Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ePjLcLTv73IHpojfyPnGWtcnK5I.roa
File: ePjLcLTv73IHpojfyPnGWtcnK5I.roa (raw, json)
Hash identifier: IZATBcAnrRmZZPInJ4buvSOliqx3UJVwQBjbRjRiPYk=
Subject key identifier: 78:F8:CB:70:B4:EF:EF:72:07:A6:88:DF:C8:F9:C6:5A:D7:27:2B:92
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01969A2AAF5A6C5265A809EA79EFC8692EC5
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ePjLcLTv73IHpojfyPnGWtcnK5I.roa
Signing time: Sun 04 May 2025 07:20:10 +0000
ROA not before: Sun 04 May 2025 07:20:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 31.56.33.0/24 maxlen: 24
31.56.160.0/21 maxlen: 24
31.57.202.0/24 maxlen: 24
31.57.203.0/24 maxlen: 24
31.59.116.0/22 maxlen: 24
217.60.0.0/21 maxlen: 24
217.60.12.0/22 maxlen: 24
217.60.24.0/22 maxlen: 24
217.60.36.0/22 maxlen: 24
217.60.44.0/22 maxlen: 24
217.60.56.0/21 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 May 2025 07:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9a:2a:af:5a:6c:52:65:a8:09:ea:79:ef:c8:69:2e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 4 07:20:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78f8cb70b4efef7207a688dfc8f9c65ad7272b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:39:1e:91:32:19:16:93:35:a8:b8:af:2b:24:
07:8f:6a:76:ee:81:0d:2c:c7:18:4f:18:92:b1:cb:
48:5c:f8:5d:6a:63:44:2d:be:81:67:e4:5a:24:3a:
80:c3:9f:d1:bb:af:2f:51:22:2a:99:a7:95:e4:c5:
0a:b6:16:e0:2f:88:e3:0b:8c:cf:63:2f:d2:e0:58:
4b:e0:07:6b:47:a9:e9:4a:70:53:df:53:47:bc:c5:
8b:35:84:15:af:65:d9:dc:f3:09:bb:34:d8:1e:74:
ca:67:b0:51:6d:c8:27:7f:60:8d:aa:ce:03:9d:1f:
89:a5:0b:6f:b4:25:e4:c7:7d:11:ae:82:c5:98:7c:
33:de:6b:3c:00:a3:62:00:9e:4e:bd:ea:c7:85:ef:
33:44:0e:d6:96:17:d8:ab:fb:30:3b:e9:45:d0:ec:
de:c1:2d:6e:99:29:13:a2:3d:0e:1c:8f:8b:03:3b:
15:0a:c7:2f:b0:de:2e:73:6b:e7:53:c2:8f:e1:b2:
23:0c:68:b3:e6:f7:5d:94:e5:dd:f1:97:91:ea:48:
90:56:8e:84:c5:32:33:88:9d:13:24:85:98:4d:20:
28:83:3e:b2:25:3f:b1:0c:aa:6b:cd:b6:55:b3:7e:
b5:58:6c:85:66:b4:41:65:75:ad:a2:d9:f8:44:c5:
35:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F8:CB:70:B4:EF:EF:72:07:A6:88:DF:C8:F9:C6:5A:D7:27:2B:92
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ePjLcLTv73IHpojfyPnGWtcnK5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.33.0/24
31.56.160.0/21
31.57.202.0/23
31.59.116.0/22
217.60.0.0/21
217.60.12.0/22
217.60.24.0/22
217.60.36.0/22
217.60.44.0/22
217.60.56.0/21
Signature Algorithm: sha256WithRSAEncryption
b2:ed:dc:3c:e0:0d:f5:40:4a:24:1c:17:8f:8d:95:46:2d:8c:
0f:88:ce:1a:de:fe:8b:27:3e:05:b2:68:76:20:7e:fc:f3:1e:
f9:ef:41:dd:59:c3:82:b7:04:95:b8:cf:de:a9:5a:8f:94:1a:
f3:2b:d2:eb:25:5a:80:8f:ac:9d:2c:23:04:78:7e:82:eb:34:
fd:04:7e:1b:2e:97:73:82:27:f4:2e:65:74:24:3f:dc:fb:62:
24:28:70:37:f0:ea:1d:59:84:10:fb:bf:ca:ed:e5:f5:6e:a7:
56:c3:d0:78:f4:f5:a4:c5:31:5c:d6:af:17:09:89:58:7b:76:
62:ee:22:32:6d:51:ed:b3:e9:12:bd:07:b4:bd:ef:c7:c2:c0:
5b:a3:a2:b9:16:95:f1:17:10:30:0b:ab:1e:ef:82:3d:23:47:
d7:6e:8e:79:40:4a:75:dc:3f:64:4c:43:20:27:9c:ab:dd:be:
34:75:b6:84:18:4e:7b:8b:09:00:49:fe:6d:65:83:1b:b6:02:
7a:f4:68:50:ea:1f:30:86:8c:9f:66:d2:5a:58:7c:50:73:5b:
e6:89:27:ac:68:c5:28:91:7d:a3:99:bb:d8:29:79:e5:dd:bb:
ff:79:95:e2:ec:a7:63:36:23:8a:d2:36:fd:a9:13:93:44:a5:
04:6a:90:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:36:47 2025 by rpki-client