Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/G9cDRooU--y9Kv2sFcgV46SDlgs.roa
File: G9cDRooU--y9Kv2sFcgV46SDlgs.roa (raw, json)
Hash identifier: giQMI0J2F2pTyRzRXOx7KUICUTrGynWVjNmHcQ2w4Us=
Subject key identifier: 1B:D7:03:46:8A:14:FB:EC:BD:2A:FD:AC:15:C8:15:E3:A4:83:96:0B
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 01967B1EFD7E66D3EC6E130DFA0B0CE46DED
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/G9cDRooU--y9Kv2sFcgV46SDlgs.roa
Signing time: Mon 28 Apr 2025 06:39:10 +0000
ROA not before: Mon 28 Apr 2025 06:39:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.42.124.0/24 maxlen: 24
31.42.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Apr 2025 13:40:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:1e:fd:7e:66:d3:ec:6e:13:0d:fa:0b:0c:e4:6d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Apr 28 06:39:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1bd703468a14fbecbd2afdac15c815e3a483960b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a2:b3:27:96:c8:7c:6d:05:f7:03:e9:6e:42:
4f:bd:b3:f3:db:80:99:14:82:f8:93:25:e5:1c:3e:
d0:08:9b:0d:8a:00:63:47:60:fc:0d:33:fd:26:ec:
05:ec:be:26:24:d2:7e:a0:61:0e:ab:3b:d2:f4:b5:
5b:df:91:54:34:56:66:02:9f:73:00:f9:52:9f:54:
fc:c7:14:15:9d:1f:d4:ef:73:31:bd:fa:c5:90:10:
f6:95:00:2f:68:af:84:24:4c:1f:93:5b:39:8c:9d:
a0:31:8d:a9:07:78:09:1b:6e:04:b7:e6:ea:80:ed:
05:8c:f9:29:e0:69:01:5c:58:92:7b:ee:90:52:5e:
a9:9c:09:7a:7b:a9:d4:23:08:9d:f1:de:37:0b:06:
d7:50:55:43:e3:3b:08:73:bf:a7:52:01:52:e5:fc:
bf:16:c9:32:69:95:23:7c:cf:7c:9d:75:a7:b6:e1:
9b:58:a6:c1:f4:fe:a0:98:74:11:5c:f0:d8:d7:5a:
1d:b6:87:4d:d4:ee:6e:6c:1b:9e:82:9d:5e:6f:0a:
8b:26:70:97:3f:5f:d1:fa:b4:84:d1:f3:fa:72:c1:
91:8e:dc:05:1d:22:c2:29:63:4d:c1:1e:4a:a3:66:
9c:e1:fc:33:db:e6:86:bc:a6:9c:b0:c3:d7:47:1b:
77:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D7:03:46:8A:14:FB:EC:BD:2A:FD:AC:15:C8:15:E3:A4:83:96:0B
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/G9cDRooU--y9Kv2sFcgV46SDlgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.124.0/24
31.42.126.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:65:2c:ba:9f:a6:6b:9a:0e:2d:6d:19:28:54:e3:6b:f4:81:
35:c5:25:15:8b:06:d2:dc:22:53:0e:88:7b:e9:da:35:0b:46:
76:a6:40:aa:c4:a6:86:c6:1b:df:0d:ba:15:2a:9c:8e:74:1a:
29:5d:55:41:54:1e:df:df:c5:48:ac:9f:66:8e:af:69:1a:33:
f5:74:51:6e:7c:bf:8a:b6:9f:c0:3e:8b:b9:00:b7:44:06:2d:
3e:18:4b:54:70:fe:9f:4a:5e:47:49:82:b5:52:81:b6:2a:99:
d7:66:b3:02:4c:dd:58:36:08:87:9b:32:f7:a4:f3:da:d4:3a:
51:d7:32:c2:ae:8f:a8:5a:53:06:7b:e4:20:3b:80:4d:ff:5d:
af:b5:0c:6b:b9:68:02:f3:65:98:1c:ef:35:0f:2b:19:17:e8:
9d:b8:f8:56:4c:83:e5:ca:b8:da:a2:10:06:f9:b8:db:46:d0:
92:c4:4c:89:62:24:72:64:72:a1:96:7c:f6:01:f9:91:08:1c:
28:b9:33:04:7e:79:3f:00:3b:ad:57:e4:e7:52:9a:6d:6e:56:
75:3d:ba:68:46:bc:df:bc:3a:e9:0c:58:af:08:ae:a7:bc:fa:
4a:fb:6e:ce:8a:09:b4:61:bb:5a:a0:62:aa:e2:87:25:a5:25:
d1:29:ff:73
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZZ7Hv1+ZtPsbhMN+gsM5G3tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMzQ5YWYyYWYxMTEzNjFiMjlmY2ZlZjJlMDQzZDViZTc1
ZTNmOTgwHhcNMjUwNDI4MDYzOTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYmQ3MDM0NjhhMTRmYmVjYmQyYWZkYWMxNWM4MTVlM2E0ODM5NjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6KzJ5bIfG0F9wPpbkJPvbPz24CZ
FIL4kyXlHD7QCJsNigBjR2D8DTP9JuwF7L4mJNJ+oGEOqzvS9LVb35FUNFZmAp9z
APlSn1T8xxQVnR/U73MxvfrFkBD2lQAvaK+EJEwfk1s5jJ2gMY2pB3gJG24Et+bq
gO0FjPkp4GkBXFiSe+6QUl6pnAl6e6nUIwid8d43CwbXUFVD4zsIc7+nUgFS5fy/
FskyaZUjfM98nXWntuGbWKbB9P6gmHQRXPDY11odtodN1O5ubBuegp1ebwqLJnCX
P1/R+rSE0fP6csGRjtwFHSLCKWNNwR5Ko2ac4fwz2+aGvKacsMPXRxt3ewIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBvXA0aKFPvsvSr9rBXIFeOkg5YLMB8GA1UdIwQY
MBaAFOs0mvKvERNhsp/P7y4EPVvnXj+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgt
OWNkNjYyYmM4MzIwLzEvRzljRFJvb1UtLXk5S3Yyc0ZjZ1Y0NlNEbGdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgtOWNkNjYyYmM4MzIw
LzEvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHyp8AwQA
Hyp+MA0GCSqGSIb3DQEBCwUAA4IBAQBbZSy6n6Zrmg4tbRkoVONr9IE1xSUViwbS
3CJTDoh76do1C0Z2pkCqxKaGxhvfDboVKpyOdBopXVVBVB7f38VIrJ9mjq9pGjP1
dFFufL+Ktp/APou5ALdEBi0+GEtUcP6fSl5HSYK1UoG2KpnXZrMCTN1YNgiHmzL3
pPPa1DpR1zLCro+oWlMGe+QgO4BN/12vtQxruWgC82WYHO81DysZF+iduPhWTIPl
yrjaohAG+bjbRtCSxEyJYiRyZHKhlnz2AfmRCBwouTMEfnk/ADutV+TnUpptblZ1
PbpoRrzfvDrpDFivCK6nvPpK+27Oigm0YbtaoGKq4oclpSXRKf9z
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:07:39 2025 by rpki-client