:36:6d:f6:7b:97:5e:5c:07:5c:78:3b:0b:32:
70:fe:49:60:bf:aa:52:40:09:8d:f2:26:73:b5:d0:8b:7c:07:
69:3b:2b:62:43:9e:98:20:d4:78:71:6d:97:99:a1:84:00:c9:
70:93:92:58:3f:75:e0:70:bc:db:87:07:e3:a7:2d:48:c5:7a:
b4:b5:1a:ba:0f:06:aa:97:2b:5d:90:2b:03:70:3e:85:77:53:
8a:33:9b:e1:40:8b:e0:fe:27:67:74:0a:b9:03:eb:95:45:12:
26:48:d9:00:4c:6d:47:18:00:25:ff:25:0a:a6:e0:8c:45:0b:
5b:af:f3:8a:ab:73:9d:03:aa:50:c1:7f:fb:fe:54:e8:33:07:
b1:2b:ae:1a:7d:22:cb:68:d2:c6:e5:a3:d6:a8:01:0e:d1:da:
0c:50:79:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 03:48:23 2025 by rpki-client