Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6oqJCP9y11euwo7eXVGJr1NCjZY.roa
File: 6oqJCP9y11euwo7eXVGJr1NCjZY.roa (raw, json)
Hash identifier: 74J4HyfH6qFrOcB0KGNk+bdpKBPYmoP8LGwmVocADFs=
Subject key identifier: EA:8A:89:08:FF:72:D7:57:AE:C2:8E:DE:5D:51:89:AF:53:42:8D:96
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019777EAFDAF243FFCC149ACE5C90C100B2B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6oqJCP9y11euwo7eXVGJr1NCjZY.roa
Signing time: Mon 16 Jun 2025 08:46:18 +0000
ROA not before: Mon 16 Jun 2025 08:46:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56971
IP address blocks: 31.56.222.0/24 maxlen: 24
31.56.227.0/24 maxlen: 24
31.57.46.0/23 maxlen: 24
31.57.61.0/24 maxlen: 24
31.57.62.0/23 maxlen: 24
31.57.118.0/24 maxlen: 24
31.59.40.0/23 maxlen: 24
31.59.120.0/23 maxlen: 24
31.59.170.0/24 maxlen: 24
217.60.36.0/22 maxlen: 24
217.60.248.0/23 maxlen: 24
217.60.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Jul 2025 06:59:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:ea:fd:af:24:3f:fc:c1:49:ac:e5:c9:0c:10:0b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 16 08:46:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea8a8908ff72d757aec28ede5d5189af53428d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f6:9a:71:cc:2d:f7:7b:c5:78:bd:e7:df:bd:
f8:bb:1d:80:0a:04:6d:7d:7c:0a:32:f8:85:9e:cc:
7a:fa:40:1f:a6:c1:70:a1:20:ca:ab:23:cb:a9:5f:
84:3d:6f:9d:18:a5:b3:6a:4c:ac:fc:5f:33:8a:f5:
6a:24:83:f6:98:97:bc:34:08:c6:b9:fd:ba:39:9c:
30:ed:07:cb:5d:09:ee:3f:69:f1:41:01:4b:20:51:
d8:a1:ec:2c:b8:63:e8:13:45:2c:2c:aa:d3:cf:86:
73:41:27:5a:5a:4d:e5:94:26:3c:15:8d:3b:0f:40:
1d:aa:89:11:04:70:ae:f6:43:4b:7b:1b:b3:4d:5d:
ee:b8:60:3e:a4:33:7a:53:ea:40:36:8a:1e:40:69:
21:7b:9e:73:7f:e3:33:23:cf:05:6d:9e:ac:61:2e:
4c:07:7e:7d:76:a7:48:96:96:1f:ff:c6:f8:3f:01:
50:7d:9b:dd:6c:7b:21:0a:4d:02:85:6e:fd:f6:5d:
6f:14:75:b6:cc:a2:f8:f8:2c:f6:19:41:06:ef:ad:
f2:a6:44:fb:72:de:b3:0a:ef:e7:7d:9a:ec:f6:24:
02:c5:06:d2:66:2b:d0:d2:59:c1:61:87:54:d2:ab:
07:e6:c3:09:70:5b:28:a6:6c:39:95:77:f9:ea:8e:
36:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8A:89:08:FF:72:D7:57:AE:C2:8E:DE:5D:51:89:AF:53:42:8D:96
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6oqJCP9y11euwo7eXVGJr1NCjZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.222.0/24
31.56.227.0/24
31.57.46.0/23
31.57.61.0-31.57.63.255
31.57.118.0/24
31.59.40.0/23
31.59.120.0/23
31.59.170.0/24
217.60.36.0/22
217.60.248.0/23
217.60.252.0/24
Signature Algorithm: sha256WithRSAEncryption
75:07:d1:e5:93:9d:6e:f5:4f:a8:6e:1c:26:1d:19:6f:df:57:
f0:a6:73:f8:ff:1b:b4:6f:71:91:ee:f6:73:46:37:d4:75:e1:
b6:42:fe:fc:94:50:b4:42:86:f4:09:d5:c7:9c:43:3e:4a:4e:
c3:a5:58:9e:e9:4c:8e:2d:60:1e:d1:c8:9e:12:9a:55:a1:dc:
8d:5c:89:d9:31:2b:3a:d9:4b:ec:5d:51:d5:82:a5:d7:77:2e:
95:df:b8:1f:8d:8d:7e:a0:24:fa:5d:70:0b:cf:11:ba:7c:94:
6c:5c:90:29:05:ed:85:4d:ae:fc:9a:1c:4a:17:64:94:9e:6f:
f8:35:16:7a:25:16:b8:14:43:9d:a0:0d:c2:a9:bc:78:2b:af:
51:a9:e3:e1:ed:da:b5:18:90:82:73:f5:2b:ac:65:04:4d:9c:
28:99:7b:c6:8d:33:03:34:1f:19:ac:31:23:a9:44:d8:f8:df:
21:d8:f1:09:43:03:20:a7:d5:07:1e:3c:11:71:8d:72:14:5f:
bd:5f:15:4d:a8:0f:4f:d0:62:d9:c3:1b:0c:72:92:a0:d3:47:
aa:d7:34:31:95:e4:ac:5a:4e:8a:92:c5:ad:73:5c:d4:76:05:
9d:5a:68:b0:91:98:51:0c:8f:bc:ee:34:c0:e1:0f:a0:68:de:
d2:5f:19:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 14:17:37 2025 by rpki-client