Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/n-gU-ls1UNgZoB58-kNacHb5Rcw.roa
File: n-gU-ls1UNgZoB58-kNacHb5Rcw.roa (raw, json)
Hash identifier: HGKOJCl3v/+rKEkhNX2AqhF2XpX+ldhO2GeP2VvVA8E=
Subject key identifier: 9F:E8:14:FA:5B:35:50:D8:19:A0:1E:7C:FA:43:5A:70:76:F9:45:CC
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019759E6F71E7C8B101CBDB6F06AB1623A4B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/n-gU-ls1UNgZoB58-kNacHb5Rcw.roa
Signing time: Tue 10 Jun 2025 12:53:18 +0000
ROA not before: Tue 10 Jun 2025 12:53:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213613
IP address blocks: 31.57.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Jun 2025 19:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:e6:f7:1e:7c:8b:10:1c:bd:b6:f0:6a:b1:62:3a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 10 12:53:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9fe814fa5b3550d819a01e7cfa435a7076f945cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c2:6e:9f:98:dc:f1:2a:ca:dc:4c:3e:f3:59:
c0:64:6f:2c:bf:0c:59:92:7e:95:f6:9d:2f:8b:f6:
e1:9a:d2:ca:dd:7f:7a:18:ec:97:e3:89:8c:08:ae:
16:11:82:1a:3e:86:57:07:d9:ec:69:97:88:b1:61:
16:9a:e8:95:7e:4c:db:83:65:67:bc:7d:81:12:f1:
7b:53:fc:96:b9:94:06:0a:56:ef:8c:7f:50:39:09:
5e:fd:27:3d:f8:b8:7f:25:f9:8c:63:70:b9:96:51:
54:3b:52:35:26:ba:ee:55:ce:2d:19:8c:7e:05:4a:
10:c7:44:52:a9:b3:4f:88:9d:a2:3e:4b:a2:e8:0f:
3a:8e:5f:3b:38:67:24:6f:33:dd:e9:6a:5d:95:89:
89:68:7d:67:1a:8d:eb:ae:f4:69:4b:82:66:fd:b8:
e3:20:84:34:74:66:ef:5f:48:30:af:0d:2d:04:49:
47:f8:8c:46:b5:e9:3f:c5:3f:5d:55:3b:67:0a:fe:
72:3e:16:26:62:78:e6:33:b0:d3:11:9d:52:0d:d3:
3d:93:a0:05:5d:89:3c:52:86:7d:09:9b:3f:58:b5:
5f:6d:8e:1c:a4:cd:4d:f3:e6:e0:bf:d2:bd:a3:73:
96:7e:b1:e0:45:77:11:92:5c:bc:54:27:9d:2a:39:
ef:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E8:14:FA:5B:35:50:D8:19:A0:1E:7C:FA:43:5A:70:76:F9:45:CC
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/n-gU-ls1UNgZoB58-kNacHb5Rcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.12.0/24
Signature Algorithm: sha256WithRSAEncryption
59:d5:f2:c1:a7:9d:36:ba:be:f1:1c:09:10:c8:5e:ca:90:ff:
3e:01:b2:b8:2a:9d:ac:a8:b9:7d:90:a7:39:dc:20:d1:42:c0:
53:d3:ba:77:f9:57:66:9a:ae:26:71:c8:60:b0:c8:08:0b:6f:
1b:f4:d2:2c:30:a7:af:fb:2f:fc:5c:92:43:67:c4:1e:44:99:
1d:3e:96:1c:f8:e5:49:d5:d7:85:9b:10:a6:24:de:74:76:6c:
f3:fa:46:0d:e0:68:6a:9b:2f:2f:0c:e2:18:fc:d7:36:16:08:
25:43:74:65:ef:18:c8:73:de:ef:f1:58:db:7c:b7:b4:7b:1a:
73:17:7d:3f:a7:e3:52:a0:11:de:31:ef:b9:c0:f6:7f:5d:d5:
28:ec:f2:b6:66:17:3f:b5:35:57:ce:05:31:99:62:67:5b:6e:
b0:d5:f8:f4:22:30:dc:d3:d9:49:29:ec:16:4a:38:fd:d9:54:
20:bb:e8:f4:36:41:ae:1f:f8:95:75:6c:c5:ea:c4:30:01:c4:
3e:b6:f0:81:ce:68:ac:df:af:5f:6e:9b:af:27:4d:2c:a8:0a:
28:43:e0:58:f3:30:00:89:c3:58:5b:be:17:06:53:cb:2f:5a:
87:75:97:32:fd:9b:e9:78:aa:7d:ad:80:2d:f6:83:13:f1:96:
7c:2b:ac:0e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZdZ5vcefIsQHL228GqxYjpLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNjEwMTI1MzE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZmU4MTRmYTViMzU1MGQ4MTlhMDFlN2NmYTQzNWE3MDc2Zjk0NWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8Jun5jc8SrK3Ew+81nAZG8svwxZ
kn6V9p0vi/bhmtLK3X96GOyX44mMCK4WEYIaPoZXB9nsaZeIsWEWmuiVfkzbg2Vn
vH2BEvF7U/yWuZQGClbvjH9QOQle/Sc9+Lh/JfmMY3C5llFUO1I1JrruVc4tGYx+
BUoQx0RSqbNPiJ2iPkui6A86jl87OGckbzPd6WpdlYmJaH1nGo3rrvRpS4Jm/bjj
IIQ0dGbvX0gwrw0tBElH+IxGtek/xT9dVTtnCv5yPhYmYnjmM7DTEZ1SDdM9k6AF
XYk8UoZ9CZs/WLVfbY4cpM1N8+bgv9K9o3OWfrHgRXcRkly8VCedKjnv+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ/oFPpbNVDYGaAefPpDWnB2+UXMMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvbi1nVS1sczFVTmdab0I1OC1rTmFjSGI1UmN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzkMMA0G
CSqGSIb3DQEBCwUAA4IBAQBZ1fLBp502ur7xHAkQyF7KkP8+AbK4Kp2sqLl9kKc5
3CDRQsBT07p3+Vdmmq4mcchgsMgIC28b9NIsMKev+y/8XJJDZ8QeRJkdPpYc+OVJ
1deFmxCmJN50dmzz+kYN4Ghqmy8vDOIY/Nc2FgglQ3Rl7xjIc97v8VjbfLe0expz
F30/p+NSoBHeMe+5wPZ/XdUo7PK2Zhc/tTVXzgUxmWJnW26w1fj0IjDc09lJKewW
Sjj92VQgu+j0NkGuH/iVdWzF6sQwAcQ+tvCBzmis369fbpuvJ00sqAooQ+BY8zAA
icNYW74XBlPLL1qHdZcy/ZvpeKp9rYAt9oMT8ZZ8K6wO
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:15:59 2025 by rpki-client