Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/er6MbbZCrAeQ-2a_39lqiAHZlbk.roa
File: er6MbbZCrAeQ-2a_39lqiAHZlbk.roa (raw, json)
Hash identifier: TIqRJ7jf9qUoDSNvmjY9FIXxEsrmzbRwilBJn2/LY+0=
Subject key identifier: 7A:BE:8C:6D:B6:42:AC:07:90:FB:66:BF:DF:D9:6A:88:01:D9:95:B9
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195E7FA37EE5F6BF65E100374CE9A114DA2
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/er6MbbZCrAeQ-2a_39lqiAHZlbk.roa
Signing time: Sun 30 Mar 2025 16:54:50 +0000
ROA not before: Sun 30 Mar 2025 16:54:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42960
IP address blocks: 31.57.168.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Mar 2025 05:15:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e7:fa:37:ee:5f:6b:f6:5e:10:03:74:ce:9a:11:4d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 30 16:54:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7abe8c6db642ac0790fb66bfdfd96a8801d995b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:22:9b:27:70:33:d5:84:09:3b:a2:7d:8d:8c:
e7:6f:21:a5:cb:34:6a:a3:b2:d1:db:a1:d5:cd:fe:
bb:c8:c0:63:fe:bb:e6:3e:86:d2:49:57:68:da:1a:
e7:8a:7e:6b:14:a2:b4:c8:09:51:85:05:bf:78:bb:
02:9b:78:00:0a:c9:f3:18:ec:3f:09:07:38:6a:3f:
00:1b:57:56:1e:ac:0e:05:8f:31:4a:39:ab:46:7c:
f8:c4:7b:fd:d5:21:1f:2f:79:e1:a6:a8:d2:4e:07:
23:17:8e:bd:16:d6:c6:fb:48:6a:51:68:33:35:af:
b3:6f:83:e2:5f:04:d6:96:aa:e7:5f:bf:0a:8e:d9:
d6:10:b7:58:a8:5d:63:1c:88:d7:f8:4c:f4:30:f0:
07:4b:70:fd:cd:1a:c9:c1:31:0d:51:85:7e:10:bd:
54:67:c9:c0:2b:0e:6a:a1:3c:8f:b0:9a:46:02:c4:
ec:ed:66:6f:d7:0d:1f:85:14:92:81:32:8c:4f:c5:
82:42:fb:58:24:1a:ab:e5:6c:6e:8d:e2:66:05:49:
f8:dc:d5:78:07:18:e8:6a:80:02:ee:50:12:2a:0f:
cb:68:78:4b:3c:d2:d0:fb:b8:87:66:e7:e2:0b:89:
cd:41:a8:8c:a3:61:6a:4c:e3:a7:c0:c3:bd:9f:ac:
8c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:BE:8C:6D:B6:42:AC:07:90:FB:66:BF:DF:D9:6A:88:01:D9:95:B9
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/er6MbbZCrAeQ-2a_39lqiAHZlbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.168.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:3c:00:88:3a:22:ac:bb:ea:de:16:e4:18:89:33:40:ac:52:
e3:59:29:bc:66:f7:42:ec:35:cf:1d:c6:1a:73:9a:3d:58:76:
1e:df:17:4f:86:33:9f:6b:4f:c0:d3:7e:04:f7:00:04:f8:8d:
07:ec:07:48:46:e1:0e:4a:66:50:eb:c7:e6:1a:99:33:23:80:
1c:83:0c:05:25:e9:e2:4f:72:45:80:d5:c7:b0:0d:42:a0:4e:
b4:28:ef:f0:bb:ec:f0:a1:63:68:40:e8:12:ee:63:0e:b5:ae:
1c:cc:8f:8a:9c:81:03:2e:24:a0:85:2a:a3:74:ba:5a:81:e3:
b1:02:07:23:1a:90:fe:e8:4c:21:1f:41:3e:ff:ac:e3:1f:5a:
2b:f3:5c:53:a6:c6:44:94:39:e5:9d:f4:70:38:59:5b:09:a8:
63:d5:54:5e:83:5a:57:2a:d5:e1:a9:12:25:f0:36:2d:08:9c:
ff:67:2f:ea:14:69:5d:fe:65:40:5c:b3:b2:33:8c:55:b5:20:
1b:e8:80:8d:b3:53:3d:3e:36:22:60:19:c7:15:60:48:ce:65:
d9:80:1f:92:22:42:3f:53:46:ee:61:d5:56:f7:e9:ca:34:f4:
1a:64:14:6b:0a:e6:c3:ab:43:8c:ed:4b:b5:63:e0:88:c0:53:
f3:fe:b3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:19:24 2025 by rpki-client