Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/s4eKJqZh9VLU3wrh0vsRvF3Xs7A.roa
File: s4eKJqZh9VLU3wrh0vsRvF3Xs7A.roa (raw, json)
Hash identifier: Sy9zqk/DxJ0SpdJoSEPudYc5J/AcSUWPYweUb15tYn8=
Subject key identifier: B3:87:8A:26:A6:61:F5:52:D4:DF:0A:E1:D2:FB:11:BC:5D:D7:B3:B0
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 0196D844CFCFA2C3531212F5CB7BECD7ECB6
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/s4eKJqZh9VLU3wrh0vsRvF3Xs7A.roa
Signing time: Fri 16 May 2025 08:45:10 +0000
ROA not before: Fri 16 May 2025 08:45:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34476
IP address blocks: 31.169.75.0/24 maxlen: 24
31.169.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 May 2025 09:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:44:cf:cf:a2:c3:53:12:12:f5:cb:7b:ec:d7:ec:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: May 16 08:45:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3878a26a661f552d4df0ae1d2fb11bc5dd7b3b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6b:80:4c:2a:df:4c:1b:1d:f3:cc:94:a6:5f:
60:f7:ac:ce:3b:e0:af:e0:72:c1:de:e5:a7:9e:f5:
82:4f:84:65:72:ed:4f:c1:e4:96:53:58:1a:88:75:
f4:97:29:33:29:3d:1a:ea:b1:79:39:82:53:1d:87:
de:2c:67:88:e9:51:15:99:36:d2:6e:4a:5f:35:2e:
75:90:1e:b0:e1:23:b4:c2:50:fc:20:06:56:4f:5c:
54:79:21:25:4d:14:86:d5:f1:57:d0:49:37:fc:ce:
3d:ac:58:98:0e:4b:06:5a:56:d8:e7:06:9c:92:28:
3f:e8:44:e7:88:c9:d2:2b:55:6b:f4:8b:b8:ae:1c:
33:02:3f:35:11:a3:c7:5b:e0:da:33:e1:fa:1c:5a:
2b:a1:97:8a:4e:a6:bb:0f:d1:b6:85:39:d6:19:76:
88:c9:fe:b8:53:ea:17:58:8f:b9:20:72:41:b7:5c:
e7:3c:75:fa:0c:ce:f7:d8:ab:85:5a:9f:92:51:ba:
cf:7a:e1:80:2c:63:7c:61:f4:0c:f3:92:5e:3e:dd:
de:79:2b:4d:a9:f0:4a:ef:bf:09:97:44:9a:e5:c7:
e0:46:51:c6:93:40:7a:80:d0:7f:05:99:1f:6c:1c:
f3:fa:ef:38:15:b3:0d:e4:61:cd:f4:37:93:d7:f8:
f2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:87:8A:26:A6:61:F5:52:D4:DF:0A:E1:D2:FB:11:BC:5D:D7:B3:B0
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/s4eKJqZh9VLU3wrh0vsRvF3Xs7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.75.0/24
31.169.87.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:ac:b1:72:b0:85:6a:e8:06:e5:b6:98:db:43:28:11:49:01:
40:2e:c7:09:90:44:58:d5:15:e8:24:5b:cf:8c:e7:5f:fa:69:
f0:74:64:1f:5c:37:22:be:fa:ff:4a:8a:23:2a:22:2a:28:0e:
4b:9c:53:48:02:fa:07:a3:b5:b4:36:40:47:ab:dd:17:b7:40:
c3:ec:35:ca:73:fb:9f:84:68:19:b6:9e:9f:72:17:a7:da:ad:
a6:8a:ef:cc:e2:62:cf:87:fd:e9:29:47:1b:6c:c5:93:2d:c9:
73:82:77:db:f7:b1:28:bd:14:e3:69:ba:ee:60:44:fd:d8:95:
7f:95:bb:b2:04:f3:4b:e5:e5:0c:0b:c8:6b:5a:9c:72:79:18:
83:45:d8:b3:c0:d3:58:13:68:06:d8:b4:1a:8f:2f:08:bb:40:
e3:59:4b:1f:f1:2c:b5:39:d8:7a:4e:13:33:f1:54:60:3c:ec:
bd:f8:e3:b8:ee:fd:eb:9c:b7:fc:82:48:04:d3:a0:f8:bf:2d:
d9:52:45:31:7d:10:fd:51:b1:c5:7c:1f:8b:c3:6c:7e:1e:51:
21:dd:8f:eb:e5:36:f9:ac:93:8f:66:08:fd:e7:e0:85:95:30:
da:5b:fb:5a:57:f2:e2:f4:e3:be:99:49:95:ca:01:b0:ee:a1:
8b:59:d6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:29:21 2025 by rpki-client