Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NkgEudeFf0TJa0OQcis-NMXRZxU.roa
File: NkgEudeFf0TJa0OQcis-NMXRZxU.roa (raw, json)
Hash identifier: VKqXH6SJ8XfuuZ+fQuPK2HjHplJ5aOw0QqKOungzP4U=
Subject key identifier: 36:48:04:B9:D7:85:7F:44:C9:6B:43:90:72:2B:3E:34:C5:D1:67:15
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195A07AFFF446BF95AAA87BD329AC473C4D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NkgEudeFf0TJa0OQcis-NMXRZxU.roa
Signing time: Sun 16 Mar 2025 19:42:50 +0000
ROA not before: Sun 16 Mar 2025 19:42:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 31.56.73.0/24 maxlen: 24
31.56.85.0/24 maxlen: 24
31.57.153.0/24 maxlen: 24
31.57.236.0/24 maxlen: 24
31.58.43.0/24 maxlen: 24
31.58.76.0/22 maxlen: 24
31.58.128.0/24 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.162.0/24 maxlen: 24
31.58.164.0/24 maxlen: 24
31.58.166.0/24 maxlen: 24
31.59.88.0/24 maxlen: 24
31.59.122.0/24 maxlen: 24
31.59.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 16 Mar 2025 19:48:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a0:7a:ff:f4:46:bf:95:aa:a8:7b:d3:29:ac:47:3c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 16 19:42:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=364804b9d7857f44c96b4390722b3e34c5d16715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a0:2e:2d:15:9c:9b:71:3b:ca:43:ad:b5:84:
39:e0:cd:cb:ec:21:78:b5:f7:59:5d:b1:ec:94:31:
22:57:d7:f8:1c:27:df:dd:a8:0b:ca:37:11:52:9c:
90:8b:14:50:92:9f:50:eb:dd:08:9c:3b:ce:d1:80:
c0:40:a4:32:29:21:e6:63:ac:78:49:4c:e8:90:12:
a4:45:9c:65:02:22:f3:15:42:e0:b5:ae:66:c1:94:
96:72:d8:4f:03:43:fc:a2:13:ee:7a:38:16:c8:bb:
19:34:d1:06:aa:3a:f9:26:d9:7c:4d:b4:cb:ea:8e:
e8:3f:7b:f1:4d:95:63:1b:ed:c9:19:ec:ed:80:8b:
e8:be:dc:f2:18:d1:03:3e:ae:6d:2d:cd:ff:de:c1:
08:2f:b3:4e:20:68:ec:ed:81:2d:14:49:12:11:80:
80:58:1b:b8:ae:b6:28:14:49:e8:77:a8:9a:04:ad:
6c:a1:e6:93:14:a2:38:53:11:f4:2a:7f:92:8d:27:
4c:c1:8d:cf:fa:d0:5f:c0:f0:e1:81:ee:bf:3b:c9:
bc:e7:16:38:0a:6a:8d:07:72:c8:2c:ca:ba:43:4e:
2b:3c:21:38:e8:7f:de:cb:96:75:55:23:a7:bf:69:
f3:8c:ca:7c:30:20:44:fd:30:d2:fb:62:b7:7f:f4:
b6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:48:04:B9:D7:85:7F:44:C9:6B:43:90:72:2B:3E:34:C5:D1:67:15
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NkgEudeFf0TJa0OQcis-NMXRZxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.73.0/24
31.56.85.0/24
31.57.153.0/24
31.57.236.0/24
31.58.43.0/24
31.58.76.0/22
31.58.128.0/24
31.58.153.0/24
31.58.162.0/24
31.58.164.0/24
31.58.166.0/24
31.59.88.0/24
31.59.122.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:dd:3c:19:1c:3e:df:56:d7:31:c4:f1:04:1d:81:83:76:12:
04:f3:57:bc:b4:10:e6:6f:17:4e:30:90:e2:0f:60:2c:94:ea:
5b:24:84:4e:b6:5f:29:71:22:62:a0:7f:f5:1d:9e:a5:34:1e:
c3:2d:c1:c1:89:eb:38:bb:4e:c9:62:c5:2f:09:94:98:f1:bd:
5e:68:bf:3b:6b:a7:30:5b:8e:88:e7:1e:71:1f:a9:e1:62:9b:
3d:05:81:d7:d4:99:64:03:f5:47:21:e9:e6:22:3c:23:4c:4e:
f4:bd:38:e5:80:5d:cf:70:a2:4d:0f:20:1c:9c:2b:ba:ba:24:
0f:22:63:2e:35:82:e4:08:20:65:79:07:4f:30:e2:bc:c2:0c:
f3:33:b2:ac:7c:65:b0:1f:97:1f:73:d8:ad:15:db:b3:c8:77:
b0:00:98:6b:ec:45:98:79:ff:a4:79:fc:88:75:a8:97:bf:0d:
78:4c:2f:45:4f:15:c6:13:dd:9b:76:a4:22:7d:a4:6e:fd:11:
52:43:ae:29:ee:ac:09:22:7c:a8:57:72:22:38:49:b8:a6:76:
6b:ba:4a:7a:7c:a4:e0:f0:06:18:29:0e:06:b5:7d:bc:b8:4b:
7b:6e:4c:95:1f:db:57:d5:36:7c:f1:d9:2b:cf:e9:e5:cb:9f:
1a:34:a4:84
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgISAZWgev/0Rr+Vqqh70ymsRzxNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMzE2MTk0MjUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjQ4MDRiOWQ3ODU3ZjQ0Yzk2YjQzOTA3MjJiM2UzNGM1ZDE2NzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6AuLRWcm3E7ykOttYQ54M3L7CF4
tfdZXbHslDEiV9f4HCff3agLyjcRUpyQixRQkp9Q690InDvO0YDAQKQyKSHmY6x4
SUzokBKkRZxlAiLzFULgta5mwZSWcthPA0P8ohPuejgWyLsZNNEGqjr5Jtl8TbTL
6o7oP3vxTZVjG+3JGeztgIvovtzyGNEDPq5tLc3/3sEIL7NOIGjs7YEtFEkSEYCA
WBu4rrYoFEnod6iaBK1soeaTFKI4UxH0Kn+SjSdMwY3P+tBfwPDhge6/O8m85xY4
CmqNB3LILMq6Q04rPCE46H/ey5Z1VSOnv2nzjMp8MCBE/TDS+2K3f/S2wQIDAQAB
o4ICUTCCAk0wHQYDVR0OBBYEFDZIBLnXhX9EyWtDkHIrPjTF0WcVMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvTmtnRXVkZUZmMFRKYTBPUWNpcy1OTVhSWnhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQAHzhJAwQA
HzhVAwQAHzmZAwQAHznsAwQAHzorAwQCHzpMAwQAHzqAAwQAHzqZAwQAHzqiAwQA
HzqkAwQAHzqmAwQAHztYAwQBHzt6MA0GCSqGSIb3DQEBCwUAA4IBAQA63TwZHD7f
VtcxxPEEHYGDdhIE81e8tBDmbxdOMJDiD2AslOpbJIROtl8pcSJioH/1HZ6lNB7D
LcHBies4u07JYsUvCZSY8b1eaL87a6cwW46I5x5xH6nhYps9BYHX1JlkA/VHIenm
IjwjTE70vTjlgF3PcKJNDyAcnCu6uiQPImMuNYLkCCBleQdPMOK8wgzzM7KsfGWw
H5cfc9itFduzyHewAJhr7EWYef+kefyIdaiXvw14TC9FTxXGE92bdqQifaRu/RFS
Q64p7qwJInyoV3IiOEm4pnZrukp6fKTg8AYYKQ4GtX28uEt7bkyVH9tX1TZ88dkr
z+nly58aNKSE
-----END CERTIFICATE-----
Generated at Mon Apr 28 19:59:18 2025 by rpki-client