Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/C6H62GwallBCfiwpy-F8Eoe6Ig8.roa
File: C6H62GwallBCfiwpy-F8Eoe6Ig8.roa (raw, json)
Hash identifier: 2+b4ZOIMS7UwkvQE2GqDn28lfEpTFUKOGK8gmqcX0JI=
Subject key identifier: 0B:A1:FA:D8:6C:1A:96:50:42:7E:2C:29:CB:E1:7C:12:87:BA:22:0F
Certificate issuer: /CN=fb5e2eeae82eef9b657fe2795267261020f944c9
Certificate serial: 0196062FACC3D5B438A33C02EDE487C2E599
Authority key identifier: FB:5E:2E:EA:E8:2E:EF:9B:65:7F:E2:79:52:67:26:10:20:F9:44:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/C6H62GwallBCfiwpy-F8Eoe6Ig8.roa
Signing time: Sat 05 Apr 2025 13:41:49 +0000
ROA not before: Sat 05 Apr 2025 13:41:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212582
IP address blocks: 31.14.183.0/24 maxlen: 24
2a14:9680::/29 maxlen: 29
2a14:9680:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 05 Apr 2025 14:55:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:06:2f:ac:c3:d5:b4:38:a3:3c:02:ed:e4:87:c2:e5:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb5e2eeae82eef9b657fe2795267261020f944c9
Validity
Not Before: Apr 5 13:41:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ba1fad86c1a9650427e2c29cbe17c1287ba220f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0c:f8:b5:e7:23:97:12:67:f7:e3:48:63:cf:
14:f8:82:61:40:cf:d9:87:a2:7d:7b:74:e8:b9:e8:
01:18:66:73:bd:ee:6a:6a:2b:03:7f:2d:c5:95:ee:
b6:3d:0e:f3:96:1c:ae:a2:e9:b8:3c:f1:69:40:ed:
7f:41:d9:c2:a5:01:73:8e:6a:45:ed:9f:31:ab:2d:
de:45:26:78:30:f1:cf:3d:ad:19:0e:85:0a:a8:3f:
3c:92:51:06:17:90:df:da:29:82:3f:6d:0f:3a:29:
29:79:e0:68:de:9c:f6:2f:fa:80:cb:72:45:37:16:
6e:01:26:10:6e:cf:d5:df:44:49:60:10:10:ed:3f:
df:39:22:cc:d3:68:55:3c:f0:be:07:c1:e3:65:a1:
c6:87:c0:e5:56:05:74:a3:7c:29:89:e3:70:03:87:
5a:c4:42:d0:73:ac:0b:7f:f3:ba:c6:83:44:eb:97:
8e:b2:92:8f:a8:a6:43:12:5c:2c:d8:cc:7b:59:4e:
bb:bd:65:2a:cf:de:32:d3:a0:64:68:2a:86:c8:0b:
7c:b6:03:69:dd:86:37:a5:7e:1b:b4:25:12:b2:25:
f0:f2:0d:95:dd:de:a8:3e:3e:4c:b4:5a:e2:4a:e1:
25:75:a8:37:d6:13:9c:36:28:1a:90:dc:ce:6c:65:
1c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A1:FA:D8:6C:1A:96:50:42:7E:2C:29:CB:E1:7C:12:87:BA:22:0F
X509v3 Authority Key Identifier:
keyid:FB:5E:2E:EA:E8:2E:EF:9B:65:7F:E2:79:52:67:26:10:20:F9:44:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/C6H62GwallBCfiwpy-F8Eoe6Ig8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.183.0/24
IPv6:
2a14:9680::/29
Signature Algorithm: sha256WithRSAEncryption
b4:7e:19:b0:db:dc:4d:46:7a:8e:2b:f5:54:5c:9b:18:b8:53:
a1:05:ce:f4:88:b4:1d:40:57:f4:e5:d8:ae:ea:93:f0:56:ba:
05:91:39:5c:15:98:92:7c:f7:59:ec:57:0c:dc:c0:6f:5f:55:
d0:29:80:60:81:0e:03:fa:69:08:2c:19:ff:42:0d:58:b6:8c:
5c:c0:9a:e8:07:ff:d5:fc:d7:28:c3:d3:12:a4:0d:c8:4b:ac:
37:40:00:f1:56:0e:cd:15:12:fd:f3:85:63:35:d6:aa:ba:a0:
0c:97:e3:2a:28:1c:82:1c:16:e5:dd:eb:28:9d:af:f1:50:36:
1b:0b:48:bd:da:8c:ac:1e:d4:7c:76:eb:dd:f7:c1:2f:78:89:
72:76:b2:d8:6f:10:11:87:f2:4c:69:41:22:43:6d:ef:4e:db:
9f:cf:68:fe:c7:da:a3:64:dd:82:a0:e6:72:92:55:80:65:12:
1f:01:2e:b6:58:d8:56:db:e4:bd:82:16:08:b9:fc:56:26:e7:
ab:4a:9f:03:32:e0:e3:fc:7b:8d:81:34:2a:e9:ce:8f:b9:9d:
0f:58:78:b6:26:ba:30:d0:a3:50:8a:f8:f6:82:90:72:c1:3e:
c3:4a:21:28:2b:cf:aa:ef:d5:99:bf:30:46:4a:e9:c1:4d:f9:
79:8b:03:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:56:50 2025 by rpki-client