Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/jtGFv2brCICNqZ4D0ZqwwyIs89w.roa
File: jtGFv2brCICNqZ4D0ZqwwyIs89w.roa (raw, json)
Hash identifier: r+4gfGThWcVzqpyI0KnN2OsC7KmUobnDBJf9gaAuCZo=
Subject key identifier: 8E:D1:85:BF:66:EB:08:80:8D:A9:9E:03:D1:9A:B0:C3:22:2C:F3:DC
Certificate issuer: /CN=06e4bbdab896e66113f351b4d9c82df50e66a712
Certificate serial: 01973402086A291B07274713B168A2D06164
Authority key identifier: 06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/jtGFv2brCICNqZ4D0ZqwwyIs89w.roa
Signing time: Tue 03 Jun 2025 04:17:17 +0000
ROA not before: Tue 03 Jun 2025 04:17:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15497
IP address blocks: 31.28.160.0/22 maxlen: 22
31.28.164.0/22 maxlen: 22
31.28.168.0/22 maxlen: 24
31.28.169.0/24 maxlen: 24
31.28.172.0/22 maxlen: 22
31.28.176.0/22 maxlen: 22
31.28.180.0/22 maxlen: 22
31.28.184.0/22 maxlen: 22
31.28.184.0/24 maxlen: 24
31.28.188.0/24 maxlen: 24
31.28.190.0/24 maxlen: 24
31.28.191.0/24 maxlen: 24
62.149.2.0/24 maxlen: 24
62.149.10.0/24 maxlen: 24
62.149.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Jun 2025 15:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:34:02:08:6a:29:1b:07:27:47:13:b1:68:a2:d0:61:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06e4bbdab896e66113f351b4d9c82df50e66a712
Validity
Not Before: Jun 3 04:17:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ed185bf66eb08808da99e03d19ab0c3222cf3dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1f:ca:8c:ce:dd:69:20:1c:c9:61:9b:72:e8:
91:44:6b:38:bf:3e:67:f3:6b:8e:9c:be:ec:1a:76:
c2:4f:0d:20:e5:a3:8c:f9:ef:2e:c4:60:cc:9b:26:
97:38:d6:3a:f7:67:50:b7:eb:4c:ef:2c:27:31:fe:
63:48:61:84:6c:cb:6b:b4:2e:b5:f8:49:83:43:f7:
8f:69:66:29:e8:cd:26:fd:2a:43:bf:f4:f0:1e:30:
ca:13:fb:4b:b6:5b:7f:23:53:f2:bb:89:f3:5d:91:
ce:5e:37:a1:8f:f2:46:7f:3e:28:63:76:c2:bb:07:
95:d7:cd:b4:96:33:a4:a4:46:08:aa:42:2c:72:b8:
2b:d1:b5:11:25:3e:28:47:7e:45:e0:76:63:84:bb:
99:84:27:72:35:44:f1:64:f9:95:7d:ab:1c:2d:53:
4e:f7:a5:b9:6c:f0:0a:48:d6:5b:75:bf:eb:e5:70:
11:16:2c:c4:1b:a2:a8:92:11:46:11:2a:15:60:59:
c3:17:58:60:53:1e:7f:11:f0:24:14:ff:fd:f2:a5:
e6:ed:56:f1:08:8e:c8:e9:ce:9b:b7:68:1f:54:ca:
6b:72:db:bf:9e:1f:49:1c:02:02:f9:6f:63:9d:5c:
d2:9d:3e:10:b6:75:fa:5a:28:0e:6c:dd:01:1b:72:
71:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D1:85:BF:66:EB:08:80:8D:A9:9E:03:D1:9A:B0:C3:22:2C:F3:DC
X509v3 Authority Key Identifier:
keyid:06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/jtGFv2brCICNqZ4D0ZqwwyIs89w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.28.160.0-31.28.188.255
31.28.190.0/23
62.149.2.0/24
62.149.10.0/24
62.149.31.0/24
Signature Algorithm: sha256WithRSAEncryption
af:a4:14:35:df:b4:e2:20:a3:b9:51:88:61:cf:29:65:ce:f0:
17:be:48:3b:ad:fa:ae:26:04:62:d4:b5:16:80:84:58:76:74:
d0:97:a4:a2:bb:e3:df:9b:1e:49:f2:e1:25:b2:ba:1a:8d:b5:
44:03:3a:8b:c7:21:49:74:18:2d:ef:63:31:a1:ec:3e:af:23:
8d:df:b1:d7:73:f5:6b:18:4f:19:f0:00:41:b1:09:51:a2:51:
ea:44:2a:71:26:e8:1d:a5:36:6d:cd:8b:9f:4a:1b:0c:89:31:
72:f4:42:ee:73:d3:a4:48:bf:36:df:78:6c:65:e0:09:35:4b:
98:71:c1:e7:d9:87:0e:90:c5:15:42:6c:72:1a:51:0a:bb:31:
68:01:16:98:7a:cb:64:c7:d4:23:9e:2a:8f:0a:90:90:6a:8b:
1f:18:ac:97:4b:eb:a6:3c:1e:e0:4a:eb:f3:d1:95:cf:e0:0c:
fb:0f:66:8c:6e:21:b5:5d:fc:58:a5:0f:08:29:18:74:15:01:
9b:31:c0:19:dc:c9:db:b5:e7:28:96:88:cc:15:6e:b0:77:ca:
c0:ff:83:ef:9b:60:c1:9c:1c:35:f0:96:d3:06:d8:7a:90:0b:
63:70:3f:9e:bd:d9:da:4e:73:c5:f7:c6:7f:ed:47:32:9f:87:
5d:91:a4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:03:51 2025 by rpki-client