Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/f5jX6hGAgMMXqqo7MDrJmqySseI.roa
File: f5jX6hGAgMMXqqo7MDrJmqySseI.roa (raw, json)
Hash identifier: Su0/deY46krGoPCQ/ZS0pc/Zy7nB80CVriQ045xzRL0=
Subject key identifier: 7F:98:D7:EA:11:80:80:C3:17:AA:AA:3B:30:3A:C9:9A:AC:92:B1:E2
Certificate issuer: /CN=06e4bbdab896e66113f351b4d9c82df50e66a712
Certificate serial: 019731E9885A730AFA491146B00A10548A71
Authority key identifier: 06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/f5jX6hGAgMMXqqo7MDrJmqySseI.roa
Signing time: Mon 02 Jun 2025 18:31:17 +0000
ROA not before: Mon 02 Jun 2025 18:31:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15497
IP address blocks: 31.28.160.0/22 maxlen: 22
31.28.164.0/22 maxlen: 22
31.28.169.0/24 maxlen: 24
31.28.172.0/22 maxlen: 22
31.28.176.0/22 maxlen: 22
31.28.180.0/22 maxlen: 22
31.28.184.0/22 maxlen: 22
31.28.184.0/24 maxlen: 24
31.28.188.0/24 maxlen: 24
31.28.190.0/24 maxlen: 24
31.28.191.0/24 maxlen: 24
62.149.2.0/24 maxlen: 24
62.149.10.0/24 maxlen: 24
62.149.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Jun 2025 04:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:31:e9:88:5a:73:0a:fa:49:11:46:b0:0a:10:54:8a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06e4bbdab896e66113f351b4d9c82df50e66a712
Validity
Not Before: Jun 2 18:31:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f98d7ea118080c317aaaa3b303ac99aac92b1e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:94:db:43:b9:05:55:10:a6:9a:85:a1:46:05:
a1:90:7d:c6:1b:d7:a6:01:fb:fd:c3:33:af:4d:1a:
37:1d:4e:66:a4:75:ce:b8:0a:c2:90:45:24:3a:8b:
80:a0:bc:f8:46:6a:20:56:29:c7:6b:61:10:b5:a5:
9b:94:31:81:28:6e:b5:f4:88:ad:24:38:40:ee:c7:
ed:4d:ee:b8:a8:7a:fb:70:50:bd:03:e5:8f:66:4b:
dd:8c:f6:ef:2b:89:42:43:89:56:6b:7e:e2:6f:08:
7d:57:d1:57:16:86:d5:62:74:67:4d:fb:73:2f:08:
d2:78:de:01:68:39:28:18:58:7f:7d:03:a3:1b:af:
74:de:e0:b0:10:82:2b:23:f2:be:94:2d:65:bb:0f:
e8:bf:a0:7b:ba:90:df:38:e9:8e:44:75:b7:6a:30:
6a:fe:da:f2:7f:0a:57:b0:06:9a:12:a2:fa:2a:8a:
a1:26:35:f0:ab:2a:de:d8:f0:5f:80:fc:8c:00:34:
1f:df:69:0e:7e:43:a9:bd:70:d5:0b:35:eb:05:4c:
bf:db:39:1e:d3:d7:f3:47:98:34:9d:09:e2:f2:94:
62:32:9d:53:2c:1c:bd:73:50:99:97:de:d9:ba:9c:
53:d0:98:38:92:6f:26:e6:e9:7e:4d:0c:3f:63:17:
11:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:98:D7:EA:11:80:80:C3:17:AA:AA:3B:30:3A:C9:9A:AC:92:B1:E2
X509v3 Authority Key Identifier:
keyid:06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/f5jX6hGAgMMXqqo7MDrJmqySseI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.28.160.0/21
31.28.169.0/24
31.28.172.0-31.28.188.255
31.28.190.0/23
62.149.2.0/24
62.149.10.0/24
62.149.31.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:ad:b2:ad:ae:fa:81:95:4a:f5:6b:45:70:68:08:44:46:94:
2c:02:88:97:ae:9e:13:f4:bf:c7:65:c4:6e:bd:e8:6a:a8:46:
a4:5a:7f:eb:ad:25:b3:64:45:14:1a:05:46:34:c8:66:e8:4e:
e3:a5:6a:5c:17:4b:e3:d2:c9:64:45:3d:b1:d7:08:a2:57:63:
61:a6:55:bf:d6:e7:49:25:27:97:2c:dc:ea:5d:05:57:20:48:
48:cc:c4:88:39:70:07:97:a7:c7:38:90:35:49:a2:52:54:33:
19:ff:b6:3d:6a:24:5d:7f:96:f5:d1:ab:81:f4:7b:53:81:7d:
ac:1e:26:af:b2:2e:16:9b:d1:4c:68:6e:07:c1:23:c8:ac:b2:
9e:54:c1:08:f5:e7:bc:d2:0c:d8:1f:98:b6:08:17:89:d3:72:
9a:ae:02:fa:d0:9e:6b:0c:65:26:98:35:20:fa:8e:c6:47:e7:
d8:58:4b:0a:f3:27:61:5e:08:dc:ca:b2:23:fa:fd:fe:d9:49:
7d:51:da:a5:61:d8:dd:06:88:e6:a1:7f:7a:25:74:b1:f1:1e:
b9:a6:82:f4:33:b8:39:87:ea:5b:6a:10:88:83:5d:6e:8c:47:
ea:83:70:1f:bd:82:60:a3:5a:25:cd:7e:2f:ad:36:6b:45:c1:
2b:a0:c5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:08:22 2025 by rpki-client