Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/K6vd0ZvoifYAKGVJpuj7SSfojXw.roa
File: K6vd0ZvoifYAKGVJpuj7SSfojXw.roa (raw, json)
Hash identifier: 5yj2DToJ4rD3RVLLyjVajTNLKDwqH5RN+Gj9h05r3YY=
Subject key identifier: 2B:AB:DD:D1:9B:E8:89:F6:00:28:65:49:A6:E8:FB:49:27:E8:8D:7C
Certificate issuer: /CN=668e9b2eefb205342382b6072a903f9d9837071a
Certificate serial: 01982C0C618EFC2B14A918F96FB54C40A3F0
Authority key identifier: 66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/K6vd0ZvoifYAKGVJpuj7SSfojXw.roa
Signing time: Mon 21 Jul 2025 08:14:25 +0000
ROA not before: Mon 21 Jul 2025 08:14:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44056
IP address blocks: 31.135.224.0/20 maxlen: 20
31.135.226.0/23 maxlen: 23
31.135.228.0/22 maxlen: 22
31.135.232.0/22 maxlen: 22
31.135.236.0/23 maxlen: 23
46.148.128.0/20 maxlen: 20
46.148.128.0/22 maxlen: 22
46.148.132.0/22 maxlen: 22
46.148.143.0/24 maxlen: 24
83.97.104.0/21 maxlen: 21
91.195.130.0/23 maxlen: 23
91.230.146.0/24 maxlen: 24
91.237.186.0/23 maxlen: 23
91.237.186.0/24 maxlen: 24
91.237.187.0/24 maxlen: 24
109.196.64.0/20 maxlen: 24
109.196.64.0/22 maxlen: 22
109.196.68.0/22 maxlen: 22
176.125.192.0/19 maxlen: 19
195.2.238.0/23 maxlen: 23
2a13:2940::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 21 Jul 2025 08:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2c:0c:61:8e:fc:2b:14:a9:18:f9:6f:b5:4c:40:a3:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=668e9b2eefb205342382b6072a903f9d9837071a
Validity
Not Before: Jul 21 08:14:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2babddd19be889f600286549a6e8fb4927e88d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:df:d6:d9:4f:61:00:97:4c:8a:52:95:aa:ae:
ca:69:44:21:91:cf:3c:8d:71:12:d4:83:fe:17:f3:
5a:4a:88:4d:3b:4a:6e:1d:78:ad:a4:de:96:1f:fc:
8e:aa:ad:44:dc:55:98:13:90:a3:e1:6d:58:49:cb:
e4:82:71:59:2f:21:21:4b:d6:4b:32:bf:bf:7b:95:
2d:7d:05:47:00:72:07:02:a8:a0:85:1d:a4:8d:33:
e5:bc:ec:75:0b:7c:75:58:0f:29:66:f0:85:d1:04:
b6:2a:ce:1c:0b:4f:ad:48:96:e7:72:c4:a3:7a:2b:
50:7d:97:be:78:74:02:98:a2:12:9d:4f:ad:48:9a:
75:d0:56:df:d2:37:43:4c:e7:04:f7:fc:52:65:17:
f6:62:c0:38:07:99:01:9a:1d:d9:a4:81:7e:75:7a:
ba:7d:14:20:e6:cb:e2:9f:e5:08:ac:87:6a:b5:94:
07:96:10:21:bf:3e:bf:9d:da:d2:4e:f5:65:e8:a2:
83:ef:1f:dd:1c:ec:61:3f:28:19:aa:d9:e5:77:ce:
29:4a:99:2e:33:4a:1b:88:57:62:f7:4a:d2:dd:ff:
6d:b3:8a:bf:6b:d4:ca:c5:f3:51:4a:7d:60:da:f9:
27:66:cf:b7:45:0b:09:27:3b:ef:e0:ca:cb:e2:a5:
46:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:AB:DD:D1:9B:E8:89:F6:00:28:65:49:A6:E8:FB:49:27:E8:8D:7C
X509v3 Authority Key Identifier:
keyid:66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/K6vd0ZvoifYAKGVJpuj7SSfojXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.135.224.0/20
46.148.128.0/20
83.97.104.0/21
91.195.130.0/23
91.230.146.0/24
91.237.186.0/23
109.196.64.0/20
176.125.192.0/19
195.2.238.0/23
IPv6:
2a13:2940::/32
Signature Algorithm: sha256WithRSAEncryption
10:67:5a:8a:81:64:95:e9:79:d4:a4:d1:ce:3e:e6:43:be:27:
a9:2b:ec:f6:a8:09:b5:bb:e3:92:16:08:89:eb:b0:2b:82:e4:
0d:e7:ae:fc:b6:ec:e4:e8:5f:ac:a0:56:80:8c:d6:02:91:9b:
9d:60:4b:48:f4:aa:d5:59:1b:ec:57:e8:1f:ca:cf:c5:75:39:
09:24:d1:e2:7a:36:09:9a:bf:6d:3b:c2:b5:ad:95:72:f8:49:
ea:25:7f:86:2f:3e:a2:d2:ac:61:71:87:ba:ce:cb:10:10:bd:
d7:92:4c:28:4b:cf:57:39:6d:b8:9c:de:95:90:5c:02:da:a7:
bf:3b:40:49:43:0c:c1:30:a6:77:f2:ff:ed:b7:73:35:f4:f8:
67:2b:c4:57:5d:66:cf:f9:36:2b:59:0b:bd:8b:15:10:99:54:
be:ef:76:e1:51:ea:b8:06:e5:f1:4b:e3:6b:40:f3:27:18:59:
c9:8c:45:30:cd:8d:b9:61:bf:95:18:2c:90:27:36:e2:c3:c9:
bb:1e:0c:d0:86:57:c9:95:9a:98:41:52:0d:a9:56:cc:ff:f0:
fe:68:2b:cc:17:2f:43:fa:81:04:67:30:d7:20:54:09:6b:76:
6b:33:ae:ba:b7:53:67:24:a5:e7:11:ef:47:23:1e:ff:e1:62:
79:89:f0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:04:13 2025 by rpki-client