Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/1-7OBcN7vY6ry55zKd8SiuX_LoWs.roa
File: 1-7OBcN7vY6ry55zKd8SiuX_LoWs.roa (raw, json)
Hash identifier: JvQiaY+Z5NN72wyBk0VKTPptJZacP+5Iw4VJN8iFRLY=
Subject key identifier: FB:B3:81:70:DE:EF:63:AA:F2:E7:9C:CA:77:C4:A2:B9:7F:CB:A1:6B
Certificate issuer: /CN=06e4bbdab896e66113f351b4d9c82df50e66a712
Certificate serial: 019736F0C3E8DDFAC4B59A6991C2273E2C92
Authority key identifier: 06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/1-7OBcN7vY6ry55zKd8SiuX_LoWs.roa
Signing time: Tue 03 Jun 2025 17:57:17 +0000
ROA not before: Tue 03 Jun 2025 17:57:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15497
IP address blocks: 31.28.160.0/22 maxlen: 22
31.28.164.0/22 maxlen: 22
31.28.168.0/22 maxlen: 24
31.28.169.0/24 maxlen: 24
31.28.172.0/22 maxlen: 22
31.28.176.0/22 maxlen: 22
31.28.180.0/22 maxlen: 22
31.28.184.0/22 maxlen: 22
31.28.184.0/24 maxlen: 24
31.28.188.0/22 maxlen: 22
31.28.188.0/24 maxlen: 24
31.28.190.0/24 maxlen: 24
31.28.191.0/24 maxlen: 24
62.149.0.0/19 maxlen: 24
62.149.2.0/24 maxlen: 24
62.149.10.0/24 maxlen: 24
62.149.15.0/24 maxlen: 24
62.149.31.0/24 maxlen: 24
2a03:6300::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 03 Jun 2025 18:31:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:36:f0:c3:e8:dd:fa:c4:b5:9a:69:91:c2:27:3e:2c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06e4bbdab896e66113f351b4d9c82df50e66a712
Validity
Not Before: Jun 3 17:57:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbb38170deef63aaf2e79cca77c4a2b97fcba16b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cc:e9:e2:13:57:d5:0b:92:d5:1a:26:c7:be:
2d:c3:6d:03:cb:0b:82:26:de:87:4f:57:f9:09:03:
8b:c5:01:cc:fd:79:f6:71:95:b7:02:75:2c:f7:8b:
6d:d9:c8:45:21:b9:75:82:64:41:6b:fb:32:d9:7d:
8c:59:4b:bd:17:74:41:4b:09:ad:a6:5a:82:a6:f0:
fe:52:29:3f:48:db:41:03:21:6a:a6:f2:22:93:44:
39:6c:d8:f1:db:54:69:d7:46:24:37:9b:7d:a7:2a:
87:45:9e:83:2f:29:e9:90:5b:55:1b:3f:b0:eb:82:
48:df:2c:b0:a9:7c:8e:7d:b1:97:b7:3b:af:fa:41:
70:b4:e6:d8:a3:be:ca:3a:2f:ad:0d:f2:f1:59:d3:
20:1a:ae:38:96:a0:39:a3:fa:6f:d2:12:ee:ac:16:
25:c8:64:12:54:90:43:ef:7d:ec:04:41:3b:78:29:
10:7a:82:c9:65:a6:69:67:ff:2a:df:cc:fa:d0:38:
c9:0c:90:dc:b7:b5:de:cd:2c:16:85:0c:77:08:6b:
a8:75:73:94:db:4c:2b:19:40:c3:a6:5c:b0:d8:15:
50:10:ed:c9:32:7a:1b:27:52:24:73:fe:75:d0:79:
ea:10:28:78:02:9c:04:59:63:4b:6f:ed:16:35:72:
cc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B3:81:70:DE:EF:63:AA:F2:E7:9C:CA:77:C4:A2:B9:7F:CB:A1:6B
X509v3 Authority Key Identifier:
keyid:06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/1-7OBcN7vY6ry55zKd8SiuX_LoWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.28.160.0/19
62.149.0.0/19
IPv6:
2a03:6300::/32
Signature Algorithm: sha256WithRSAEncryption
23:9e:3e:dc:9a:38:97:96:8f:07:77:05:6b:69:53:ca:6c:1f:
ff:cc:4a:1d:60:a9:dd:9d:85:a6:48:dd:40:e6:83:4f:6b:9c:
fb:5c:0f:f2:9d:21:70:a0:a4:76:ed:a0:e5:6d:22:e3:36:64:
aa:0c:65:3b:dc:5f:46:26:3d:b3:cb:ec:5f:ac:de:47:0b:f4:
f9:86:02:0f:8e:d9:fe:63:e1:51:94:a2:0f:dd:c8:70:a9:e6:
fc:b5:f0:f0:6d:f9:11:c4:19:22:a9:e1:62:c6:c6:3f:ed:9a:
db:e0:e0:73:36:37:23:de:47:ea:3c:4d:12:74:89:cd:d4:f4:
4d:69:0a:0c:ac:4a:27:e4:f9:c8:aa:15:59:ec:6f:42:ce:00:
7b:fe:cb:af:3d:8a:96:8b:44:60:0c:95:5b:2e:45:cf:6f:ae:
72:24:96:f3:a7:95:24:f7:a0:b9:3f:cf:f9:86:81:8d:b7:3b:
e1:59:18:1f:39:e4:76:4b:4d:94:b0:c6:21:fa:9e:13:f7:f0:
7b:f4:43:98:db:00:d1:24:58:55:aa:db:18:31:a1:ac:9e:ad:
49:21:97:5c:b3:d2:ae:76:9b:e7:f9:d3:17:1f:57:b3:7b:5a:
d7:76:e9:a1:25:9a:f1:1c:95:93:02:9e:ba:b4:3b:cb:49:67:
28:73:90:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:09:50 2025 by rpki-client