Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MR6FjPgRXdVt9n5ZWYBwk126LBM.roa
File: MR6FjPgRXdVt9n5ZWYBwk126LBM.roa (raw, json)
Hash identifier: R2/0uFKc1IcYKEh+E3n5rXekikdzjHG5TfLkA+Hbw5k=
Subject key identifier: 31:1E:85:8C:F8:11:5D:D5:6D:F6:7E:59:59:80:70:93:5D:BA:2C:13
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0198664E64C9515AAACE8A4DB612BAFB9A59
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MR6FjPgRXdVt9n5ZWYBwk126LBM.roa
Signing time: Fri 01 Aug 2025 15:44:30 +0000
ROA not before: Fri 01 Aug 2025 15:44:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 31.56.43.0/24 maxlen: 24
31.56.66.0/24 maxlen: 24
31.57.35.0/24 maxlen: 24
31.57.100.0/24 maxlen: 24
31.57.228.0/24 maxlen: 24
31.59.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Aug 2025 15:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:66:4e:64:c9:51:5a:aa:ce:8a:4d:b6:12:ba:fb:9a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 1 15:44:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=311e858cf8115dd56df67e59598070935dba2c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6c:1d:0d:5a:9d:c2:01:90:17:1c:2f:87:1e:
d3:b4:00:57:bf:ed:ee:98:e1:d3:cc:8f:a4:c9:f4:
5e:41:53:f9:14:27:17:4b:93:99:5a:42:65:5f:f9:
44:6c:f3:64:ca:07:94:6f:62:f9:a5:c1:d7:0e:01:
6d:ef:d4:72:e7:cf:05:c0:05:b2:29:c5:16:7d:64:
2e:71:f5:a7:14:17:fb:62:e7:6c:23:ab:1f:91:7e:
c8:cf:5b:73:60:f8:08:7e:b2:c8:af:e1:c3:a6:e2:
dc:e2:4e:96:1f:d5:74:cb:8b:59:58:57:2e:a9:8c:
d8:47:18:bb:df:70:91:1a:31:e1:e0:1e:90:76:47:
7d:89:6d:52:ae:88:ab:61:0e:3b:16:82:a0:bc:d6:
16:47:85:4c:9a:7c:88:a1:8c:57:6b:aa:f8:ac:68:
49:ef:eb:04:ed:c6:58:43:8e:d9:3e:39:01:02:0f:
5a:66:7a:65:c6:b4:f8:75:1b:d2:56:70:b8:12:36:
cb:31:4b:d4:cb:44:99:5a:15:c2:92:d3:0e:5e:21:
1a:4d:b0:e4:46:99:d7:6f:81:e3:c9:6f:f2:a9:ba:
33:3e:72:2e:2d:4d:21:0b:16:e7:a0:a8:ba:bc:bd:
12:0b:41:8a:c1:96:40:f8:43:c7:0d:42:3f:af:63:
50:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1E:85:8C:F8:11:5D:D5:6D:F6:7E:59:59:80:70:93:5D:BA:2C:13
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MR6FjPgRXdVt9n5ZWYBwk126LBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.43.0/24
31.56.66.0/24
31.57.35.0/24
31.57.100.0/24
31.57.228.0/24
31.59.167.0/24
Signature Algorithm: sha256WithRSAEncryption
54:93:f4:d4:75:8f:c3:c1:9f:44:22:9d:2e:d1:51:85:24:e9:
68:17:32:25:04:be:50:50:03:22:d4:80:c2:8d:4a:81:a6:2f:
ff:e5:56:2f:12:03:77:ce:6f:77:58:7c:46:4c:46:70:67:ee:
3e:7a:e7:2f:5f:8a:75:88:69:71:55:2c:9a:47:b1:f5:b0:22:
d8:42:aa:e1:3d:1e:58:7e:ca:36:e3:1e:8d:bf:08:47:d9:c6:
66:bb:a9:88:3a:1b:db:62:9b:41:fd:b3:c5:43:4a:31:f1:0d:
b5:02:13:4d:9f:b0:cb:25:51:cb:56:8f:cf:01:67:41:86:1a:
48:7d:f3:76:8c:02:f3:74:58:85:36:ee:2e:c8:57:25:78:20:
fb:50:03:7c:1b:93:c3:67:bf:2c:26:fc:20:ce:53:a2:39:95:
9a:b9:94:6d:df:95:e6:8d:1a:aa:8e:69:64:59:f6:9c:38:8d:
5f:46:c8:93:77:2a:74:12:ac:90:8f:0a:ee:9a:a5:03:8e:65:
22:ab:18:13:f6:c6:7c:82:22:3a:cc:4d:a8:e6:69:95:06:c1:
fd:d0:80:7f:49:e8:d9:61:94:ed:e3:fd:da:f0:4b:30:32:00:
00:50:97:d7:b8:70:0a:af:5d:a8:e7:32:5e:da:67:1e:74:2a:
f4:b3:8d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:19:25 2025 by rpki-client