Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/82YPO_uTNEPuioudQJCfM4F0fyY.roa
File: 82YPO_uTNEPuioudQJCfM4F0fyY.roa (raw, json)
Hash identifier: nph1DO8s3Ss0BHCBMtOtLOgQw6WYowLix82en8QDF4M=
Subject key identifier: F3:66:0F:3B:FB:93:34:43:EE:8A:8B:9D:40:90:9F:33:81:74:7F:26
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195EB42AE1585A4BB7E07A1FA257D93482D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/82YPO_uTNEPuioudQJCfM4F0fyY.roa
Signing time: Mon 31 Mar 2025 08:12:50 +0000
ROA not before: Mon 31 Mar 2025 08:12:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214654
IP address blocks: 31.56.202.0/24 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Mar 2025 14:37:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:eb:42:ae:15:85:a4:bb:7e:07:a1:fa:25:7d:93:48:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 31 08:12:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3660f3bfb933443ee8a8b9d40909f3381747f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:59:a5:90:e6:06:a0:74:02:fd:d8:1d:2e:27:
84:d5:e5:e2:19:e3:f7:a4:1c:a3:84:2d:49:18:10:
ad:91:cf:57:d2:7f:67:64:cd:23:b8:ae:a6:78:44:
09:5e:31:3a:8e:72:11:fd:5c:df:ba:aa:74:08:b6:
7c:c3:90:6e:7d:49:2d:bc:68:0e:f9:0a:b0:9a:93:
0d:af:ab:e8:cf:ec:cc:61:d4:47:2f:8d:10:c9:a6:
15:ea:aa:a4:bc:4e:14:a6:aa:eb:09:97:65:3a:25:
b0:57:45:23:54:46:dd:ee:f6:86:80:cd:8f:a7:f2:
d9:3e:5a:cf:91:47:58:9d:47:62:3a:a7:a5:23:ca:
1d:c3:c6:8f:73:32:28:82:0c:5b:50:3d:87:05:1e:
9c:f9:b8:3f:a5:b1:1f:f2:b3:db:e4:74:c5:4f:2c:
6e:ad:48:12:62:6a:20:23:29:26:f5:b9:1b:d8:de:
77:e5:9b:40:b5:b8:55:78:97:cf:3e:b3:43:7e:95:
1e:24:ab:87:a5:32:86:99:26:ca:50:89:3f:a1:3e:
f5:5e:c1:8b:ef:2e:aa:20:6d:4f:5e:4f:6c:38:f3:
17:e9:3b:48:c9:b1:d0:16:e9:70:bb:d2:47:c3:b1:
f2:4c:fc:7b:ec:93:b7:fe:3b:24:cc:4d:4e:5b:a0:
3a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:66:0F:3B:FB:93:34:43:EE:8A:8B:9D:40:90:9F:33:81:74:7F:26
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/82YPO_uTNEPuioudQJCfM4F0fyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.202.0/24
31.57.181.0/24
31.57.221.0/24
Signature Algorithm: sha256WithRSAEncryption
83:ad:7b:00:d7:49:1a:19:9f:50:d3:72:20:ed:3d:70:a4:c0:
d3:21:7d:08:6e:42:98:f2:25:d2:78:d1:31:89:70:e7:56:4f:
96:ba:e3:94:11:ef:d0:8e:49:66:32:72:ef:f5:87:9f:60:23:
a3:07:e7:f4:d3:01:d0:bd:33:16:8d:8b:91:b7:b8:87:6f:44:
c9:0b:1b:7d:26:8d:63:71:e8:c4:41:1f:38:d7:d9:37:8a:73:
6a:76:e2:63:1d:b6:7c:4e:b4:bb:70:86:4a:b7:8c:89:7c:e8:
f4:e3:6e:5a:d2:fc:e0:20:df:33:02:c1:1f:bb:39:77:34:ae:
58:e1:3f:62:66:46:10:da:a7:9a:a2:b1:bd:35:a4:61:87:73:
65:3f:54:dd:8b:94:51:3e:4f:00:44:a3:2b:82:10:69:69:3f:
a7:56:15:1d:e8:e8:20:ac:d5:d1:0a:da:62:a8:c0:88:f9:0a:
57:fa:2f:86:4a:b8:8a:e2:99:77:25:e4:33:89:a1:c8:a7:d4:
b9:af:fb:de:1d:f6:97:c6:be:a0:e2:fc:18:09:16:da:64:54:
90:d9:7a:6d:16:1e:ab:10:03:6b:39:6c:57:0c:79:01:1d:bd:
d6:e5:54:b1:00:2a:f3:40:23:cb:0b:b4:c0:5b:bc:ac:2c:70:
21:5a:b1:ae
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZXrQq4VhaS7fgeh+iV9k0gtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMzMxMDgxMjUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzY2MGYzYmZiOTMzNDQzZWU4YThiOWQ0MDkwOWYzMzgxNzQ3ZjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVmlkOYGoHQC/dgdLieE1eXiGeP3
pByjhC1JGBCtkc9X0n9nZM0juK6meEQJXjE6jnIR/Vzfuqp0CLZ8w5BufUktvGgO
+QqwmpMNr6voz+zMYdRHL40QyaYV6qqkvE4UpqrrCZdlOiWwV0UjVEbd7vaGgM2P
p/LZPlrPkUdYnUdiOqelI8odw8aPczIoggxbUD2HBR6c+bg/pbEf8rPb5HTFTyxu
rUgSYmogIykm9bkb2N535ZtAtbhVeJfPPrNDfpUeJKuHpTKGmSbKUIk/oT71XsGL
7y6qIG1PXk9sOPMX6TtIybHQFulwu9JHw7HyTPx77JO3/jskzE1OW6A6WwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFPNmDzv7kzRD7oqLnUCQnzOBdH8mMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvODJZUE9fdVRORVB1aW91ZFFKQ2ZNNEYwZnlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHzjKAwQA
Hzm1AwQAHzndMA0GCSqGSIb3DQEBCwUAA4IBAQCDrXsA10kaGZ9Q03Ig7T1wpMDT
IX0IbkKY8iXSeNExiXDnVk+WuuOUEe/QjklmMnLv9YefYCOjB+f00wHQvTMWjYuR
t7iHb0TJCxt9Jo1jcejEQR8419k3inNqduJjHbZ8TrS7cIZKt4yJfOj0425a0vzg
IN8zAsEfuzl3NK5Y4T9iZkYQ2qeaorG9NaRhh3NlP1Tdi5RRPk8ARKMrghBpaT+n
VhUd6OggrNXRCtpiqMCI+QpX+i+GSriK4pl3JeQziaHIp9S5r/veHfaXxr6g4vwY
CRbaZFSQ2XptFh6rEANrOWxXDHkBHb3W5VSxACrzQCPLC7TAW7ysLHAhWrGu
-----END CERTIFICATE-----
Generated at Mon Apr 28 19:52:19 2025 by rpki-client