Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jx0-Cydp-g8Tf8oTqi7HVg9sz84.roa
File: jx0-Cydp-g8Tf8oTqi7HVg9sz84.roa (raw, json)
Hash identifier: RrNObFpuEBrQqNwWbukNHFHbLnwfHLmfK48jMy/6mJI=
Subject key identifier: 8F:1D:3E:0B:27:69:FA:0F:13:7F:CA:13:AA:2E:C7:56:0F:6C:CF:CE
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197B55EDF0D986A5D66E99E5D768CACF0B9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jx0-Cydp-g8Tf8oTqi7HVg9sz84.roa
Signing time: Sat 28 Jun 2025 07:09:42 +0000
ROA not before: Sat 28 Jun 2025 07:09:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 31.56.88.0/24 maxlen: 24
31.56.112.0/21 maxlen: 24
31.57.11.0/24 maxlen: 24
31.57.131.0/24 maxlen: 24
31.57.150.0/24 maxlen: 24
31.57.176.0/24 maxlen: 24
31.57.183.0/24 maxlen: 24
31.57.194.0/24 maxlen: 24
31.58.59.0/24 maxlen: 24
31.58.71.0/24 maxlen: 24
31.58.146.0/24 maxlen: 24
31.59.14.0/24 maxlen: 24
31.59.30.0/24 maxlen: 24
31.59.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Jun 2025 14:09:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:5e:df:0d:98:6a:5d:66:e9:9e:5d:76:8c:ac:f0:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 28 07:09:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f1d3e0b2769fa0f137fca13aa2ec7560f6ccfce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2f:cf:9a:31:87:d0:85:e6:c8:79:af:da:44:
d9:2c:ca:b4:5a:e6:67:32:fb:8f:4d:7d:e1:5c:9f:
6a:06:ef:f9:a1:72:74:7c:3f:7f:42:9d:0d:b5:a2:
01:a7:1c:9a:d7:3a:a5:60:34:4b:55:2d:3e:d9:8e:
bf:17:87:4a:c8:7b:53:99:65:28:e9:b5:63:bc:c7:
01:ee:6b:05:c9:20:41:39:26:96:c0:d4:ef:77:8b:
fe:e2:60:fe:14:bd:08:c4:2a:f3:0d:dc:03:29:01:
12:e6:c2:c1:e2:12:02:43:f8:c5:29:aa:c0:53:d0:
14:1d:01:68:a9:00:f8:30:7f:a7:b0:11:8e:53:f9:
a7:29:9b:a4:d0:ef:e5:df:32:67:6d:10:db:53:bc:
52:e2:e8:40:2f:ca:fc:ae:18:66:4e:bb:50:a0:d1:
fe:18:76:f5:4c:cf:70:67:a7:e5:48:57:06:d7:94:
a1:ce:f9:c1:c7:50:c4:b0:06:8a:14:bd:f4:cb:03:
08:80:24:47:95:0c:77:f9:7f:bd:f8:5e:30:69:fd:
f9:2d:ab:a6:90:30:cd:5a:0c:21:54:1b:a9:62:5a:
d8:71:1c:fc:a2:02:36:64:32:49:f8:4e:4b:39:66:
38:64:04:68:ef:2d:d7:2f:6f:f2:bb:40:30:35:33:
78:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:1D:3E:0B:27:69:FA:0F:13:7F:CA:13:AA:2E:C7:56:0F:6C:CF:CE
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jx0-Cydp-g8Tf8oTqi7HVg9sz84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.88.0/24
31.56.112.0/21
31.57.11.0/24
31.57.131.0/24
31.57.150.0/24
31.57.176.0/24
31.57.183.0/24
31.57.194.0/24
31.58.59.0/24
31.58.71.0/24
31.58.146.0/24
31.59.14.0/24
31.59.30.0/24
31.59.215.0/24
Signature Algorithm: sha256WithRSAEncryption
67:3c:f7:80:3b:79:22:bc:6e:35:5e:c2:90:1f:04:fc:16:a6:
18:73:b6:fb:72:1f:4d:15:6c:d8:aa:31:13:d8:ba:c3:56:38:
13:59:a7:d1:c4:0e:14:30:ee:df:ae:2d:fb:8c:3d:e7:98:6e:
eb:e8:3c:84:bf:54:15:bc:c4:d6:43:bb:a8:76:1c:7f:50:6e:
85:73:32:3e:2a:dc:08:e4:6e:51:64:3f:b8:b1:55:ce:e0:a8:
8f:61:87:52:aa:0b:f8:dd:4e:d9:31:50:c5:d6:c6:0f:88:93:
cf:da:b5:30:3d:cf:e8:eb:81:ab:21:52:90:2b:27:b2:67:fa:
fa:61:17:c6:40:07:4e:90:ac:0c:cc:2f:cb:da:f1:d8:35:37:
52:07:84:1e:54:90:ca:31:03:c1:22:82:d7:66:a0:de:b9:10:
35:83:20:b7:ed:e1:45:fa:de:0b:2c:e5:bf:d8:5f:66:fc:90:
0f:69:43:a8:00:00:ab:b6:03:64:8d:0b:eb:ba:c9:66:04:be:
45:ee:3f:20:61:93:cb:84:31:f7:9a:7c:45:15:9b:f2:ff:7d:
0a:ce:92:c9:7c:72:22:17:e2:48:19:d0:4d:d6:06:ee:76:e5:
3c:04:2e:d0:ee:d7:19:5c:43:6d:e5:ba:f0:da:14:db:6c:be:
bf:16:12:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 11:45:01 2025 by rpki-client