Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RLRODYq6Z-D3au6xrJBjgSvtpX4.roa
File: RLRODYq6Z-D3au6xrJBjgSvtpX4.roa (raw, json)
Hash identifier: Rdx0jlcVXrxlT10yNBPxV4iRcZjPIRbsGL7pCy0+S8A=
Subject key identifier: 44:B4:4E:0D:8A:BA:67:E0:F7:6A:EE:B1:AC:90:63:81:2B:ED:A5:7E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01957047F9FF8B72141FE47A9C88472F713D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RLRODYq6Z-D3au6xrJBjgSvtpX4.roa
Signing time: Fri 07 Mar 2025 11:05:20 +0000
ROA not before: Fri 07 Mar 2025 11:05:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25369
IP address blocks: 31.56.176.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.184.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.192.0/22 maxlen: 24
31.56.196.0/22 maxlen: 24
31.56.204.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.216.0/22 maxlen: 24
31.56.220.0/22 maxlen: 24
31.56.224.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.232.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.58.36.0/22 maxlen: 24
31.58.44.0/22 maxlen: 24
31.58.52.0/22 maxlen: 24
31.58.60.0/22 maxlen: 24
31.59.36.0/22 maxlen: 24
31.59.44.0/22 maxlen: 24
31.59.121.0/24 maxlen: 24
31.59.196.0/22 maxlen: 24
31.59.200.0/22 maxlen: 24
31.59.204.0/22 maxlen: 24
31.59.208.0/22 maxlen: 24
31.59.212.0/22 maxlen: 24
31.59.220.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Mar 2025 08:13:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:70:47:f9:ff:8b:72:14:1f:e4:7a:9c:88:47:2f:71:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 7 11:05:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44b44e0d8aba67e0f76aeeb1ac9063812beda57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c9:5c:cf:a0:6b:d1:fc:0c:4c:8e:ac:28:3d:
e6:b1:0e:82:53:1a:50:9d:6e:a8:ef:06:d8:98:21:
70:58:ef:35:b8:99:f6:7b:61:8f:93:14:57:aa:e8:
29:b1:6e:b2:09:b3:8e:61:75:6a:f7:94:fb:44:01:
d2:e1:99:8b:08:bd:2c:71:6e:54:d9:15:6e:3b:17:
45:3e:e6:24:3d:d1:0e:40:f0:b7:ab:25:ff:b7:c8:
33:c7:ad:f5:e2:28:88:82:ef:b3:76:a1:36:e6:8f:
36:53:a4:b6:94:fe:91:d1:fc:1c:9d:bb:de:dd:30:
90:d4:73:89:89:9b:95:14:a3:14:09:68:cf:93:2c:
a9:b1:85:7c:18:bd:54:3a:de:01:99:7e:e1:95:e8:
61:9c:d0:fa:57:80:1d:a4:86:fc:cd:e5:1e:e8:fc:
e2:29:d4:9f:99:d6:a2:17:e3:65:77:78:e4:04:71:
45:8c:09:ca:5f:57:31:24:7d:c0:4a:3c:be:92:e0:
85:7d:55:3b:c5:98:76:78:59:d4:10:2a:ab:25:7c:
2f:42:8a:05:4b:6f:cc:9b:9e:92:ce:05:11:96:76:
c6:5e:fc:9b:e3:05:23:5a:f0:64:b0:d2:52:f3:f7:
69:77:94:e6:08:45:7e:6a:4c:9f:be:4c:14:00:8e:
3a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B4:4E:0D:8A:BA:67:E0:F7:6A:EE:B1:AC:90:63:81:2B:ED:A5:7E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RLRODYq6Z-D3au6xrJBjgSvtpX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.176.0-31.56.199.255
31.56.204.0-31.56.239.255
31.58.36.0/22
31.58.44.0/22
31.58.52.0/22
31.58.60.0/22
31.59.36.0/22
31.59.44.0/22
31.59.121.0/24
31.59.196.0-31.59.215.255
31.59.220.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:4e:c4:3c:80:47:46:6d:f9:c7:aa:49:04:c5:cb:da:77:70:
2d:08:bb:dd:2c:0c:04:6c:47:bb:0f:c8:fd:3f:ca:c0:d5:25:
bf:09:ba:48:e4:80:ba:95:19:33:8b:fa:7b:df:08:57:d2:8d:
54:41:45:99:79:02:2e:08:cc:04:6f:1b:17:d0:4c:48:e5:55:
b0:27:fa:ba:8b:00:ca:c6:67:ce:89:83:6c:d9:0b:a4:79:9a:
8b:3e:32:72:1e:86:d9:b0:4a:bf:15:23:13:e8:06:2d:02:e9:
29:58:e6:cd:6b:dc:2c:d1:65:1f:b1:44:e9:8d:15:d3:c5:66:
dd:08:87:2c:e7:98:19:bd:3c:6e:a9:eb:5f:ba:d7:b2:24:c0:
ed:c7:61:91:b7:47:e3:10:fe:7f:be:f8:38:43:73:45:21:d3:
8a:42:86:54:f8:36:ef:09:6b:74:bf:b4:88:2a:2a:34:f4:bc:
23:0e:b0:9f:7e:f3:39:ac:81:eb:44:3c:4a:5e:a2:09:9b:f1:
6f:52:9b:ab:27:50:69:d5:08:c4:c2:57:b0:a5:68:57:de:11:
a9:93:76:5d:ec:f0:bc:8d:69:66:83:83:81:9c:c5:8f:d4:76:
ab:4b:df:9c:79:b9:35:88:88:ab:5f:91:c8:80:b7:11:96:60:
d6:9c:d7:7a
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgISAZVwR/n/i3IUH+R6nIhHL3E9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMzA3MTEwNTIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NGI0NGUwZDhhYmE2N2UwZjc2YWVlYjFhYzkwNjM4MTJiZWRhNTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3slcz6Br0fwMTI6sKD3msQ6CUxpQ
nW6o7wbYmCFwWO81uJn2e2GPkxRXqugpsW6yCbOOYXVq95T7RAHS4ZmLCL0scW5U
2RVuOxdFPuYkPdEOQPC3qyX/t8gzx6314iiIgu+zdqE25o82U6S2lP6R0fwcnbve
3TCQ1HOJiZuVFKMUCWjPkyypsYV8GL1UOt4BmX7hlehhnND6V4AdpIb8zeUe6Pzi
KdSfmdaiF+Nld3jkBHFFjAnKX1cxJH3ASjy+kuCFfVU7xZh2eFnUECqrJXwvQooF
S2/Mm56SzgURlnbGXvyb4wUjWvBksNJS8/dpd5TmCEV+akyfvkwUAI46RwIDAQAB
o4ICXTCCAlkwHQYDVR0OBBYEFES0Tg2Kumfg92rusayQY4Er7aV+MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvUkxST0RZcTZaLUQzYXU2eHJKQmpnU3Z0cFg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaMAwDBAQfOLAD
BAMfOMAwDAMEAh84zAMEBB844AMEAh86JAMEAh86LAMEAh86NAMEAh86PAMEAh87
JAMEAh87LAMEAB87eTAMAwQCHzvEAwQDHzvQAwQCHzvcMA0GCSqGSIb3DQEBCwUA
A4IBAQDATsQ8gEdGbfnHqkkExcvad3AtCLvdLAwEbEe7D8j9P8rA1SW/CbpI5IC6
lRkzi/p73whX0o1UQUWZeQIuCMwEbxsX0ExI5VWwJ/q6iwDKxmfOiYNs2QukeZqL
PjJyHobZsEq/FSMT6AYtAukpWObNa9ws0WUfsUTpjRXTxWbdCIcs55gZvTxuqetf
uteyJMDtx2GRt0fjEP5/vvg4Q3NFIdOKQoZU+DbvCWt0v7SIKio09LwjDrCffvM5
rIHrRDxKXqIJm/FvUpurJ1Bp1QjEwlewpWhX3hGpk3Zd7PC8jWlmg4OBnMWP1Har
S9+cebk1iIirX5HIgLcRlmDWnNd6
-----END CERTIFICATE-----
Generated at Sun Apr 27 17:57:51 2025 by rpki-client