Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/ZqKpB2doWPk6I4fATtwtvRlpyyI.roa
File: ZqKpB2doWPk6I4fATtwtvRlpyyI.roa (raw, json)
Hash identifier: rzD84JtZVdwLLYjsqh5NJicT/MMyr95IgJv22gsqwi8=
Subject key identifier: 66:A2:A9:07:67:68:58:F9:3A:23:87:C0:4E:DC:2D:BD:19:69:CB:22
Certificate issuer: /CN=b732762a5e861e976de53d14786f39e3a669681b
Certificate serial: 0196FB7ADBB1F432A3C5AFD7FE97A107D9B9
Authority key identifier: B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/ZqKpB2doWPk6I4fATtwtvRlpyyI.roa
Signing time: Fri 23 May 2025 04:50:54 +0000
ROA not before: Fri 23 May 2025 04:50:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41327
IP address blocks: 31.185.96.0/24 maxlen: 24
31.185.98.0/24 maxlen: 24
31.185.99.0/24 maxlen: 24
31.185.100.0/22 maxlen: 24
93.94.88.0/21 maxlen: 24
185.61.168.0/22 maxlen: 24
185.157.228.0/22 maxlen: 24
2a03:b020::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 23 May 2025 08:14:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fb:7a:db:b1:f4:32:a3:c5:af:d7:fe:97:a1:07:d9:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b732762a5e861e976de53d14786f39e3a669681b
Validity
Not Before: May 23 04:50:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66a2a907676858f93a2387c04edc2dbd1969cb22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c6:82:5f:87:02:73:19:90:62:3e:0f:5d:cb:
5d:8d:18:33:66:96:9a:af:51:65:1f:b4:31:38:bd:
b7:ab:1c:7b:9c:a6:9e:46:53:ec:80:11:a5:61:a1:
ac:d3:a7:55:ba:ab:86:5c:c2:b6:69:cf:89:53:b4:
d5:b6:a7:54:ff:77:25:ff:2c:7e:b2:5b:5f:45:d7:
89:74:73:e4:5a:6d:69:ac:77:3c:2f:78:a1:a9:17:
7b:5f:06:38:dc:f8:e4:f6:c5:ce:c9:42:cc:27:e9:
48:19:53:0a:56:db:33:4f:ef:b2:08:2b:7c:be:ab:
ab:24:7c:5b:20:40:f9:7f:08:4d:e7:ea:12:4d:c7:
da:2a:13:cd:2c:ad:aa:82:a0:7d:8e:bd:d8:4a:83:
17:2d:01:b3:1e:f0:95:e3:8c:64:e1:96:f7:f7:f0:
b5:dd:5a:07:bd:21:10:ac:4b:a1:af:ca:0d:18:3d:
03:93:4e:32:a5:fa:a3:a3:b2:42:12:39:32:3f:09:
3a:b9:91:9d:22:b1:24:aa:8d:75:51:c9:8a:84:d3:
38:0d:ff:4b:8b:59:bb:42:df:2c:34:c5:a7:ad:bc:
a8:88:96:96:bd:f0:7a:97:5e:ec:cd:5c:04:b2:90:
69:b0:0d:08:65:f4:88:6f:70:86:af:00:2e:2b:59:
47:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A2:A9:07:67:68:58:F9:3A:23:87:C0:4E:DC:2D:BD:19:69:CB:22
X509v3 Authority Key Identifier:
keyid:B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/ZqKpB2doWPk6I4fATtwtvRlpyyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.185.96.0/24
31.185.98.0-31.185.103.255
93.94.88.0/21
185.61.168.0/22
185.157.228.0/22
IPv6:
2a03:b020::/29
Signature Algorithm: sha256WithRSAEncryption
3c:34:eb:8f:b2:e0:8b:a4:8d:0c:de:0c:86:dc:c9:70:4d:99:
a2:0e:65:5e:c0:fc:4c:25:d3:a5:dc:02:06:5a:62:6d:2c:95:
62:82:91:14:14:cd:8f:8d:df:32:d3:b8:29:a3:3a:30:26:60:
47:66:ca:20:8f:a8:65:52:73:e7:4e:98:bb:33:bc:a3:31:f3:
c4:8e:a4:83:bf:32:93:9c:9d:87:9f:d4:20:b9:e4:6d:8c:da:
a6:a0:da:51:1d:bd:03:8e:2e:e2:3f:40:5e:b6:75:23:cb:84:
41:f5:09:f0:e7:fc:40:5a:74:b7:be:3c:00:56:80:18:0e:71:
f1:6a:4d:7f:8c:8b:dc:2b:51:82:30:1e:ef:85:8f:ed:6a:27:
e8:09:ce:b7:1b:d6:a0:ba:b6:05:92:6a:0e:60:84:90:c4:88:
86:c7:cf:db:4d:78:93:1b:36:ec:01:a8:48:32:c7:4c:bd:f3:
3c:10:2a:b7:f0:d4:a8:bf:11:88:f8:ae:44:c1:92:39:78:95:
ae:40:cf:68:d2:11:03:26:db:38:ec:16:90:6e:ba:87:8d:ee:
e0:40:6c:a3:05:ab:c2:f7:22:dc:31:28:db:19:f7:66:e3:5e:
3e:c5:a9:4a:66:53:67:35:b1:1d:ed:93:9e:82:dc:b4:21:d2:
f5:fc:85:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 07:59:19 2025 by rpki-client