Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/iQ0n9P3q0Fc7mEW3bRMpaFsEfo8.roa
File: iQ0n9P3q0Fc7mEW3bRMpaFsEfo8.roa (raw, json)
Hash identifier: L4glwW0iAyNBUEXYbiBqAA++NQCX8WFlMzA/iG+417g=
Subject key identifier: 89:0D:27:F4:FD:EA:D0:57:3B:98:45:B7:6D:13:29:68:5B:04:7E:8F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01973B580A1EF50DC3779B374FE31322C71F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/iQ0n9P3q0Fc7mEW3bRMpaFsEfo8.roa
Signing time: Wed 04 Jun 2025 14:28:34 +0000
ROA not before: Wed 04 Jun 2025 14:28:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 393939
IP address blocks: 31.58.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Jun 2025 10:28:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3b:58:0a:1e:f5:0d:c3:77:9b:37:4f:e3:13:22:c7:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 4 14:28:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=890d27f4fdead0573b9845b76d1329685b047e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:53:52:40:5e:81:69:2f:ff:54:a1:f8:b3:a3:
09:49:68:6e:ec:0b:25:52:2e:4c:38:88:fa:12:85:
85:cb:11:7a:34:60:f2:2e:ba:e6:44:94:24:e8:b2:
47:c8:b3:c5:70:67:1b:28:01:4b:39:9e:3e:11:ca:
ff:91:42:bf:58:49:6a:93:96:00:7e:11:ec:87:68:
70:d2:26:27:f1:97:83:b0:8f:9f:8b:79:43:19:24:
cb:be:9d:83:68:56:79:a4:26:3f:ee:09:7c:2f:b2:
4a:ee:e9:09:49:31:b6:86:11:6b:1f:0f:78:d9:f8:
a6:e8:80:27:5b:d5:43:e9:5e:5d:d5:d2:bb:f7:36:
03:9f:70:b7:b7:d6:65:54:34:1b:ca:2c:dc:dc:b7:
c0:a8:39:bb:c5:a3:e2:e4:e5:9f:c5:50:b9:3a:0c:
40:69:6e:05:c7:dc:a7:e1:06:6b:d1:32:c1:62:6c:
d5:68:cf:d4:43:b5:b4:0c:29:ca:48:cf:73:2f:64:
8d:88:e1:ee:66:d9:ca:07:c1:60:83:b9:40:af:27:
a8:e1:51:56:93:1e:3a:21:12:a9:93:9c:52:6f:71:
27:33:77:55:7b:72:dd:65:ca:9b:d1:88:60:17:d6:
f0:1a:7d:5b:1b:f4:eb:e3:0a:57:ea:21:e4:ed:fb:
5e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:0D:27:F4:FD:EA:D0:57:3B:98:45:B7:6D:13:29:68:5B:04:7E:8F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/iQ0n9P3q0Fc7mEW3bRMpaFsEfo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.69.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:42:03:06:7f:18:ce:8f:65:cc:e9:73:28:ff:7c:7b:6e:c5:
6b:93:43:d8:13:be:cf:90:b4:83:a4:39:4d:d5:07:da:a4:30:
f2:e6:ad:93:1b:92:31:f2:4b:7b:65:1b:55:8d:e0:1a:b8:22:
9f:fe:f0:5a:69:c2:af:2b:6a:c1:9a:56:83:cf:a7:44:d6:33:
af:79:93:f5:9b:8b:4f:78:41:d6:f1:e6:0d:de:13:e3:a9:d8:
3c:2f:b2:f4:1b:83:f2:5e:bb:e6:6a:1f:8a:5b:7b:ab:91:e4:
02:36:fe:c2:ad:0c:87:9a:58:fe:74:e0:fc:3e:f4:19:fd:e9:
6a:12:f8:c8:40:31:dd:bb:75:2f:51:76:dd:b1:d6:9f:62:48:
92:2d:91:9f:eb:a7:a4:4c:5a:22:0a:72:84:38:fd:9f:7b:02:
67:8c:a6:db:99:74:01:a7:e3:f8:79:23:5b:96:60:50:3f:ec:
df:c5:21:e9:95:d1:32:a5:86:89:4f:0c:0e:c8:c5:5c:84:a7:
16:c0:0a:69:57:83:ea:61:bd:62:9a:bd:be:83:d7:f6:9a:f4:
97:18:35:43:b4:97:90:cc:51:1c:df:06:62:14:6e:9f:9e:d1:
37:53:2d:f6:58:0d:b0:aa:c9:74:44:29:c8:17:8f:77:20:37:
e8:1b:fc:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:59:28 2025 by rpki-client