Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ixunznwQ-PnHzFZ2E4ABelaqrRE.roa
File: ixunznwQ-PnHzFZ2E4ABelaqrRE.roa (raw, json)
Hash identifier: 1iO6FiGjgGT4nSm7j3uLu0SLZMJLTYOWmymoaSfaQE4=
Subject key identifier: 8B:1B:A7:CE:7C:10:F8:F9:C7:CC:56:76:13:80:01:7A:56:AA:AD:11
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197411FD528A421453B11717031E8F1ACBE
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ixunznwQ-PnHzFZ2E4ABelaqrRE.roa
Signing time: Thu 05 Jun 2025 17:24:54 +0000
ROA not before: Thu 05 Jun 2025 17:24:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20326
IP address blocks: 31.57.186.0/23 maxlen: 23
31.58.50.0/24 maxlen: 24
31.58.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Jun 2025 10:24:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:41:1f:d5:28:a4:21:45:3b:11:71:70:31:e8:f1:ac:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 5 17:24:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b1ba7ce7c10f8f9c7cc56761380017a56aaad11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e7:e3:81:49:39:d4:a8:f1:00:03:44:9b:4c:
ef:72:e4:e8:92:c9:70:1c:fe:24:e3:11:6d:54:5c:
ac:4c:e3:a2:88:9c:86:b3:2e:7b:57:ed:8c:c9:bd:
ef:1d:30:ed:85:0b:31:6f:85:2f:48:11:9d:0c:f8:
24:1c:f9:d9:10:f7:75:18:75:e6:34:c2:7e:bd:2c:
af:48:63:10:ad:cc:4a:cd:52:a0:b6:59:3e:39:cf:
01:72:5f:63:52:1f:4c:fd:1e:c7:d7:f6:54:92:a1:
83:f2:36:57:f9:88:fa:b3:0f:df:f6:d9:aa:4d:2b:
de:78:f9:53:c4:6c:43:f3:c2:19:24:16:06:1b:ca:
e6:78:d1:07:2c:ec:ca:47:9d:12:d9:5a:50:5f:9c:
36:73:30:7a:b9:dd:59:6a:0b:ca:99:6b:bf:9e:09:
61:37:11:b4:65:ef:db:47:61:e5:57:06:9c:f8:15:
0e:10:aa:1a:d7:f1:0d:e2:9e:88:4c:2d:d1:c5:42:
59:4f:01:27:de:f1:00:3a:f0:a1:ee:7a:5b:66:38:
aa:0f:62:0d:4b:17:ac:fe:86:fb:b8:28:15:a0:6c:
ec:47:04:cd:62:03:ed:f9:0a:b2:61:34:3f:4b:1b:
28:d6:83:98:14:73:86:f3:db:4c:20:25:4a:94:0d:
d5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1B:A7:CE:7C:10:F8:F9:C7:CC:56:76:13:80:01:7A:56:AA:AD:11
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ixunznwQ-PnHzFZ2E4ABelaqrRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.186.0/23
31.58.50.0/24
31.58.56.0/24
Signature Algorithm: sha256WithRSAEncryption
97:1e:13:30:91:6e:60:22:d4:8a:34:09:77:14:60:f2:77:b4:
61:09:e3:d0:bc:3d:85:3f:a3:02:4c:64:db:46:0a:b9:a4:33:
31:ee:ad:2f:bc:9c:4a:db:9e:dd:63:6b:a1:1b:35:03:9a:42:
04:b5:2e:1c:6b:00:d0:0c:a3:9a:26:14:ef:73:0f:67:07:fc:
66:5d:f2:23:9a:c5:57:c3:a6:92:a4:47:1f:86:a2:e7:bb:4a:
20:b4:75:00:f3:21:e1:8d:ed:d5:20:d5:0c:bb:30:aa:9b:cb:
f0:be:bb:33:97:9e:97:47:e7:3e:b8:fc:dd:49:d0:32:9e:f6:
c7:79:8f:d8:41:4c:7b:55:ac:c8:92:99:6a:48:c5:d9:92:48:
b5:d3:ad:c6:54:6f:15:2b:ac:b6:a7:9e:56:95:9f:50:5d:bf:
2b:a3:87:54:62:43:29:79:9a:94:5c:04:1b:7f:54:2b:6b:0a:
94:3d:fe:a5:e3:0e:37:8f:a6:4b:2d:51:6d:8f:03:93:b7:7b:
e9:5c:b4:70:9e:dc:c8:ec:82:43:df:30:15:ce:c2:68:2a:6f:
c4:73:85:ff:90:6a:fb:4a:51:c2:76:a0:27:ee:9c:be:64:0e:
85:f7:3c:95:43:3a:f6:24:c1:2a:ed:23:8e:dd:32:b2:77:e5:
4d:40:16:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:02:20 2025 by rpki-client