Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/klf_jrQz_aLK1ix98VHGxOu3g3M.roa
File: klf_jrQz_aLK1ix98VHGxOu3g3M.roa (raw, json)
Hash identifier: S1F0xJLOR9eLZ1OZwD7kYNOSeCvvE8TWOgx3UUXzNV0=
Subject key identifier: 92:57:FF:8E:B4:33:FD:A2:CA:D6:2C:7D:F1:51:C6:C4:EB:B7:83:73
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 01975AFC5DDF9F611DEB8D71552404A57166
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/klf_jrQz_aLK1ix98VHGxOu3g3M.roa
Signing time: Tue 10 Jun 2025 17:56:17 +0000
ROA not before: Tue 10 Jun 2025 17:56:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9121
IP address blocks: 31.169.64.0/24 maxlen: 24
31.169.65.0/24 maxlen: 24
31.169.66.0/24 maxlen: 24
31.169.67.0/24 maxlen: 24
31.169.69.0/24 maxlen: 24
31.169.70.0/24 maxlen: 24
31.169.71.0/24 maxlen: 24
31.169.72.0/24 maxlen: 24
31.169.77.0/24 maxlen: 24
31.169.78.0/24 maxlen: 24
31.169.81.0/24 maxlen: 24
31.169.82.0/24 maxlen: 24
31.169.92.0/24 maxlen: 24
31.169.93.0/24 maxlen: 24
31.169.94.0/24 maxlen: 24
185.33.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Jun 2025 08:31:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:fc:5d:df:9f:61:1d:eb:8d:71:55:24:04:a5:71:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Jun 10 17:56:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9257ff8eb433fda2cad62c7df151c6c4ebb78373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5a:2b:3c:13:1e:f8:02:f6:e5:51:e7:26:fc:
a0:4e:4c:b9:63:8a:f7:f9:48:25:fe:d3:3e:95:14:
6f:4a:37:ec:ca:f6:bc:41:01:51:48:5f:b6:6b:18:
5b:e1:9d:37:19:28:d7:87:db:a8:d7:dd:b6:c7:7c:
02:9d:1f:dd:ff:d8:d5:cf:cd:c0:a0:8b:14:aa:53:
b3:d5:32:53:22:9c:42:55:71:2b:90:fa:3b:bf:32:
e6:d9:7f:c2:d5:22:7c:cf:ba:9f:34:b9:3d:93:ac:
b7:49:b2:90:8c:46:00:6c:a0:f3:c4:ab:5e:57:76:
c4:0f:92:47:a8:87:cd:ad:de:42:bd:c1:5f:80:b2:
0f:5f:43:3f:65:b5:f8:54:a0:29:5d:ca:df:56:62:
0a:45:72:2e:0d:16:d9:f7:a7:00:c5:42:41:61:8c:
62:e6:1b:f1:48:86:cd:5d:82:7d:13:34:46:4c:e4:
3f:c7:8a:3d:d8:82:88:b7:5a:5b:f0:52:e9:bc:98:
e8:22:1f:78:ee:25:e5:bf:f2:0b:7a:4e:a4:b9:7b:
20:04:f5:cb:15:82:8b:c4:61:63:dc:f1:ad:63:67:
dd:d7:18:d7:c0:18:90:5a:f3:eb:96:f7:47:7b:30:
be:5d:1d:20:86:9a:2b:36:7a:a3:24:f6:37:e8:e7:
43:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:57:FF:8E:B4:33:FD:A2:CA:D6:2C:7D:F1:51:C6:C4:EB:B7:83:73
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/klf_jrQz_aLK1ix98VHGxOu3g3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.64.0/22
31.169.69.0-31.169.72.255
31.169.77.0-31.169.78.255
31.169.81.0-31.169.82.255
31.169.92.0-31.169.94.255
185.33.63.0/24
Signature Algorithm: sha256WithRSAEncryption
79:42:fb:f4:4c:2b:7a:e4:21:91:ed:4b:0f:a8:e0:ae:10:4c:
bb:0a:3c:44:fc:e7:e9:95:9b:5d:a5:69:3b:3d:af:1d:08:89:
66:e1:63:f5:5f:ac:40:33:b8:90:ab:a0:3d:cd:90:38:3c:72:
72:56:3a:e5:f4:e4:b9:cd:54:63:63:2f:63:2d:d0:ae:2b:ff:
a3:48:65:c3:2c:74:13:d6:37:cf:4c:d2:3a:e1:4e:5b:91:e5:
ad:a8:2f:e5:b9:9d:5a:1a:f8:aa:b7:41:b8:48:f9:2a:60:97:
af:fb:88:b6:33:cc:0e:cb:5f:b4:10:24:70:38:3b:ef:e5:91:
f9:51:4a:12:e6:76:20:58:b9:9a:80:d7:d2:2b:32:44:4b:41:
ff:0e:e3:9e:b9:67:f9:69:70:0f:3a:ce:b2:1f:ca:c1:b3:2f:
5a:dd:da:79:3d:f9:4a:9d:f4:93:dc:f1:22:17:2b:53:a3:05:
6e:90:f1:bf:fc:7c:fa:52:4a:d6:78:b0:ac:c2:89:1e:c0:b4:
f1:da:33:19:9b:5e:08:38:05:a7:fb:e2:6e:af:f5:e3:6c:62:
c5:9f:91:2d:5e:16:80:88:b2:f5:78:85:04:ca:78:fe:22:4b:
1d:f5:17:be:49:34:92:00:06:ce:17:af:b2:9c:1f:6a:2a:5e:
5f:7d:e0:7f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:24:37 2025 by rpki-client