Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/r6znSszhymbap-62dKREP6GyUbY.roa
File: r6znSszhymbap-62dKREP6GyUbY.roa (raw, json)
Hash identifier: /cLE47BFtliZc6ZKlNbV09u+uGWg02H3K1TV7zAZDug=
Subject key identifier: AF:AC:E7:4A:CC:E1:CA:66:DA:A7:EE:B6:74:A4:44:3F:A1:B2:51:B6
Certificate issuer: /CN=c39bc30a748960b227a1bf26216067edd05c1a7d
Certificate serial: 01942B8E139557FDB69C3194C4BDBBFE3027
Authority key identifier: C3:9B:C3:0A:74:89:60:B2:27:A1:BF:26:21:60:67:ED:D0:5C:1A:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5vDCnSJYLInob8mIWBn7dBcGn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/r6znSszhymbap-62dKREP6GyUbY.roa
Signing time: Fri 03 Jan 2025 09:45:18 +0000
ROA not before: Fri 03 Jan 2025 09:45:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51683
IP address blocks: 31.40.241.0/24 maxlen: 24
31.40.243.0/24 maxlen: 24
185.9.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 Jan 2025 09:56:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2b:8e:13:95:57:fd:b6:9c:31:94:c4:bd:bb:fe:30:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c39bc30a748960b227a1bf26216067edd05c1a7d
Validity
Not Before: Jan 3 09:45:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aface74acce1ca66daa7eeb674a4443fa1b251b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:91:50:a8:c3:43:19:a0:4c:f2:58:c9:59:e5:
3f:aa:8a:dc:0b:0c:7d:22:a5:3f:4e:06:bd:9b:46:
f5:ae:e2:d1:ff:4d:67:41:53:6b:57:38:43:79:12:
28:7d:ed:64:f2:39:cd:1e:56:3e:36:9a:f1:41:c4:
93:20:21:e2:d8:2a:eb:ad:08:b6:dc:a0:38:d1:51:
bd:62:0d:94:74:9f:18:2a:b3:75:0c:26:ed:18:22:
64:5b:22:7e:7e:f5:38:c5:68:c6:2b:ee:d8:3a:84:
90:1d:48:77:fd:84:48:91:0a:9e:2b:96:cb:53:b0:
17:80:de:82:ce:a2:d8:ef:05:4e:86:c2:a7:15:5c:
40:5d:82:cc:3a:87:4f:3f:1f:bd:29:e2:63:a2:c0:
ed:57:23:44:ff:c7:65:2a:46:35:7a:07:83:29:7f:
86:d3:38:d9:7e:49:49:0e:af:00:f8:d1:4c:cf:0b:
d7:c6:dc:b0:3e:52:c2:e4:55:d0:64:8f:3a:49:cd:
10:80:4c:32:38:ea:08:30:f2:f3:b6:3d:ea:4a:d0:
4b:3c:3a:4b:4b:da:91:6d:53:fd:e5:d1:0c:35:2c:
06:60:3b:85:5c:ec:21:19:ea:d1:ba:e2:d8:f8:30:
e5:fc:9c:1f:3c:2b:aa:fe:16:45:cb:8d:1c:09:2a:
d1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AC:E7:4A:CC:E1:CA:66:DA:A7:EE:B6:74:A4:44:3F:A1:B2:51:B6
X509v3 Authority Key Identifier:
keyid:C3:9B:C3:0A:74:89:60:B2:27:A1:BF:26:21:60:67:ED:D0:5C:1A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5vDCnSJYLInob8mIWBn7dBcGn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/r6znSszhymbap-62dKREP6GyUbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.241.0/24
31.40.243.0/24
185.9.138.0/24
Signature Algorithm: sha256WithRSAEncryption
90:68:ef:f3:54:1d:ce:93:cb:15:10:17:86:8f:c1:1a:54:2e:
dd:5c:a5:ea:6f:72:70:de:28:de:3c:d5:ab:55:97:67:a2:7b:
44:16:47:fa:11:d4:f7:66:c4:e9:73:11:41:0a:3b:ec:23:48:
ab:1b:2c:bc:39:a0:1f:c3:f9:57:50:60:1d:72:ec:66:a9:33:
a7:72:1a:11:eb:75:57:a8:7b:82:23:58:10:c9:61:67:6e:92:
71:db:99:b4:7f:70:95:4a:35:3e:f8:00:8e:1a:0c:7a:c8:1b:
63:b3:59:c0:bd:ed:db:a1:25:c8:02:be:33:cb:49:e6:5e:41:
3e:b6:f9:63:32:37:98:16:76:f5:2a:fe:f6:54:55:6d:71:4f:
f5:a9:b4:8e:c0:39:4d:a4:74:25:66:d8:1c:54:70:76:d2:e6:
d8:51:67:14:e6:1f:88:71:c1:4e:a3:30:29:0b:61:ca:a0:f5:
01:05:ce:ef:5c:6f:d7:79:84:aa:ee:de:1a:44:06:dd:d1:50:
ef:52:37:7d:17:98:68:ba:b1:78:ec:f7:cf:88:40:78:de:0d:
f3:85:db:d1:5b:4d:d0:29:45:8c:10:b8:02:5f:81:cf:55:30:
7c:e0:bb:9c:04:12:8d:e9:f7:c5:d0:ee:91:f4:43:f4:cf:ca:
c9:78:49:d7
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQrjhOVV/22nDGUxL27/jAnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzOWJjMzBhNzQ4OTYwYjIyN2ExYmYyNjIxNjA2N2VkZDA1
YzFhN2QwHhcNMjUwMTAzMDk0NTE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZmFjZTc0YWNjZTFjYTY2ZGFhN2VlYjY3NGE0NDQzZmExYjI1MWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5FQqMNDGaBM8ljJWeU/qorcCwx9
IqU/Tga9m0b1ruLR/01nQVNrVzhDeRIofe1k8jnNHlY+NprxQcSTICHi2CrrrQi2
3KA40VG9Yg2UdJ8YKrN1DCbtGCJkWyJ+fvU4xWjGK+7YOoSQHUh3/YRIkQqeK5bL
U7AXgN6CzqLY7wVOhsKnFVxAXYLMOodPPx+9KeJjosDtVyNE/8dlKkY1egeDKX+G
0zjZfklJDq8A+NFMzwvXxtywPlLC5FXQZI86Sc0QgEwyOOoIMPLztj3qStBLPDpL
S9qRbVP95dEMNSwGYDuFXOwhGerRuuLY+DDl/JwfPCuq/hZFy40cCSrRNQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFK+s50rM4cpm2qfutnSkRD+hslG2MB8GA1UdIwQY
MBaAFMObwwp0iWCyJ6G/JiFgZ+3QXBp9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzV2RENuU0pZTElub2I4bUlXQm43ZEJjR24wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC80OTljNDEtOTQ1ZS00ZGEzLWE0OTgt
OTIwOWY3YjdlZjgxLzEvcjZ6blNzemh5bWJhcC02MmRLUkVQNkd5VWJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC80OTljNDEtOTQ1ZS00ZGEzLWE0OTgtOTIwOWY3YjdlZjgx
LzEvdzV2RENuU0pZTElub2I4bUlXQm43ZEJjR24wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHyjxAwQA
HyjzAwQAuQmKMA0GCSqGSIb3DQEBCwUAA4IBAQCQaO/zVB3Ok8sVEBeGj8EaVC7d
XKXqb3Jw3ijePNWrVZdnontEFkf6EdT3ZsTpcxFBCjvsI0irGyy8OaAfw/lXUGAd
cuxmqTOnchoR63VXqHuCI1gQyWFnbpJx25m0f3CVSjU++ACOGgx6yBtjs1nAve3b
oSXIAr4zy0nmXkE+tvljMjeYFnb1Kv72VFVtcU/1qbSOwDlNpHQlZtgcVHB20ubY
UWcU5h+IccFOozApC2HKoPUBBc7vXG/XeYSq7t4aRAbd0VDvUjd9F5hourF47PfP
iEB43g3zhdvRW03QKUWMELgCX4HPVTB84LucBBKN6ffF0O6R9EP0z8rJeEnX
-----END CERTIFICATE-----
Generated at Mon May 12 14:43:14 2025 by rpki-client