Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/7QG29H6CLmEV1-76Vepir8HRwaE.roa
File: 7QG29H6CLmEV1-76Vepir8HRwaE.roa (raw, json)
Hash identifier: q4ykLCVp3M+QNaLe2FNl5rhF/A5TtsH0LvrCfWF4N/o=
Subject key identifier: ED:01:B6:F4:7E:82:2E:61:15:D7:EE:FA:55:EA:62:AF:C1:D1:C1:A1
Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Certificate serial: 0195DEFCF62249138B73E674A9A7B8CE0FD6
Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/7QG29H6CLmEV1-76Vepir8HRwaE.roa
Signing time: Fri 28 Mar 2025 23:01:14 +0000
ROA not before: Fri 28 Mar 2025 23:01:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48910
IP address blocks: 31.186.226.0/23 maxlen: 23
31.186.250.0/23 maxlen: 24
95.172.66.0/23 maxlen: 24
95.172.68.0/22 maxlen: 22
95.172.80.0/23 maxlen: 23
2a02:b50:8000::/34 maxlen: 48
Validation: Failed, certificate revoked on Sat 29 Mar 2025 00:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:de:fc:f6:22:49:13:8b:73:e6:74:a9:a7:b8:ce:0f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Validity
Not Before: Mar 28 23:01:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed01b6f47e822e6115d7eefa55ea62afc1d1c1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:16:01:d2:ef:e4:b5:d8:a4:a3:c7:5d:cf:13:
dc:75:09:b3:ca:94:cb:c6:ca:a9:21:9e:c4:a1:77:
86:fe:c7:38:b5:06:7b:c2:9c:a5:4e:4b:66:88:27:
71:43:98:d6:9a:3b:bb:67:5d:97:d8:6b:dd:71:da:
61:3a:dd:0d:f6:d1:5b:8b:8c:1b:d6:d4:1c:41:d6:
19:56:1f:fa:56:b6:ed:a0:96:c9:8c:06:26:00:c4:
e4:8b:4e:85:08:35:c3:09:df:64:fa:2e:5e:32:da:
22:eb:be:92:d4:76:f0:74:92:d8:22:ad:8c:99:c4:
f2:c4:b3:90:2d:da:df:45:38:46:e4:dc:bc:1b:be:
74:df:0f:ab:14:e4:13:00:37:32:00:e0:63:5d:b7:
12:da:16:4c:12:3f:10:1c:6f:a7:55:96:d5:fe:d6:
81:8a:3d:78:bc:57:1a:bd:8f:67:ac:f8:fb:58:97:
c9:50:e8:60:bd:7b:f7:35:06:97:b2:ae:32:4c:09:
23:83:b7:8b:b6:12:4c:73:2b:39:98:57:f9:8b:19:
23:d9:2f:bd:ad:52:5a:9f:3d:a8:c3:0d:3b:3b:0f:
a7:3a:2e:7a:15:e5:3c:6f:60:84:8e:6f:6f:87:53:
66:68:e3:0a:70:f4:f1:5a:75:84:0c:c5:2d:59:f2:
9b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:01:B6:F4:7E:82:2E:61:15:D7:EE:FA:55:EA:62:AF:C1:D1:C1:A1
X509v3 Authority Key Identifier:
keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/7QG29H6CLmEV1-76Vepir8HRwaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.226.0/23
31.186.250.0/23
95.172.66.0-95.172.71.255
95.172.80.0/23
IPv6:
2a02:b50:8000::/34
Signature Algorithm: sha256WithRSAEncryption
05:6f:84:fb:66:91:cc:3f:5d:5d:66:0a:d7:8f:58:75:32:a8:
f5:39:70:0a:47:4c:4a:83:de:ee:e4:43:3a:97:5a:a5:c2:01:
7b:bb:77:88:49:44:4d:5b:38:46:5e:c5:f7:f2:9a:c8:d2:a2:
24:79:d6:a9:87:a8:60:7a:b5:7b:87:af:0d:21:07:90:6f:b2:
7b:bf:c2:3e:db:f4:43:bd:64:28:52:69:45:44:6c:81:27:1d:
f5:9c:b1:06:44:f5:17:37:8a:ee:34:b2:17:86:a7:6e:7f:ed:
74:55:e8:fa:51:57:91:76:d2:43:ae:30:9f:34:32:64:95:44:
c2:2d:7f:19:7c:71:51:72:05:1a:83:d1:f1:60:d2:93:7a:6e:
f0:ea:86:f5:f2:0b:a0:1e:62:82:80:1c:ad:4c:3a:f5:c8:2e:
0d:ea:90:60:36:45:41:b6:fa:8a:07:15:c4:cd:c7:42:5f:10:
0b:39:cc:90:86:69:22:5a:e7:ae:fe:b2:b7:cc:fa:57:0b:65:
80:07:98:e6:87:0d:93:e6:83:c3:c5:b3:15:33:9d:03:df:04:
09:17:3c:8a:0c:a8:6f:15:01:5e:3b:1a:7a:e2:6d:a1:bc:72:
e4:80:d0:c9:19:05:65:56:96:9e:f2:b9:28:6f:54:7f:7c:a9:
4c:d3:ba:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:27:10 2025 by rpki-client