Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uRtnEAl56IfHRKaQhfhCXFjzV4c.roa
File: uRtnEAl56IfHRKaQhfhCXFjzV4c.roa (raw, json)
Hash identifier: MKxWIu0r/JYMfQ0uoB30/Q3emoXoCvVysGBBgxMYpII=
Subject key identifier: B9:1B:67:10:09:79:E8:87:C7:44:A6:90:85:F8:42:5C:58:F3:57:87
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019A4A9F45F21BE0357F8EC51E32FAAB58CB
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uRtnEAl56IfHRKaQhfhCXFjzV4c.roa
Signing time: Mon 03 Nov 2025 16:49:03 +0000
ROA not before: Mon 03 Nov 2025 16:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 31.56.66.0/24 maxlen: 24
31.56.220.0/24 maxlen: 24
31.57.35.0/24 maxlen: 24
31.57.100.0/24 maxlen: 24
31.57.120.0/24 maxlen: 24
31.57.170.0/24 maxlen: 24
31.57.228.0/24 maxlen: 24
31.57.239.0/24 maxlen: 24
31.59.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Nov 2025 06:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4a:9f:45:f2:1b:e0:35:7f:8e:c5:1e:32:fa:ab:58:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 3 16:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b91b67100979e887c744a69085f8425c58f35787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6a:8c:04:58:ce:c3:9f:09:5e:e1:c2:02:90:
b1:92:12:f7:de:42:70:c0:8d:8b:9e:d5:6e:1c:a7:
06:15:22:72:d6:b0:b8:c3:e8:1e:92:f8:2d:c6:56:
0d:0d:f5:40:4a:48:32:cd:a8:e9:fc:9b:58:d4:78:
ae:f4:cc:7f:54:f0:17:02:07:f6:ac:e0:90:04:fe:
fd:ed:8b:46:77:0b:15:ec:ca:e0:3b:2a:6b:9d:21:
63:17:c9:f0:88:68:07:59:7c:e1:40:65:ce:f3:aa:
ac:16:32:19:dd:76:5d:56:c6:be:88:af:2d:e0:8a:
35:5e:ed:84:b0:3b:ec:96:3e:ea:fb:72:b2:95:d0:
93:1d:68:70:e4:83:41:79:ee:f7:22:74:d9:97:82:
fc:96:c7:9e:13:89:da:b3:38:e3:95:3f:59:e3:94:
c9:c6:9f:49:85:79:4f:a0:29:45:67:78:77:5f:73:
a8:d9:b6:af:55:07:b3:bd:40:f9:8e:80:87:5c:c2:
23:fb:58:a1:a3:4f:a3:0a:ad:b4:aa:89:28:ea:12:
50:d3:32:85:2b:1f:e5:3f:7c:9a:0d:35:eb:d4:d1:
05:d3:0f:17:47:61:a3:69:02:6b:ce:90:45:76:f6:
79:3d:7c:59:7d:08:9f:b3:80:1b:b6:27:4d:f8:c7:
db:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1B:67:10:09:79:E8:87:C7:44:A6:90:85:F8:42:5C:58:F3:57:87
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uRtnEAl56IfHRKaQhfhCXFjzV4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.66.0/24
31.56.220.0/24
31.57.35.0/24
31.57.100.0/24
31.57.120.0/24
31.57.170.0/24
31.57.228.0/24
31.57.239.0/24
31.59.116.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:74:bb:67:3a:fa:1b:45:bb:d6:d3:1f:35:9d:12:6d:bc:38:
91:ed:61:df:58:47:f0:c0:4d:4e:b5:0c:a8:75:db:d6:b7:0d:
5d:da:a3:c2:e9:4c:84:4f:e7:1a:d6:d9:13:54:9e:e9:e8:2d:
25:d0:3e:fd:ef:b8:54:4e:83:f5:5e:32:b1:e0:24:7f:96:55:
a1:d4:d3:cc:1f:72:51:e9:13:61:e6:6c:a4:0c:ad:bb:6c:50:
58:bd:3f:80:37:94:8c:2b:f9:c6:fa:ed:f4:63:1d:71:83:ad:
85:8d:30:73:78:b9:09:03:8d:ff:84:7d:fe:f5:12:b1:ab:ea:
51:5d:7c:8c:b2:67:15:e4:c3:e8:e6:cc:bc:c6:b0:07:78:9a:
54:e8:de:6b:80:26:c5:24:04:07:f7:ee:3e:9a:fa:45:89:72:
bf:8d:97:4e:1e:81:30:49:e8:2c:e3:88:e5:fe:bd:ea:1b:0f:
ab:92:1b:67:21:c2:07:88:d3:1e:2f:95:c4:d1:de:97:19:40:
82:34:2d:66:eb:82:3b:29:18:2f:94:c0:ee:d4:3a:a4:10:22:
1e:b5:cc:90:9f:41:37:17:32:8d:06:cf:5b:ca:ac:ad:75:dc:
a6:93:0e:9b:dd:6c:d4:64:32:b9:c3:ac:3b:1e:4f:9d:3c:de:
ed:c3:de:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:41:18 2025 by rpki-client