Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/yqBsJCbYo14b4k41uhIUP635sl8.roa
File: yqBsJCbYo14b4k41uhIUP635sl8.roa (raw, json)
Hash identifier: jEcgRL1oCm19sQ3T0Q+NFllPwKX7ONAp4rpvAHACqzE=
Subject key identifier: CA:A0:6C:24:26:D8:A3:5E:1B:E2:4E:35:BA:12:14:3F:AD:F9:B2:5F
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 01976364C509D03C4E80E065B45F8CD3A8A0
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/yqBsJCbYo14b4k41uhIUP635sl8.roa
Signing time: Thu 12 Jun 2025 09:07:17 +0000
ROA not before: Thu 12 Jun 2025 09:07:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9121
IP address blocks: 31.169.64.0/24 maxlen: 24
31.169.65.0/24 maxlen: 24
31.169.66.0/24 maxlen: 24
31.169.67.0/24 maxlen: 24
31.169.69.0/24 maxlen: 24
31.169.70.0/24 maxlen: 24
31.169.71.0/24 maxlen: 24
31.169.72.0/24 maxlen: 24
31.169.77.0/24 maxlen: 24
31.169.78.0/24 maxlen: 24
31.169.79.0/24 maxlen: 24
31.169.81.0/24 maxlen: 24
31.169.82.0/24 maxlen: 24
31.169.84.0/24 maxlen: 24
31.169.85.0/24 maxlen: 24
31.169.87.0/24 maxlen: 24
31.169.92.0/24 maxlen: 24
31.169.93.0/24 maxlen: 24
31.169.94.0/24 maxlen: 24
185.33.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Jun 2025 09:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:64:c5:09:d0:3c:4e:80:e0:65:b4:5f:8c:d3:a8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Jun 12 09:07:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=caa06c2426d8a35e1be24e35ba12143fadf9b25f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:af:a0:b8:6f:9c:78:0e:96:be:f6:7b:54:28:
61:14:30:ae:c2:94:63:27:bd:d1:77:54:3d:52:34:
7e:23:bf:9c:77:23:78:78:f8:ff:c2:47:f6:b8:af:
63:40:92:a2:15:8f:9f:6e:0c:0e:70:3e:2c:9c:d8:
72:af:4a:5d:9d:a9:66:bd:3e:0a:9e:81:3e:0d:b7:
b7:a3:b0:2a:08:c7:5d:65:09:fd:01:35:b8:af:55:
53:e0:23:d6:b4:6e:f7:af:16:8c:86:66:d1:f9:be:
eb:3b:bf:67:61:48:08:6d:8a:82:bd:d4:08:40:bd:
86:1b:d7:97:70:c6:aa:13:43:30:db:f9:24:97:de:
44:d1:61:79:65:e8:c9:31:63:0e:7f:a0:37:3f:49:
1c:99:83:20:17:06:2e:0c:5e:7c:ff:82:84:1f:2a:
3c:74:29:b4:30:51:cb:70:36:a2:71:fb:8c:4a:ad:
40:8d:86:19:f6:16:00:70:d5:e8:6e:36:40:6a:83:
2c:e5:4d:e1:51:e7:a7:63:17:1b:5d:5b:73:c1:1b:
c4:63:35:57:05:20:e5:bc:08:0f:b1:00:ce:cd:e0:
81:25:3f:64:28:57:a7:48:75:b2:ad:d8:f1:d3:6d:
28:9e:34:65:40:13:94:d5:46:dd:82:b0:3e:d6:55:
2a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A0:6C:24:26:D8:A3:5E:1B:E2:4E:35:BA:12:14:3F:AD:F9:B2:5F
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/yqBsJCbYo14b4k41uhIUP635sl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.64.0/22
31.169.69.0-31.169.72.255
31.169.77.0-31.169.79.255
31.169.81.0-31.169.82.255
31.169.84.0/23
31.169.87.0/24
31.169.92.0-31.169.94.255
185.33.63.0/24
Signature Algorithm: sha256WithRSAEncryption
69:70:bf:60:ac:bd:be:5f:45:b0:c5:67:d3:7a:8b:18:c7:4f:
7b:ab:e8:78:94:0c:0a:d0:d9:2e:50:e1:8d:64:58:43:97:d8:
26:3b:cb:68:bc:a6:79:5d:33:2e:35:b2:b5:76:b1:95:e8:4b:
80:8d:e7:e8:31:02:06:25:c0:7e:f9:e8:19:85:ad:b6:2d:24:
75:f7:26:a0:dd:e9:84:bc:b1:1c:97:89:3a:8c:9b:12:7e:88:
0a:83:8b:5d:56:c6:6a:c3:03:aa:6b:90:84:c7:66:d9:af:8a:
fc:cf:3c:0b:95:a6:6a:33:d5:81:61:ac:ab:9d:79:99:f3:9f:
7f:2c:77:93:7d:f0:03:19:5d:43:c1:9e:9f:c1:f4:44:b4:9e:
e2:60:bd:c6:9f:0a:6f:74:f0:fc:1d:72:58:23:37:e8:38:c5:
04:2b:ff:34:ac:4e:f9:70:ff:87:b8:7f:ac:17:2d:c6:b3:31:
99:8e:27:4c:a2:c9:0e:99:56:dc:96:e0:d4:37:55:af:15:f9:
03:7f:62:50:70:18:4d:3a:6f:65:b4:de:a4:51:3a:09:3b:ba:
35:75:01:b3:75:04:3b:30:49:77:fa:d2:2b:b0:fb:07:c9:ad:
ad:f9:ce:61:7a:87:f2:96:8e:a9:e8:51:40:c6:71:50:03:d1:
2f:2e:97:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:49:09 2025 by rpki-client