Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/gKryc6p2RJLo5kCDBxGalH8fHM0.roa
File: gKryc6p2RJLo5kCDBxGalH8fHM0.roa (raw, json)
Hash identifier: 20H0i191qZ+M1soj6HP9Yr/WaX0439E3x9TqxInHkaU=
Subject key identifier: 80:AA:F2:73:AA:76:44:92:E8:E6:40:83:07:11:9A:94:7F:1F:1C:CD
Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Certificate serial: 019614BB1FB46ED114F157693CC357C702C0
Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/gKryc6p2RJLo5kCDBxGalH8fHM0.roa
Signing time: Tue 08 Apr 2025 09:28:49 +0000
ROA not before: Tue 08 Apr 2025 09:28:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15704
IP address blocks: 31.221.128.0/19 maxlen: 19
31.221.160.0/19 maxlen: 19
31.221.192.0/19 maxlen: 19
31.221.224.0/19 maxlen: 19
37.29.128.0/17 maxlen: 17
46.6.0.0/18 maxlen: 24
46.6.16.0/21 maxlen: 21
46.6.24.0/21 maxlen: 21
46.6.32.0/21 maxlen: 21
46.6.40.0/21 maxlen: 21
46.6.48.0/21 maxlen: 21
46.6.56.0/21 maxlen: 21
46.6.112.0/24 maxlen: 24
46.6.113.0/24 maxlen: 24
46.6.114.0/24 maxlen: 24
46.6.116.0/22 maxlen: 22
46.6.120.0/22 maxlen: 22
46.6.124.0/22 maxlen: 22
46.6.128.0/17 maxlen: 17
46.222.0.0/17 maxlen: 17
46.222.128.0/17 maxlen: 17
80.81.96.0/19 maxlen: 19
82.144.0.0/19 maxlen: 19
83.175.192.0/18 maxlen: 18
95.169.240.0/24 maxlen: 24
95.169.241.0/24 maxlen: 24
95.169.246.0/24 maxlen: 24
109.227.128.0/19 maxlen: 19
109.227.128.0/20 maxlen: 20
109.227.144.0/20 maxlen: 20
109.227.178.0/24 maxlen: 24
178.237.224.0/21 maxlen: 21
178.237.232.0/21 maxlen: 21
185.241.128.0/22 maxlen: 22
188.127.160.0/19 maxlen: 19
213.171.224.0/19 maxlen: 19
213.172.32.0/19 maxlen: 19
217.168.3.0/24 maxlen: 24
217.168.6.0/24 maxlen: 24
217.168.13.0/24 maxlen: 24
217.172.64.0/20 maxlen: 20
Validation: Failed, certificate revoked on Wed 09 Apr 2025 10:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:14:bb:1f:b4:6e:d1:14:f1:57:69:3c:c3:57:c7:02:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Validity
Not Before: Apr 8 09:28:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80aaf273aa764492e8e6408307119a947f1f1ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9e:33:57:20:31:2f:df:dd:02:c2:d9:d3:e8:
2a:b4:a6:cf:b2:e7:ca:91:b2:d8:45:57:95:56:1e:
ec:47:c4:3a:ce:8f:df:df:b0:29:05:49:4e:a1:81:
04:00:ff:48:23:ec:de:66:63:40:7c:8f:a3:dc:a4:
c4:70:65:72:5d:8e:7a:b1:2b:4b:c3:5d:7e:5e:7f:
5c:c8:b6:a9:2d:2b:3d:be:e4:9d:a9:ff:f0:a1:52:
ec:13:c7:e4:3f:66:0e:58:a9:3f:f9:bb:5c:67:93:
c3:45:32:ed:e2:58:fc:6f:56:4d:29:ab:24:7b:84:
b3:08:b8:a1:09:b5:18:3a:7e:79:60:41:44:0f:d2:
a8:af:70:47:1c:5a:67:34:12:3e:f3:39:42:02:8c:
df:9a:85:e3:7d:5c:03:07:74:e6:19:0b:8a:70:48:
8d:6c:a5:51:2b:03:2a:24:de:23:4b:e5:1f:a7:de:
90:96:82:c6:dd:73:f7:ac:6f:e8:23:2e:a3:76:0a:
af:bf:e8:c1:a3:7a:46:f9:79:08:c7:10:17:f7:1e:
25:4c:3e:7b:52:13:f2:64:5d:72:ed:d2:3a:13:13:
1d:48:e3:05:68:4c:f2:96:af:69:30:37:df:15:c7:
01:5e:dc:f0:3b:03:28:e7:f3:2b:3b:7d:13:9e:13:
20:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:AA:F2:73:AA:76:44:92:E8:E6:40:83:07:11:9A:94:7F:1F:1C:CD
X509v3 Authority Key Identifier:
keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/gKryc6p2RJLo5kCDBxGalH8fHM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.221.128.0/17
37.29.128.0/17
46.6.0.0/18
46.6.112.0-46.6.114.255
46.6.116.0-46.6.255.255
46.222.0.0/16
80.81.96.0/19
82.144.0.0/19
83.175.192.0/18
95.169.240.0/23
95.169.246.0/24
109.227.128.0/19
109.227.178.0/24
178.237.224.0/20
185.241.128.0/22
188.127.160.0/19
213.171.224.0/19
213.172.32.0/19
217.168.3.0/24
217.168.6.0/24
217.168.13.0/24
217.172.64.0/20
Signature Algorithm: sha256WithRSAEncryption
67:de:be:55:7e:e2:dc:ed:a6:5c:20:eb:90:31:a3:dd:0e:c7:
55:80:95:2b:c3:34:af:4d:2f:7a:11:22:39:b2:a6:03:80:e6:
0b:d1:ec:5d:f2:87:2f:0f:f7:c6:cb:13:a8:67:88:d6:4e:0b:
9f:f7:ce:fe:ca:36:04:47:5e:95:74:68:af:5e:f8:1f:22:70:
d3:40:77:21:eb:d3:fa:3d:72:17:c0:ec:9e:94:8f:46:99:bf:
c3:45:24:b0:67:03:fb:49:1d:1e:56:a1:f1:23:58:5e:69:43:
d8:e8:61:7c:8d:77:4e:d8:be:dc:90:92:10:00:94:24:86:86:
8f:94:35:ff:da:e4:83:da:39:7e:90:80:3e:fa:9c:c5:ce:65:
f7:1b:06:12:ec:3a:da:71:dd:b1:d4:1a:c8:05:85:a4:47:28:
22:e5:be:e0:75:92:09:4c:a2:d9:f9:6e:a9:e3:d9:bf:fb:2c:
f4:12:ef:01:8a:fc:74:29:5c:14:78:10:85:b2:1b:8f:2c:0f:
45:bc:1b:01:f6:d6:c3:4e:e0:c0:8e:a0:ea:3c:5c:8f:8c:83:
35:a4:82:da:f2:65:05:34:d5:a8:6a:3a:1f:dc:53:25:c0:99:
d6:58:2d:c2:2c:23:f5:8a:0a:3d:ef:e6:f6:04:bb:55:b8:40:
56:2e:b7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:52:55 2025 by rpki-client