Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3qoH-ehXlVO46rI969zA_muTatA.roa
File: 3qoH-ehXlVO46rI969zA_muTatA.roa (raw, json)
Hash identifier: GhSHUj1OdJxdtT6D9PaRrV53SH73C/Zk1kI3q05kvvc=
Subject key identifier: DE:AA:07:F9:E8:57:95:53:B8:EA:B2:3D:EB:DC:C0:FE:6B:93:6A:D0
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0CF673DF5D9E52741F97D9BE6B8B1AA66
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3qoH-ehXlVO46rI969zA_muTatA.roa
Signing time: Wed 23 Sep 2026 17:54:04 +0000
ROA not before: Wed 23 Sep 2026 17:54:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 31.56.17.0/24 maxlen: 24
31.56.182.0/24 maxlen: 24
31.57.200.0/24 maxlen: 24
31.58.180.0/24 maxlen: 24
31.58.192.0/20 maxlen: 24
31.58.249.0/24 maxlen: 24
31.58.252.0/22 maxlen: 24
31.59.80.0/22 maxlen: 24
31.59.84.0/22 maxlen: 24
31.59.90.0/23 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.161.0/24 maxlen: 24
31.59.162.0/24 maxlen: 24
31.59.188.0/22 maxlen: 24
31.59.192.0/22 maxlen: 24
31.59.216.0/24 maxlen: 24
31.59.217.0/24 maxlen: 24
31.59.218.0/24 maxlen: 24
31.59.221.0/24 maxlen: 24
31.59.222.0/24 maxlen: 24
94.183.164.0/24 maxlen: 24
94.183.179.0/24 maxlen: 24
94.183.194.0/24 maxlen: 24
217.60.16.0/24 maxlen: 24
217.60.18.0/24 maxlen: 24
217.60.19.0/24 maxlen: 24
217.60.20.0/24 maxlen: 24
217.60.22.0/24 maxlen: 24
217.60.28.0/22 maxlen: 24
217.60.52.0/22 maxlen: 24
217.60.56.0/22 maxlen: 24
217.60.66.0/24 maxlen: 24
217.60.80.0/24 maxlen: 24
217.60.81.0/24 maxlen: 24
217.60.82.0/24 maxlen: 24
217.60.108.0/22 maxlen: 24
217.60.112.0/22 maxlen: 24
217.60.128.0/22 maxlen: 24
217.60.132.0/22 maxlen: 24
217.60.136.0/22 maxlen: 24
217.60.140.0/22 maxlen: 24
217.60.144.0/22 maxlen: 24
217.60.148.0/22 maxlen: 24
2a14:6e40:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 24 Sep 2026 18:45:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:67:3d:f5:d9:e5:27:41:f9:7d:9b:e6:b8:b1:aa:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 23 17:54:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=deaa07f9e8579553b8eab23debdcc0fe6b936ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5f:c8:41:45:26:23:af:f7:25:6b:0d:21:be:
6e:53:a1:d4:51:86:0b:34:2a:b9:8e:99:fe:fd:1b:
08:37:0f:b8:7a:d6:17:49:07:74:f8:2d:b0:54:c6:
41:d7:00:c2:7e:28:22:71:5c:ff:e7:1b:2e:12:77:
4f:9d:4c:42:e1:5d:45:16:91:ac:77:53:e1:21:ff:
6c:b2:da:7a:84:d2:c9:81:7f:16:9b:70:61:ee:b7:
43:19:6b:01:9a:cc:6f:e7:e4:05:b4:ed:15:99:60:
5d:d7:77:50:68:cf:53:bd:75:9d:4e:8f:e9:0a:63:
7f:91:91:26:85:20:ac:47:86:68:39:30:de:aa:33:
23:94:ea:58:59:65:9b:a9:ca:a3:74:f3:52:a6:04:
a1:e9:e4:43:f3:d3:c7:95:68:86:8b:16:99:62:68:
a6:5d:c4:d2:e6:d9:54:e5:12:00:c0:d0:ab:b6:06:
75:d4:49:12:4f:ee:d2:dc:9b:04:2c:66:ad:af:08:
07:3f:9d:5f:28:1a:6b:d9:c9:0d:aa:d0:1e:16:9f:
cd:9b:3d:33:21:bd:6b:ed:28:b9:ae:3f:ba:59:77:
d8:f2:4d:26:43:79:16:4d:96:1c:db:fd:1e:2e:b5:
ac:62:15:6c:97:89:e6:b3:4f:3e:1e:d7:2d:bc:d9:
d8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AA:07:F9:E8:57:95:53:B8:EA:B2:3D:EB:DC:C0:FE:6B:93:6A:D0
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3qoH-ehXlVO46rI969zA_muTatA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.17.0/24
31.56.182.0/24
31.57.200.0/24
31.58.180.0/24
31.58.192.0/20
31.58.249.0/24
31.58.252.0/22
31.59.80.0/21
31.59.90.0/23
31.59.152.0/21
31.59.161.0-31.59.162.255
31.59.188.0-31.59.195.255
31.59.216.0-31.59.218.255
31.59.221.0-31.59.222.255
94.183.164.0/24
94.183.179.0/24
94.183.194.0/24
217.60.16.0/24
217.60.18.0-217.60.20.255
217.60.22.0/24
217.60.28.0/22
217.60.52.0-217.60.59.255
217.60.66.0/24
217.60.80.0-217.60.82.255
217.60.108.0-217.60.115.255
217.60.128.0-217.60.151.255
IPv6:
2a14:6e40:1::/48
Signature Algorithm: sha256WithRSAEncryption
2a:3a:b0:00:b4:39:14:0a:82:66:2f:46:98:a3:c4:83:d8:7f:
5b:1c:c5:7e:83:48:9b:8e:d9:ce:95:af:b2:71:f8:09:00:05:
46:4d:59:19:5f:f7:90:ef:67:c7:06:f0:6a:de:c6:74:2a:e4:
06:59:83:ea:f5:d6:ab:3e:8e:6a:a1:0f:ee:ed:27:73:7c:c3:
de:57:97:9f:74:cd:6f:9f:33:c9:0a:3a:08:86:e9:c7:62:a0:
33:c0:ee:fa:c7:62:8e:1a:ba:9e:d9:84:b7:6c:bd:43:71:b1:
e4:46:fb:80:18:7c:c6:1d:9e:b6:6d:4e:4b:9f:cd:75:12:7e:
60:e9:40:43:61:27:4e:68:1e:78:6c:40:c3:6a:21:49:23:63:
c8:1d:74:ac:cb:b8:66:29:a2:d7:44:35:17:a2:f3:d8:9e:a0:
d1:74:16:09:ee:b6:b7:4f:cd:e8:16:a2:68:d8:f5:02:86:30:
cf:d1:d8:5b:75:09:cc:ce:20:05:cd:c1:ef:37:db:2d:35:6f:
a9:17:a0:42:82:21:33:89:1c:b0:17:20:3f:eb:86:c4:6b:45:
84:28:a5:6a:8d:3e:b7:b7:f9:11:b1:33:f4:1b:c8:05:c4:98:
88:2f:36:ec:23:6c:9c:7e:06:81:00:49:ab:cd:8c:9a:92:80:
32:9f:de:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:47:18 2026 by rpki-client