Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zkpgLZzxsVj01YlYB4A_Sb2QeRo.roa
File: zkpgLZzxsVj01YlYB4A_Sb2QeRo.roa (raw, json)
Hash identifier: Ihs4+XG9I6T8R9ybqdstt+yG4sPYsGQDw76lHyznHjM=
Subject key identifier: CE:4A:60:2D:9C:F1:B1:58:F4:D5:89:58:07:80:3F:49:BD:90:79:1A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01969A3695EBDFFD3869C8D250FBAAE328D3
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zkpgLZzxsVj01YlYB4A_Sb2QeRo.roa
Signing time: Sun 04 May 2025 07:33:10 +0000
ROA not before: Sun 04 May 2025 07:33:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 31.56.33.0/24 maxlen: 24
31.56.160.0/21 maxlen: 24
31.57.202.0/24 maxlen: 24
31.57.203.0/24 maxlen: 24
31.59.116.0/22 maxlen: 24
217.60.0.0/21 maxlen: 24
217.60.12.0/22 maxlen: 24
217.60.24.0/22 maxlen: 24
217.60.36.0/22 maxlen: 24
217.60.44.0/22 maxlen: 24
217.60.60.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 May 2025 07:51:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9a:36:95:eb:df:fd:38:69:c8:d2:50:fb:aa:e3:28:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 4 07:33:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce4a602d9cf1b158f4d5895807803f49bd90791a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9c:7d:0f:e2:d1:4e:8c:2f:78:e9:2d:5f:94:
55:7c:f9:c0:a4:67:3c:3b:63:06:2b:37:43:e8:9f:
21:29:a7:ac:f2:a4:94:aa:a5:f8:ed:81:e6:ca:23:
b1:c6:b5:5a:51:a3:ae:aa:68:8e:cb:84:c8:12:e4:
de:1b:10:0c:13:57:66:52:c9:ea:0e:99:d9:0a:78:
52:4f:06:61:dd:1e:f1:ae:4b:c3:d5:bc:2d:66:ab:
05:9b:a4:ab:c0:55:40:0f:a1:fd:ff:28:4a:c9:bd:
33:e4:b0:59:32:ed:de:05:1f:25:59:58:0c:c5:1b:
88:5e:be:65:19:f8:39:c4:a6:1b:38:92:7d:d3:7a:
c8:4a:0d:ef:a3:d1:e8:54:a1:9c:24:8c:f5:1e:1f:
b2:c8:ea:14:57:01:61:6b:98:0a:67:4c:41:72:df:
68:93:05:cd:df:05:e7:09:54:8d:ff:81:29:d8:05:
19:94:3b:2f:1d:8c:6d:56:d5:61:68:72:dd:86:1f:
9b:db:01:99:85:4c:7f:db:87:63:de:f7:9f:63:70:
9d:67:20:67:ed:2f:f3:d7:36:b6:c2:ee:b1:ce:27:
48:99:a8:83:ec:5d:e4:56:0f:39:04:58:6b:c8:fb:
1b:ac:52:61:70:ca:2f:f2:14:90:35:4f:53:18:94:
4d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4A:60:2D:9C:F1:B1:58:F4:D5:89:58:07:80:3F:49:BD:90:79:1A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zkpgLZzxsVj01YlYB4A_Sb2QeRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.33.0/24
31.56.160.0/21
31.57.202.0/23
31.59.116.0/22
217.60.0.0/21
217.60.12.0/22
217.60.24.0/22
217.60.36.0/22
217.60.44.0/22
217.60.60.0/22
Signature Algorithm: sha256WithRSAEncryption
18:ae:60:4a:16:96:4a:e2:50:c6:65:e5:66:ca:40:cf:00:7c:
0f:c5:70:a3:bb:dc:e5:de:0a:1c:cd:de:d3:8c:f5:96:f7:4f:
21:8d:d6:90:90:40:ed:00:26:2c:c1:54:db:00:33:32:af:fc:
e3:ac:26:52:0e:df:f3:f2:4a:c8:39:de:3c:cd:b3:73:c2:8d:
32:86:d2:0c:81:88:fd:2f:03:13:91:d0:4c:0d:92:c4:a4:7b:
37:ba:a6:36:98:89:94:0f:c4:46:a9:75:53:7a:2d:35:2c:65:
05:74:75:af:a7:8d:b8:b1:63:26:bd:b0:ec:60:af:62:92:73:
ad:50:8e:2a:44:50:fb:91:c5:f6:11:81:0a:51:5e:ff:8e:8a:
c5:c9:13:32:0f:e5:9c:d3:34:57:6b:ff:19:03:d0:9c:de:fd:
1d:6f:56:78:b0:6f:f3:8a:ac:2a:9c:d6:c4:42:f9:66:9f:ea:
65:95:a5:8c:c4:66:ee:25:ba:57:b7:b5:4b:21:c6:85:8c:0d:
21:f0:98:9f:45:f2:c0:75:22:16:44:ee:bc:ad:d0:c6:6a:a6:
6c:16:28:b6:2f:8b:b5:03:87:c2:d2:9a:69:53:0b:f2:f3:95:
4c:70:51:d1:54:9a:cb:d1:6a:17:08:e0:f8:7d:c0:97:0c:90:
bc:ce:ce:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:23:25 2025 by rpki-client