Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/eyyobgYl1AdOvEPsP9X02A_pYfU.roa
File: eyyobgYl1AdOvEPsP9X02A_pYfU.roa (raw, json)
Hash identifier: Ief7eiQcOvvsLeRgLjO5K8aSxYkmhTPGUrZZA6zKvlo=
Subject key identifier: 7B:2C:A8:6E:06:25:D4:07:4E:BC:43:EC:3F:D5:F4:D8:0F:E9:61:F5
Certificate issuer: /CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Certificate serial: 0196618779E2263091BAC57EB2373FBD0CE5
Authority key identifier: 24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/eyyobgYl1AdOvEPsP9X02A_pYfU.roa
Signing time: Wed 23 Apr 2025 07:23:10 +0000
ROA not before: Wed 23 Apr 2025 07:23:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6830
IP address blocks: 31.187.0.0/18 maxlen: 18
31.187.0.0/19 maxlen: 19
31.187.32.0/19 maxlen: 19
194.187.40.0/22 maxlen: 22
195.34.208.0/22 maxlen: 22
212.76.32.0/19 maxlen: 19
213.134.160.0/19 maxlen: 19
2001:4050::/32 maxlen: 32
2a02:a300::/27 maxlen: 27
Validation: Failed, certificate revoked on Wed 23 Apr 2025 07:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:61:87:79:e2:26:30:91:ba:c5:7e:b2:37:3f:bd:0c:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Validity
Not Before: Apr 23 07:23:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b2ca86e0625d4074ebc43ec3fd5f4d80fe961f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:22:96:57:88:5d:e0:02:3f:32:b7:f1:b5:57:
70:b4:d7:6e:14:82:c2:53:6e:38:d4:af:cd:49:da:
fb:9e:00:cb:0a:e4:70:c4:b2:38:ad:5d:8b:a0:25:
34:23:3e:b7:99:72:cc:5b:85:81:39:f0:33:fd:4c:
da:6b:ea:07:51:8f:1c:ca:84:84:5f:4e:d0:87:dc:
8a:a1:a2:9e:ac:97:1f:1e:a9:c9:24:da:90:4b:64:
f1:b3:9c:c0:fa:ba:d8:8a:9c:c1:0c:80:2e:de:25:
c3:31:b6:1d:e8:46:7e:6e:cb:8d:b0:41:d2:32:ab:
91:0e:0f:ec:08:f8:59:a7:98:47:55:fc:05:b0:08:
6e:90:24:ed:ca:c5:ea:5b:a7:ba:d7:e8:07:b4:74:
90:e3:68:a5:ec:94:1c:ba:2d:44:31:5a:69:8e:6b:
58:f4:51:ea:9a:a0:0c:2c:07:f3:2c:dd:4f:5b:4d:
9c:58:2c:52:0e:88:b4:dd:6f:34:4a:e6:96:05:89:
23:45:d8:22:1c:01:40:d4:ca:2f:09:81:2a:22:a0:
40:0f:81:2e:4f:59:9a:ed:c5:49:76:7b:3c:0d:97:
88:76:d8:da:a7:d0:2a:68:b7:00:a3:ec:a9:ad:37:
75:51:04:3b:8f:a5:9f:3e:7b:21:93:e0:f9:9e:f4:
79:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2C:A8:6E:06:25:D4:07:4E:BC:43:EC:3F:D5:F4:D8:0F:E9:61:F5
X509v3 Authority Key Identifier:
keyid:24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/eyyobgYl1AdOvEPsP9X02A_pYfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.187.0.0/18
194.187.40.0/22
195.34.208.0/22
212.76.32.0/19
213.134.160.0/19
IPv6:
2001:4050::/32
2a02:a300::/27
Signature Algorithm: sha256WithRSAEncryption
3d:b5:ec:fc:59:43:d4:f9:28:9d:04:b5:df:5a:08:2f:86:bb:
88:a4:f4:a0:e0:ac:35:5f:d5:92:23:3b:86:9f:b8:32:09:cc:
5f:39:fd:29:dd:61:bd:51:2b:2c:bf:9f:c8:e3:db:c4:8a:d2:
10:39:55:ba:60:70:8b:bb:56:11:17:f6:eb:d5:2c:fb:a2:5e:
c5:e7:25:e3:58:ab:d8:2a:55:90:ab:cb:fb:5f:4c:0e:2e:1f:
75:f4:73:73:a6:5a:6a:7d:35:b0:36:c1:7b:b6:57:07:d2:04:
1f:b7:f3:8f:17:3c:75:26:73:da:27:82:67:b6:48:28:34:48:
0a:70:a2:c7:0d:ba:84:6c:85:e9:3f:42:9a:2f:9a:52:57:a9:
5c:cf:47:9c:ab:75:a4:71:c4:6b:3a:a5:05:93:15:7f:c1:2c:
bc:b5:ab:43:58:a3:e9:18:d3:3d:4c:42:30:17:ad:48:df:c4:
d9:7f:cb:ed:13:fa:3a:d5:16:27:bf:69:5d:75:e7:98:4c:4a:
aa:80:b9:8a:2a:47:a7:24:fe:f2:22:57:28:45:a5:4c:fc:3b:
5b:a2:24:82:d9:f7:56:41:1b:f1:1b:5d:06:f9:c8:91:84:8d:
3a:ca:b8:00:a6:e0:05:2f:e3:2d:aa:64:7e:f0:3a:bd:63:22:
0a:97:c4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:01:28 2025 by rpki-client