Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HhA7V74-M5Z-6xxPlcwN8hOJ__8.roa
File: HhA7V74-M5Z-6xxPlcwN8hOJ__8.roa (raw, json)
Hash identifier: KPE0OjcH7nBNlGH897nHc1L/nnKOG71eP5GTMvjf/QE=
Subject key identifier: 1E:10:3B:57:BE:3E:33:96:7E:EB:1C:4F:95:CC:0D:F2:13:89:FF:FF
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0198791057027AA81B41A90771FAC9669FF3
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HhA7V74-M5Z-6xxPlcwN8hOJ__8.roa
Signing time: Tue 05 Aug 2025 07:09:30 +0000
ROA not before: Tue 05 Aug 2025 07:09:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 31.56.73.0/24 maxlen: 24
31.56.85.0/24 maxlen: 24
31.56.239.0/24 maxlen: 24
31.57.113.0/24 maxlen: 24
31.57.153.0/24 maxlen: 24
31.57.236.0/24 maxlen: 24
31.58.43.0/24 maxlen: 24
31.58.128.0/24 maxlen: 24
31.58.162.0/24 maxlen: 24
31.58.164.0/24 maxlen: 24
31.59.88.0/24 maxlen: 24
31.59.122.0/24 maxlen: 24
31.59.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Aug 2025 05:33:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:10:57:02:7a:a8:1b:41:a9:07:71:fa:c9:66:9f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 5 07:09:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e103b57be3e33967eeb1c4f95cc0df21389ffff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e0:ec:c1:56:33:be:bd:d1:22:79:bd:1f:23:
e2:a8:2e:76:ec:16:06:97:d0:bc:63:35:c6:b5:94:
b0:da:4c:90:a6:60:09:b8:69:18:1e:75:44:cf:f3:
dc:72:8d:33:cb:28:1e:f9:58:b8:0c:e7:c4:c9:dd:
1e:66:e7:1a:53:1e:aa:2f:af:2b:a6:c7:5f:0a:63:
2c:15:f5:70:e0:db:fe:6b:69:39:48:33:5a:76:7a:
38:3d:29:b1:2d:ca:23:e9:df:bd:12:c3:8f:ee:dc:
90:88:ca:21:61:b8:d2:bd:8d:46:b1:c3:dc:02:a7:
3f:e2:44:08:5f:cf:b1:c6:91:09:1d:2f:4b:9e:92:
09:af:d1:48:5f:4c:da:9c:86:77:2c:87:3e:07:43:
9d:fd:b7:b0:7a:f0:65:46:9d:99:b2:25:c9:e4:5e:
7a:41:66:44:0c:09:da:02:15:be:fa:f5:fc:8c:6b:
47:a5:72:10:20:02:30:c0:e4:cf:3a:c5:96:41:75:
3e:c9:6f:e2:d0:8b:4f:99:75:5d:cb:43:74:31:bc:
6f:2c:c2:d3:a0:f4:93:c2:e6:93:c1:5a:5a:68:3a:
1f:9e:01:c3:46:13:15:55:9e:97:57:c0:74:44:76:
d7:0a:dd:71:d0:4e:57:f9:de:1e:ca:9a:91:00:e8:
01:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:10:3B:57:BE:3E:33:96:7E:EB:1C:4F:95:CC:0D:F2:13:89:FF:FF
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HhA7V74-M5Z-6xxPlcwN8hOJ__8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.73.0/24
31.56.85.0/24
31.56.239.0/24
31.57.113.0/24
31.57.153.0/24
31.57.236.0/24
31.58.43.0/24
31.58.128.0/24
31.58.162.0/24
31.58.164.0/24
31.59.88.0/24
31.59.122.0/23
Signature Algorithm: sha256WithRSAEncryption
84:83:19:48:e8:10:7d:bf:d8:ed:b7:2c:c0:ef:9b:bc:9e:e9:
e9:1f:aa:fe:31:75:e5:61:12:1e:cd:73:e7:e8:65:f5:80:9b:
bd:5b:3e:17:95:f3:42:35:8c:2f:b1:cd:7d:b3:84:16:19:0f:
00:a6:49:a4:4f:25:d2:96:a9:f6:24:77:93:3d:71:88:29:82:
ed:1c:eb:54:f8:6b:a8:e3:2a:08:49:43:89:92:46:b0:b1:5b:
c6:94:b5:b6:e0:6e:8c:e0:09:48:82:00:94:7c:24:91:54:43:
fc:f5:d9:63:e9:2c:8e:03:07:35:bd:3f:60:b0:f2:93:78:10:
e6:65:d0:71:3b:14:7c:33:5e:77:38:dd:8b:7e:77:0b:14:9f:
51:ba:3d:12:e2:66:cc:15:ab:47:31:ed:3c:ae:93:41:3e:cd:
2b:99:f5:0a:e7:9e:9d:38:0f:48:13:0a:af:16:ae:7f:b6:25:
7c:df:8a:07:a0:2d:f5:01:27:ba:7d:5a:3d:f2:36:a6:bf:f7:
94:ba:74:fb:06:7d:5b:14:24:c2:04:ac:d4:37:f4:23:58:7b:
f7:74:bd:9a:c9:20:f5:d9:53:33:a2:8f:ca:21:56:6d:d4:13:
04:e5:2e:ea:f5:5a:9e:f8:6d:bd:7c:ca:8e:63:85:27:41:72:
1e:2c:2f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:41:52 2025 by rpki-client