Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/Ir4TQZgvwkFDbugv6oUoe8JEiLQ.roa
File: Ir4TQZgvwkFDbugv6oUoe8JEiLQ.roa (raw, json)
Hash identifier: gSahSWL7zkSX4/tzl0LweL4UG6eJx1lptBkc7/AXQKo=
Subject key identifier: 22:BE:13:41:98:2F:C2:41:43:6E:E8:2F:EA:85:28:7B:C2:44:88:B4
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 01974AABBB0ECBBBAABC6D3F4A6C4BB23ACC
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/Ir4TQZgvwkFDbugv6oUoe8JEiLQ.roa
Signing time: Sat 07 Jun 2025 13:54:17 +0000
ROA not before: Sat 07 Jun 2025 13:54:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208972
IP address blocks: 31.169.87.0/24 maxlen: 24
31.169.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Jun 2025 17:51:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:ab:bb:0e:cb:bb:aa:bc:6d:3f:4a:6c:4b:b2:3a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Jun 7 13:54:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22be1341982fc241436ee82fea85287bc24488b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:14:bb:12:8e:e7:03:fb:ad:a0:b7:35:09:81:
d4:c5:54:85:67:1b:8f:61:1f:8c:91:ab:70:8a:33:
07:bc:86:b3:91:e7:3e:95:0e:83:bc:e2:21:6f:82:
1b:7d:cd:ce:b9:d2:6f:d5:95:71:33:52:2c:26:7b:
50:5a:6a:12:97:39:d7:f2:75:b0:d5:82:b8:c0:46:
2d:6e:a6:d8:5e:e8:00:80:83:5c:3f:07:10:7c:cd:
66:35:ca:b8:b4:e3:f7:f4:ee:1d:e8:6e:d2:12:cd:
e4:94:d7:6d:43:ac:f4:5a:3d:d8:ae:1f:3e:4f:6d:
ee:85:d3:45:ce:64:ee:9a:b7:6c:06:2d:77:5b:d2:
3b:56:b0:62:57:94:2f:f5:67:84:69:10:a1:6b:ce:
36:5c:28:ac:df:1e:93:c6:4d:c7:ed:4b:57:7e:cb:
ea:a6:1f:7a:79:eb:ec:9d:95:8a:0a:99:66:8d:01:
92:d4:c8:89:40:9a:83:96:38:e9:e2:66:e7:b9:26:
24:9c:69:29:66:31:97:bf:5f:9d:46:ec:ac:dd:06:
58:e3:1c:bd:0d:18:87:77:e9:dc:6c:9a:ba:1d:3c:
28:27:b3:45:d7:55:2e:f2:9b:2c:67:d0:b8:0f:82:
6f:21:89:60:14:f5:33:7b:48:09:2b:88:25:97:87:
cd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:BE:13:41:98:2F:C2:41:43:6E:E8:2F:EA:85:28:7B:C2:44:88:B4
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/Ir4TQZgvwkFDbugv6oUoe8JEiLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.87.0/24
31.169.90.0/24
Signature Algorithm: sha256WithRSAEncryption
96:d5:38:e8:8f:f5:57:2d:f6:16:7e:85:4d:b7:d3:bd:f1:8e:
3c:9a:2d:cd:d6:0b:a2:5a:73:cd:49:19:65:2a:9b:f5:53:dd:
e4:8e:2a:12:ef:86:2c:04:f7:b6:16:5e:02:f7:78:4a:c1:7c:
a5:ef:1d:e9:e0:d1:f9:ab:a1:e0:94:1f:41:6a:bb:85:97:88:
e0:c3:a4:72:23:ef:98:71:e1:e1:b5:21:41:58:31:eb:cb:3d:
e7:83:b6:d1:a1:d3:25:6c:f2:45:3e:f7:a2:94:14:bd:92:08:
c3:a7:f0:bd:7d:6f:e0:88:60:15:c9:3b:a4:5b:f9:95:bb:95:
d7:7f:d2:27:b7:08:a0:af:c9:54:23:89:d6:57:51:fc:1c:85:
8c:a4:58:11:1e:c1:b9:2f:e1:5e:49:58:a3:5b:03:3c:ec:47:
ca:32:87:96:b7:b3:1d:87:fb:cb:e8:de:ce:a5:ce:7e:15:96:
a9:60:b6:59:c3:7e:55:dd:d9:9a:fe:31:9c:f1:a4:87:89:87:
60:04:c0:6e:cb:30:f1:25:3e:01:1e:da:43:96:ec:f8:e6:a2:
a6:8f:6f:78:1d:7f:94:9c:10:ec:9e:17:88:3f:ef:72:6d:34:
22:1c:7c:87:6c:f3:10:11:e3:05:c4:fb:d4:33:c1:f4:21:b1:
18:0f:f1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:31:30 2025 by rpki-client