Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/FLHJEVF3CgxrB_n9fZowaZn-WcA.roa
File: FLHJEVF3CgxrB_n9fZowaZn-WcA.roa (raw, json)
Hash identifier: 7iXlR5hUR9r5gNuAklhARuq/ylUD0aYwfAi5NzManx0=
Subject key identifier: 14:B1:C9:11:51:77:0A:0C:6B:07:F9:FD:7D:9A:30:69:99:FE:59:C0
Certificate issuer: /CN=06e4bbdab896e66113f351b4d9c82df50e66a712
Certificate serial: 01973684BB71C2E1315673FDAF077681F8E5
Authority key identifier: 06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/FLHJEVF3CgxrB_n9fZowaZn-WcA.roa
Signing time: Tue 03 Jun 2025 15:59:17 +0000
ROA not before: Tue 03 Jun 2025 15:59:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15497
IP address blocks: 31.28.160.0/22 maxlen: 22
31.28.164.0/22 maxlen: 22
31.28.168.0/22 maxlen: 24
31.28.169.0/24 maxlen: 24
31.28.172.0/22 maxlen: 22
31.28.176.0/22 maxlen: 22
31.28.180.0/22 maxlen: 22
31.28.184.0/22 maxlen: 22
31.28.184.0/24 maxlen: 24
31.28.188.0/22 maxlen: 22
31.28.188.0/24 maxlen: 24
31.28.190.0/24 maxlen: 24
31.28.191.0/24 maxlen: 24
62.149.2.0/24 maxlen: 24
62.149.10.0/24 maxlen: 24
62.149.15.0/24 maxlen: 24
62.149.31.0/24 maxlen: 24
2a03:6300::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 03 Jun 2025 17:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:36:84:bb:71:c2:e1:31:56:73:fd:af:07:76:81:f8:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06e4bbdab896e66113f351b4d9c82df50e66a712
Validity
Not Before: Jun 3 15:59:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14b1c91151770a0c6b07f9fd7d9a306999fe59c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:90:55:fc:3e:aa:15:3f:ce:27:bb:20:89:d9:
3d:68:5f:cc:c2:3e:d5:67:5f:b4:8a:d7:d2:32:f5:
92:71:25:e0:5e:ec:04:75:e3:02:a5:1d:d5:78:9b:
62:d7:ce:05:8a:f4:4b:dc:da:84:73:f9:56:21:92:
5e:29:41:96:d7:f8:5f:ef:62:1a:0d:c0:a4:fa:39:
9b:41:8b:27:9e:67:dc:02:7f:0d:2b:a1:39:52:a3:
b7:bf:4c:0a:4e:5a:fd:60:96:15:3a:5c:44:3b:bb:
83:13:4a:bd:2a:a1:7c:6a:c4:38:57:3a:af:f6:98:
bd:7f:73:88:f0:12:f8:e6:89:ee:08:2d:46:a5:83:
b6:87:3d:82:67:87:8a:b0:ca:ce:b2:51:b0:7f:48:
63:69:b0:0a:3c:21:ea:bf:c6:6f:ed:4e:ae:f0:3f:
15:cd:14:e5:85:90:08:3a:7f:16:28:fd:f6:77:ea:
a1:bd:00:d4:c0:94:b8:71:d1:29:3b:b0:de:60:32:
76:b8:53:37:2b:86:af:f4:81:ba:c2:50:ae:35:f4:
11:93:ab:1a:9f:2d:bf:20:3d:06:0b:70:a0:a3:f3:
5e:92:d8:53:e1:5e:25:f2:71:f1:5a:e1:39:03:e1:
6d:46:a4:1e:b0:94:2c:e4:27:57:55:50:c7:69:18:
f2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B1:C9:11:51:77:0A:0C:6B:07:F9:FD:7D:9A:30:69:99:FE:59:C0
X509v3 Authority Key Identifier:
keyid:06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/FLHJEVF3CgxrB_n9fZowaZn-WcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.28.160.0/19
62.149.2.0/24
62.149.10.0/24
62.149.15.0/24
62.149.31.0/24
IPv6:
2a03:6300::/32
Signature Algorithm: sha256WithRSAEncryption
0b:26:41:41:da:c4:5d:c1:c4:eb:f9:08:ba:44:7e:b7:85:ab:
64:a3:fd:d2:f9:7e:a2:d0:cb:be:0b:ec:fa:9c:93:dc:98:da:
7f:88:8f:fc:1c:f3:78:35:81:63:14:0d:0e:f5:af:4a:07:a9:
aa:e5:7f:33:3b:f6:c3:d8:02:45:60:02:d4:89:c3:cf:9c:e2:
a7:4c:4a:15:4e:2d:51:1a:ae:4c:ca:b2:39:52:fd:87:7b:6f:
a3:b6:0b:d6:53:c6:5e:2a:04:a8:1c:2e:38:ff:78:22:b2:61:
ae:8a:3c:20:2c:51:bf:c9:f9:b3:77:a5:93:ec:84:84:17:15:
27:40:2d:92:3e:b2:1c:4f:48:9e:14:c9:bc:19:8d:e8:cd:9f:
90:84:ad:8a:62:c4:5d:03:cc:44:c7:ef:ad:95:bf:80:87:19:
99:f1:ce:24:86:46:72:15:1d:74:7f:91:e2:fc:66:55:b2:c2:
42:92:4f:27:27:6c:b7:5d:04:e2:e9:bc:59:8f:07:90:3c:fc:
10:85:47:a6:39:48:bb:57:4d:e8:34:ca:40:7d:ea:02:1e:d1:
93:73:9f:1d:51:a0:a6:c6:72:6e:66:5f:e8:c2:6a:1a:9c:f2:
56:38:70:4b:4a:38:cf:8d:3a:c8:7a:78:6b:de:fe:98:2d:1d:
ed:1b:8b:a6
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAZc2hLtxwuExVnP9rwd2gfjlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2ZTRiYmRhYjg5NmU2NjExM2YzNTFiNGQ5YzgyZGY1MGU2
NmE3MTIwHhcNMjUwNjAzMTU1OTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGIxYzkxMTUxNzcwYTBjNmIwN2Y5ZmQ3ZDlhMzA2OTk5ZmU1OWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJBV/D6qFT/OJ7sgidk9aF/Mwj7V
Z1+0itfSMvWScSXgXuwEdeMCpR3VeJti184FivRL3NqEc/lWIZJeKUGW1/hf72Ia
DcCk+jmbQYsnnmfcAn8NK6E5UqO3v0wKTlr9YJYVOlxEO7uDE0q9KqF8asQ4Vzqv
9pi9f3OI8BL45onuCC1GpYO2hz2CZ4eKsMrOslGwf0hjabAKPCHqv8Zv7U6u8D8V
zRTlhZAIOn8WKP32d+qhvQDUwJS4cdEpO7DeYDJ2uFM3K4av9IG6wlCuNfQRk6sa
ny2/ID0GC3Cgo/NekthT4V4l8nHxWuE5A+FtRqQesJQs5CdXVVDHaRjy1QIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFBSxyRFRdwoMawf5/X2aMGmZ/lnAMB8GA1UdIwQY
MBaAFAbku9q4luZhE/NRtNnILfUOZqcSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnVTNzJyaVc1bUVUODFHMDJjZ3Q5UTVtcHhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9kOTk5NDctMjI5OC00MjJmLTlkYTAt
ZmUwZDI4YjY4Y2Q1LzEvRkxISkVWRjNDZ3hyQl9uOWZab3dhWm4tV2NBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9kOTk5NDctMjI5OC00MjJmLTlkYTAtZmUwZDI4YjY4Y2Q1
LzEvQnVTNzJyaVc1bUVUODFHMDJjZ3Q5UTVtcHhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQFHxygAwQA
PpUCAwQAPpUKAwQAPpUPAwQAPpUfMA0EAgACMAcDBQAqA2MAMA0GCSqGSIb3DQEB
CwUAA4IBAQALJkFB2sRdwcTr+Qi6RH63hatko/3S+X6i0Mu+C+z6nJPcmNp/iI/8
HPN4NYFjFA0O9a9KB6mq5X8zO/bD2AJFYALUicPPnOKnTEoVTi1RGq5MyrI5Uv2H
e2+jtgvWU8ZeKgSoHC44/3gismGuijwgLFG/yfmzd6WT7ISEFxUnQC2SPrIcT0ie
FMm8GY3ozZ+QhK2KYsRdA8xEx++tlb+AhxmZ8c4khkZyFR10f5Hi/GZVssJCkk8n
J2y3XQTi6bxZjweQPPwQhUemOUi7V03oNMpAfeoCHtGTc58dUaCmxnJuZl/owmoa
nPJWOHBLSjjPjTrIenhr3v6YLR3tG4um
-----END CERTIFICATE-----
Generated at Mon Jun 9 06:07:33 2025 by rpki-client