Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/r-D6kTZvSzw3ipD9HVx2gRnr0IY.roa
File: r-D6kTZvSzw3ipD9HVx2gRnr0IY.roa (raw, json)
Hash identifier: +QGvbiyyvG39HTRFU6CD10Va2mxfiUPyz8XxEoXB6w8=
Subject key identifier: AF:E0:FA:91:36:6F:4B:3C:37:8A:90:FD:1D:5C:76:81:19:EB:D0:86
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 0198D0E9DE862464028B9E384D4F27FA238B
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/r-D6kTZvSzw3ipD9HVx2gRnr0IY.roa
Signing time: Fri 22 Aug 2025 08:34:04 +0000
ROA not before: Fri 22 Aug 2025 08:34:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.42.122.0/24 maxlen: 24
109.122.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 23 Aug 2025 07:10:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d0:e9:de:86:24:64:02:8b:9e:38:4d:4f:27:fa:23:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Aug 22 08:34:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=afe0fa91366f4b3c378a90fd1d5c768119ebd086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ed:5a:93:37:5f:3e:ee:e7:05:5b:f7:f7:65:
88:a9:f1:dd:c8:ec:58:eb:d9:d5:22:3f:1d:43:9e:
36:49:23:69:ea:75:9c:7a:97:f9:4e:2c:1c:f4:ff:
b6:59:80:fd:21:92:19:e5:75:b0:bf:ed:20:77:8a:
6f:e3:a3:5e:e0:b5:24:c4:f2:bf:38:71:6e:b7:cb:
e5:c1:74:f6:69:38:bb:24:48:c5:48:4b:a7:7e:88:
3b:a0:7c:3f:05:4c:42:b4:a9:b0:6b:e6:9a:af:27:
a4:de:62:65:11:32:ff:8e:9a:18:03:9b:1f:55:32:
72:5c:dc:1c:11:bb:ba:8c:b9:8c:18:59:fe:47:53:
fd:ef:2f:a2:20:98:bd:14:82:40:ce:83:5c:d5:c5:
b4:36:f7:a3:39:f1:dd:04:9e:b6:a0:be:22:5e:7b:
9a:93:76:71:ce:04:cf:0b:0d:27:69:9d:39:99:1b:
4e:91:a6:cb:b9:ac:aa:10:e7:0e:cb:c1:ea:86:e6:
af:22:a3:70:76:90:12:7d:88:d5:5a:01:07:12:2b:
98:c9:b6:cc:ca:fa:a9:85:8d:c8:1d:31:50:36:b3:
d9:ce:45:31:1d:9c:3d:fd:c3:9e:08:e0:53:af:44:
b2:1f:70:9a:94:9e:5a:59:66:fb:af:bd:fc:7c:07:
12:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E0:FA:91:36:6F:4B:3C:37:8A:90:FD:1D:5C:76:81:19:EB:D0:86
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/r-D6kTZvSzw3ipD9HVx2gRnr0IY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.122.0/24
109.122.61.0/24
Signature Algorithm: sha256WithRSAEncryption
55:ff:af:17:ae:7b:d4:83:ab:39:1b:db:d7:f2:f7:32:20:8d:
0f:f5:06:54:1f:5a:11:81:76:a6:32:07:90:2a:75:ab:87:88:
a3:f3:f3:fc:8b:9f:08:a9:4b:c2:20:80:35:17:9f:76:33:a7:
83:88:6a:73:cc:9f:ce:38:98:7e:46:11:5d:ee:bc:7b:1f:5c:
b0:e1:59:a0:35:6e:74:83:8d:84:1d:ef:b5:b7:31:aa:4d:99:
f7:80:3d:77:8e:87:86:8f:64:47:39:f0:03:e7:fa:ca:c3:c0:
8d:12:a1:e1:89:7d:6e:6a:a2:5e:af:58:b7:72:8b:f5:ce:16:
b7:71:a6:84:1f:6f:b0:b5:d1:a7:69:b6:0c:9d:f8:e1:c1:08:
37:9e:6c:7a:8d:80:88:fc:f6:a6:6a:36:08:c4:b5:60:bb:b8:
84:79:04:af:06:fb:e6:1f:94:ed:3b:7e:2b:dd:bf:af:df:7e:
31:13:98:03:a9:1b:11:70:80:64:04:4b:54:f8:0b:11:77:09:
28:21:4e:67:6f:35:22:02:cf:09:1f:7f:71:60:dc:c0:4b:28:
c1:b7:2a:5c:03:82:79:71:fb:de:09:e4:35:ea:ae:3e:c0:79:
97:bd:11:23:5b:70:0c:91:6c:f7:b5:af:1b:6c:1c:29:c8:2a:
b1:14:9b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:13:55 2025 by rpki-client