Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/3iSRQVO78YcuEWmDLS_kKoguiF0.roa
File: 3iSRQVO78YcuEWmDLS_kKoguiF0.roa (raw, json)
Hash identifier: zSHhAnQSli+kpLKEJ83cGiQQhd0sy4D9LKnbe4jcaPo=
Subject key identifier: DE:24:91:41:53:BB:F1:87:2E:11:69:83:2D:2F:E4:2A:88:2E:88:5D
Certificate issuer: /CN=06e4bbdab896e66113f351b4d9c82df50e66a712
Certificate serial: 019733F62166BE52253738468162F05829DC
Authority key identifier: 06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/3iSRQVO78YcuEWmDLS_kKoguiF0.roa
Signing time: Tue 03 Jun 2025 04:04:17 +0000
ROA not before: Tue 03 Jun 2025 04:04:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15497
IP address blocks: 31.28.160.0/22 maxlen: 22
31.28.164.0/22 maxlen: 22
31.28.168.0/22 maxlen: 22
31.28.169.0/24 maxlen: 24
31.28.172.0/22 maxlen: 22
31.28.176.0/22 maxlen: 22
31.28.180.0/22 maxlen: 22
31.28.184.0/22 maxlen: 22
31.28.184.0/24 maxlen: 24
31.28.188.0/24 maxlen: 24
31.28.190.0/24 maxlen: 24
31.28.191.0/24 maxlen: 24
62.149.2.0/24 maxlen: 24
62.149.10.0/24 maxlen: 24
62.149.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Jun 2025 04:17:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:33:f6:21:66:be:52:25:37:38:46:81:62:f0:58:29:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06e4bbdab896e66113f351b4d9c82df50e66a712
Validity
Not Before: Jun 3 04:04:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de24914153bbf1872e1169832d2fe42a882e885d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5e:d5:86:ef:0b:7f:ef:1d:d4:1f:dc:d2:40:
56:77:7b:50:13:09:bf:a6:07:f9:33:f2:89:97:74:
87:22:e8:be:20:aa:02:07:aa:10:87:4b:bf:28:7c:
bc:39:8b:52:72:1a:f9:e2:8d:60:5d:53:22:7d:95:
d0:9b:c0:26:a3:ec:98:b5:a5:ae:56:3c:72:6f:40:
fc:61:6b:16:a1:d4:fe:f3:ac:f5:73:59:94:70:3c:
46:5e:ef:f4:af:7c:e9:1e:93:04:d8:8d:3f:0c:f1:
ff:ab:34:b6:ce:9f:f6:89:7d:f7:cb:d7:09:0a:15:
f4:66:11:2b:14:8d:8e:25:93:75:7f:0c:a0:06:9e:
24:94:4d:aa:87:41:ba:c9:7d:ec:d4:9c:28:e8:fc:
91:67:c9:ac:61:d0:63:fe:b2:fa:10:0b:e9:3b:55:
44:63:24:0f:e4:76:93:76:91:05:d1:8f:fc:a6:ff:
38:b2:ad:62:5c:ad:97:cb:ce:87:ba:25:b2:58:7d:
2c:2c:50:e0:0f:c3:07:dc:1f:05:d5:61:08:15:6f:
b4:c3:d5:57:fd:dd:91:5a:f3:db:cd:f2:13:43:52:
a3:87:94:73:98:9c:29:2b:22:37:b6:df:3d:4d:25:
dc:9d:76:3c:fe:a8:98:d3:b3:48:b6:b2:7c:03:b6:
1e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:24:91:41:53:BB:F1:87:2E:11:69:83:2D:2F:E4:2A:88:2E:88:5D
X509v3 Authority Key Identifier:
keyid:06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/3iSRQVO78YcuEWmDLS_kKoguiF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.28.160.0-31.28.188.255
31.28.190.0/23
62.149.2.0/24
62.149.10.0/24
62.149.31.0/24
Signature Algorithm: sha256WithRSAEncryption
79:4d:5f:eb:84:11:bd:42:b3:25:c9:46:13:5e:1f:47:08:1b:
70:fe:6f:16:28:e6:1f:50:5a:f3:34:6b:72:20:9d:d2:01:bb:
42:a5:d4:51:1e:5e:06:21:c4:58:7e:99:ee:70:80:e0:f1:41:
82:b3:97:60:58:63:82:1b:93:4e:ec:5c:e7:91:f1:c7:cf:1d:
1a:12:ad:e0:6f:d8:53:3d:c9:c8:99:01:25:fb:7c:b1:1f:fe:
b3:3d:c6:0e:05:d4:0f:1b:a3:30:9e:7e:bc:8c:61:16:36:52:
c0:6a:d8:04:aa:88:72:79:b0:f9:3b:0e:20:45:18:c2:d0:d6:
b3:76:59:15:b3:95:7e:cc:99:e6:c7:47:90:55:d8:1c:16:44:
ed:c6:77:5f:ba:f5:0c:6f:f1:9c:2b:a2:d3:db:b9:69:29:00:
f1:8f:f1:8d:a4:92:e9:fa:22:ab:b8:b4:96:5d:e4:7a:6a:fe:
2b:a7:ae:3d:19:29:46:14:09:78:29:a9:9a:cb:90:55:66:08:
94:91:31:a2:7d:e8:1a:f7:39:23:d1:a6:ee:62:40:c5:27:ff:
84:5e:27:dd:e1:66:83:1d:85:56:d2:55:d4:1c:4b:d9:ef:b0:
7c:df:38:fe:8f:71:80:7d:12:7f:9d:54:41:d0:23:27:5a:9d:
5f:c6:3e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 09:50:52 2025 by rpki-client