Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/AoPZKaci6HDNiQmfTwq75WyFGjI.roa
File: AoPZKaci6HDNiQmfTwq75WyFGjI.roa (raw, json)
Hash identifier: M3aaBGVEI0YLZuBhLBfYWBMwKT2agnfGWHxn9GQD2vE=
Subject key identifier: 02:83:D9:29:A7:22:E8:70:CD:89:09:9F:4F:0A:BB:E5:6C:85:1A:32
Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Certificate serial: 019423D71C297537E09437483A9D76DF59F9
Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/AoPZKaci6HDNiQmfTwq75WyFGjI.roa
Signing time: Wed 01 Jan 2025 21:48:07 +0000
ROA not before: Wed 01 Jan 2025 21:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48910
IP address blocks: 31.186.226.0/23 maxlen: 23
31.186.250.0/23 maxlen: 24
95.172.66.0/23 maxlen: 24
95.172.68.0/22 maxlen: 22
95.172.80.0/23 maxlen: 23
95.172.92.0/23 maxlen: 24
2a02:b50:8000::/34 maxlen: 48
Validation: Failed, certificate revoked on Fri 28 Mar 2025 23:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:1c:29:75:37:e0:94:37:48:3a:9d:76:df:59:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Validity
Not Before: Jan 1 21:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0283d929a722e870cd89099f4f0abbe56c851a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:81:b7:a7:52:66:c2:a1:15:18:73:00:e5:5c:
e6:19:4c:08:8a:90:f1:73:27:f9:8e:a9:a3:ce:9e:
9f:e1:27:cc:64:82:66:b1:11:ee:6b:1e:5b:2d:69:
07:3e:2d:52:21:47:98:c5:f4:67:72:93:7a:da:1b:
62:51:57:3b:e9:53:60:97:d0:3f:3a:95:94:f9:75:
be:d4:d1:66:4b:84:82:e3:c2:e2:ef:ba:e8:c7:44:
11:ab:89:dc:07:7e:07:1b:66:6d:c0:4a:d7:a9:a2:
e3:58:51:33:b7:80:c9:ff:e4:50:39:4a:66:a9:0c:
56:8a:65:63:bb:94:ee:9c:e2:07:d0:18:f4:48:41:
b1:02:0c:4f:33:3a:fe:9c:e0:37:fd:36:74:d4:d0:
60:05:ee:30:4b:6d:aa:90:c1:27:aa:ad:d0:5d:69:
ff:26:9c:43:3c:9c:0b:2b:3f:34:3a:f2:f1:a9:1f:
fa:b7:8c:f7:7c:51:04:f7:c6:a3:e6:0b:5e:1a:e1:
57:b1:fb:7f:ba:3e:10:59:c1:0c:8a:dd:0b:d9:0f:
db:ee:2c:81:3a:0b:7e:37:f2:ca:0a:48:16:7f:a5:
3a:fd:46:21:07:44:53:78:3b:31:ed:d5:e2:32:5a:
a6:54:22:ef:90:0b:2e:89:a9:c0:2b:f8:91:a2:8e:
c5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:83:D9:29:A7:22:E8:70:CD:89:09:9F:4F:0A:BB:E5:6C:85:1A:32
X509v3 Authority Key Identifier:
keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/AoPZKaci6HDNiQmfTwq75WyFGjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.226.0/23
31.186.250.0/23
95.172.66.0-95.172.71.255
95.172.80.0/23
95.172.92.0/23
IPv6:
2a02:b50:8000::/34
Signature Algorithm: sha256WithRSAEncryption
07:c5:c4:3d:bb:a1:6f:b2:31:ff:02:1b:63:09:58:1d:f3:15:
36:b2:70:9d:51:e8:0e:7c:3a:54:9b:ff:99:41:3f:ce:5c:31:
35:d2:62:4e:a8:69:96:32:1f:a7:f8:35:77:6f:2f:8d:81:bf:
ca:13:74:c9:b9:1a:34:7a:df:b7:e4:dd:e0:8d:81:c9:ac:75:
24:7c:14:51:6e:98:f9:cb:f6:88:10:d9:d5:09:e5:40:20:1d:
f4:a9:02:f6:63:33:ca:73:27:28:05:69:44:d2:1f:b9:33:02:
a4:3c:33:54:32:d1:3e:25:de:d6:be:c6:cf:bc:94:76:fa:0a:
27:15:b7:d4:9e:d3:85:1b:26:65:84:61:e4:16:c0:6d:1c:ce:
7f:4a:a4:34:92:20:ec:84:d0:1c:6d:bf:f2:28:6b:cf:48:74:
34:6b:a3:5f:80:ad:d8:c1:d0:d5:25:8d:75:8a:d6:c2:d7:1f:
e9:c9:d0:8b:6a:3b:28:25:e0:19:18:c1:a3:97:eb:e5:86:25:
cd:dd:57:57:2e:75:4f:4b:7f:99:85:9b:ae:c4:a7:5b:64:cd:
8c:a4:72:54:e1:f1:e1:35:81:80:b0:1b:35:4a:c2:09:aa:40:
f6:44:83:2e:06:74:75:d1:63:ba:4e:57:43:01:10:0f:b7:9a:
c3:e5:b5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:59:47 2025 by rpki-client