Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jopESkTOP3fvQCbY8ERP8XSVJAE.roa
File: jopESkTOP3fvQCbY8ERP8XSVJAE.roa (raw, json)
Hash identifier: Iaq0iIZevff7wRnZDI2LeHdUb5hlpldSbPJUF7fsXvs=
Subject key identifier: 8E:8A:44:4A:44:CE:3F:77:EF:40:26:D8:F0:44:4F:F1:74:95:24:01
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01975961883B7FA633756A9C5F74AFC1C611
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jopESkTOP3fvQCbY8ERP8XSVJAE.roa
Signing time: Tue 10 Jun 2025 10:27:33 +0000
ROA not before: Tue 10 Jun 2025 10:27:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20326
IP address blocks: 31.57.186.0/23 maxlen: 23
31.58.50.0/24 maxlen: 24
31.58.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Jun 2025 17:25:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:61:88:3b:7f:a6:33:75:6a:9c:5f:74:af:c1:c6:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 10 10:27:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e8a444a44ce3f77ef4026d8f0444ff174952401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d0:01:8e:bd:f3:bd:1e:2d:73:4d:7d:3f:b3:
87:46:14:fe:e3:16:f4:95:de:7b:21:16:82:d0:f6:
3b:cf:70:ed:01:3a:5d:90:ad:b3:ff:25:4e:89:dd:
51:71:15:91:00:2e:92:7c:0c:b1:53:57:de:80:27:
b1:8b:1d:6d:f0:00:ef:31:41:73:d2:e8:8c:b9:6f:
dc:21:19:86:dd:8d:20:e8:11:12:5d:44:19:d6:a9:
ff:ca:47:b8:44:b3:48:85:5c:60:f3:a6:e4:eb:f1:
1c:66:3e:ed:aa:0e:e4:b0:35:96:d2:ba:11:f0:8b:
c1:93:29:75:ee:b3:a4:af:75:95:d0:9f:cb:06:a3:
84:3a:fd:3d:d5:92:d8:8d:00:ff:ef:82:01:0e:f7:
a4:91:1f:dd:f0:b9:34:46:4a:9a:af:a8:d3:05:0c:
de:57:76:42:15:0d:a0:46:ff:c6:1d:0b:21:ca:3e:
f5:57:b9:90:45:a1:13:c8:13:1b:b2:cc:3b:89:8e:
68:27:ae:2f:a5:1b:a2:ca:a5:cb:15:07:5b:bb:59:
c4:c4:30:40:dc:87:e4:9b:b0:06:ef:b4:f2:cc:34:
d0:74:c6:c6:4f:cf:cc:52:41:24:aa:f0:6e:36:bf:
ea:c3:58:2a:62:90:16:fb:e4:d6:7d:f6:7c:52:22:
69:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8A:44:4A:44:CE:3F:77:EF:40:26:D8:F0:44:4F:F1:74:95:24:01
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jopESkTOP3fvQCbY8ERP8XSVJAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.186.0/23
31.58.50.0/24
31.58.56.0/24
Signature Algorithm: sha256WithRSAEncryption
62:99:f1:b0:78:b1:08:21:47:5f:b2:40:e2:d3:16:94:b4:3e:
65:0f:eb:c5:87:56:f8:a7:92:fe:57:65:28:c5:33:b0:42:0e:
c6:c8:74:88:0a:45:d0:ce:e2:84:c7:7f:74:5f:b7:85:6a:28:
b5:13:77:5a:8f:9c:d4:3f:ea:75:20:45:e0:77:d0:f6:b6:8f:
41:1c:b7:d9:73:3b:a6:ed:13:56:01:60:a9:37:dd:e1:60:9e:
5d:40:2e:ef:c3:dc:db:13:4c:af:fb:ea:1e:24:24:03:3c:fd:
02:64:e0:df:11:d9:d3:0c:24:7a:3e:e4:66:3c:8e:58:98:e9:
78:c3:ee:7d:48:72:56:ce:35:88:68:24:b1:b2:a9:c0:db:c7:
57:c6:b2:f5:d6:17:21:0a:15:77:e1:79:f1:98:a6:97:7a:4c:
32:53:27:0f:a8:e1:33:3e:e3:09:f9:a1:a6:52:4b:07:7f:58:
91:84:c1:90:c8:ca:14:67:a2:bb:55:82:8d:f5:00:05:b9:4f:
9b:ca:08:6c:80:43:41:27:67:9d:96:08:99:a5:3d:8c:19:ad:
fb:44:fb:0a:7e:41:43:3c:d7:e5:1a:de:ca:3b:5d:a3:97:a3:
8c:59:22:52:6a:c6:67:95:53:8f:09:36:ae:f4:b8:fc:04:5e:
07:cb:d8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:02:37 2025 by rpki-client