Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/D0pKsE1nf9sDqUu-LlPLbPf7eZs.roa
File: D0pKsE1nf9sDqUu-LlPLbPf7eZs.roa (raw, json)
Hash identifier: NUMeh5hEO4Od+05zmIdEgYxP0PoiEEd9sI8oDnZWZYY=
Subject key identifier: 0F:4A:4A:B0:4D:67:7F:DB:03:A9:4B:BE:2E:53:CB:6C:F7:FB:79:9B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01979B896AB4E89804F1BDE0E23DE68C0CC4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/D0pKsE1nf9sDqUu-LlPLbPf7eZs.roa
Signing time: Mon 23 Jun 2025 06:46:03 +0000
ROA not before: Mon 23 Jun 2025 06:46:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 31.56.42.0/23 maxlen: 23
31.56.180.0/23 maxlen: 23
31.56.190.0/23 maxlen: 23
31.56.220.0/23 maxlen: 23
31.56.224.0/23 maxlen: 23
31.56.230.0/23 maxlen: 23
31.56.236.0/23 maxlen: 23
31.57.120.0/23 maxlen: 23
31.57.126.0/23 maxlen: 23
31.57.238.0/24 maxlen: 24
31.58.87.0/24 maxlen: 24
31.58.220.0/23 maxlen: 23
31.59.138.0/23 maxlen: 23
31.59.168.0/23 maxlen: 23
31.59.172.0/24 maxlen: 24
31.59.173.0/24 maxlen: 24
31.59.174.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 30 Jun 2025 14:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9b:89:6a:b4:e8:98:04:f1:bd:e0:e2:3d:e6:8c:0c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 23 06:46:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f4a4ab04d677fdb03a94bbe2e53cb6cf7fb799b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b9:03:ce:92:95:14:d7:f2:10:7f:a6:22:a8:
04:12:4a:2d:99:83:e0:a9:df:f1:f0:c8:66:25:06:
37:ca:d8:82:31:56:2c:5a:4c:e7:b8:ee:6c:75:c3:
b6:a9:1a:55:97:21:7f:01:c7:ae:4d:1d:eb:28:f8:
2e:c8:1f:a6:37:89:af:81:04:58:8d:fb:00:89:52:
ea:3e:72:fc:40:63:37:86:d9:c8:f5:16:8b:ba:0a:
63:bb:3f:eb:a2:21:e2:cc:34:d4:a5:65:76:6a:5b:
ba:44:77:31:ec:f7:e5:c3:a0:68:96:f4:24:0a:e1:
7e:cf:d6:c7:73:b9:e8:66:a9:20:6f:dc:f3:ef:c7:
7b:23:b6:40:b4:89:31:69:23:be:82:b6:49:16:76:
4e:6b:d5:eb:28:6f:81:05:9f:4c:73:1f:a1:a8:79:
2a:ce:c6:8f:28:47:b6:61:87:15:aa:3f:a6:9f:36:
26:fe:5c:7f:37:ca:ab:a1:70:80:6d:75:ea:c2:93:
93:32:b2:4f:5c:b3:0c:e6:dc:1a:27:e3:59:00:34:
2b:61:09:80:f4:63:7f:d4:19:ec:ca:fc:5f:35:8a:
ce:1b:8d:fa:e1:39:50:c9:03:7d:7c:c9:13:bd:b8:
0a:31:92:79:ff:9a:e2:1d:c0:71:0c:4c:67:6b:39:
17:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4A:4A:B0:4D:67:7F:DB:03:A9:4B:BE:2E:53:CB:6C:F7:FB:79:9B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/D0pKsE1nf9sDqUu-LlPLbPf7eZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.42.0/23
31.56.180.0/23
31.56.190.0/23
31.56.220.0/23
31.56.224.0/23
31.56.230.0/23
31.56.236.0/23
31.57.120.0/23
31.57.126.0/23
31.57.238.0/24
31.58.87.0/24
31.58.220.0/23
31.59.138.0/23
31.59.168.0/23
31.59.172.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:5c:c5:f7:cf:c0:76:88:1f:1b:85:f2:5b:6d:db:3c:70:f2:
75:b2:45:be:04:b5:c4:b4:85:a0:37:83:ea:d9:9a:16:52:f1:
40:5c:52:18:8e:d9:4f:82:58:e3:85:80:28:77:0f:58:f9:0e:
dc:6e:cc:5c:c8:52:08:4a:84:80:48:cc:0a:e5:22:ae:eb:99:
34:19:2e:82:e5:87:9f:5c:4b:4b:4a:ec:10:20:b0:e4:f3:ef:
50:9d:b5:3d:84:36:3e:9b:8e:a5:61:34:f9:15:07:8f:7e:cc:
7a:00:95:45:48:3f:c7:e5:45:08:9a:f3:3b:a7:6f:75:72:31:
ec:ff:59:8a:07:c6:83:2b:a9:90:95:5f:39:1c:67:25:1b:e5:
01:ab:93:60:35:59:01:83:e4:82:43:54:8c:19:40:34:ea:e5:
c6:9f:ab:be:4b:c5:e7:2c:21:e2:6b:d7:17:cc:74:f3:5e:50:
4a:00:21:fb:b4:da:ab:ba:d0:b7:a2:67:12:52:50:e8:f2:82:
54:8e:eb:24:50:5a:8d:ac:10:0c:f0:33:2e:48:b1:58:12:5d:
f6:10:45:f6:48:4f:10:28:7c:60:5c:89:fc:06:55:b1:6d:79:
19:94:3e:2f:68:a0:69:ae:6c:ad:da:6b:47:eb:f6:b6:3e:48:
ed:92:d2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 06:25:07 2025 by rpki-client