Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/95EHATHI6vd_ng_QOCpguczts68.roa
File: 95EHATHI6vd_ng_QOCpguczts68.roa (raw, json)
Hash identifier: tfsgchMiFy3Qo++oCVoqN20RTiG9F7FtlRkUMGFj29E=
Subject key identifier: F7:91:07:01:31:C8:EA:F7:7F:9E:0F:D0:38:2A:60:B9:CC:ED:B3:AF
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 019638FC23EEA3A4F4B4F0BF73EAF145B692
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/95EHATHI6vd_ng_QOCpguczts68.roa
Signing time: Tue 15 Apr 2025 10:26:10 +0000
ROA not before: Tue 15 Apr 2025 10:26:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56582
IP address blocks: 31.169.64.0/24 maxlen: 24
31.169.65.0/24 maxlen: 24
31.169.66.0/24 maxlen: 24
31.169.67.0/24 maxlen: 24
31.169.69.0/24 maxlen: 24
31.169.70.0/24 maxlen: 24
31.169.71.0/24 maxlen: 24
31.169.72.0/24 maxlen: 24
31.169.74.0/24 maxlen: 24
31.169.76.0/24 maxlen: 24
31.169.77.0/24 maxlen: 24
31.169.78.0/24 maxlen: 24
31.169.81.0/24 maxlen: 24
31.169.82.0/24 maxlen: 24
31.169.84.0/24 maxlen: 24
31.169.92.0/24 maxlen: 24
31.169.93.0/24 maxlen: 24
31.169.94.0/24 maxlen: 24
185.33.63.0/24 maxlen: 24
2a00:5740::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 17 Apr 2025 14:07:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:38:fc:23:ee:a3:a4:f4:b4:f0:bf:73:ea:f1:45:b6:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Apr 15 10:26:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f791070131c8eaf77f9e0fd0382a60b9ccedb3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:30:48:29:cb:28:6f:5f:42:e7:f4:9a:fc:4b:
7c:44:1d:68:c5:cb:a7:76:81:3a:d0:1e:d1:0a:96:
2d:0a:ab:70:c4:ab:2b:ca:9d:da:ff:b0:da:f5:7d:
f3:d3:2d:a4:83:bd:77:03:71:f4:53:f0:f6:60:d8:
1b:4b:0e:90:7a:e0:cc:6b:29:0c:33:6c:14:3a:c0:
b8:39:95:78:2c:3a:6a:f6:c4:d3:3f:89:e0:b2:28:
d7:09:79:c8:d7:ea:b3:0b:17:21:1d:9e:49:d3:1b:
38:24:9e:24:53:95:02:fb:5c:80:6c:8f:99:70:f3:
3d:ba:38:c7:f8:3d:a8:93:14:6a:20:f3:a1:fc:01:
be:b9:7d:64:63:2b:3b:ef:9a:04:d0:68:2d:b2:e8:
9d:bc:eb:16:ff:89:6d:18:c3:80:96:2e:da:e5:6c:
4e:af:4b:40:d3:c5:e5:f1:d9:70:76:33:1b:b2:e7:
5a:ea:fa:00:8d:6d:1c:ae:a1:2a:b0:e5:eb:94:6c:
48:e2:af:6c:c6:e4:53:6b:65:f6:ba:48:15:27:4d:
d2:7f:6e:c9:e2:ae:cf:26:0c:26:dc:f9:89:11:e1:
aa:ad:1e:b6:42:b8:4f:ec:56:b2:d1:4a:e4:55:35:
02:be:f8:df:b0:b3:ac:1b:c7:84:13:46:83:b0:25:
59:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:91:07:01:31:C8:EA:F7:7F:9E:0F:D0:38:2A:60:B9:CC:ED:B3:AF
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/95EHATHI6vd_ng_QOCpguczts68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.64.0/22
31.169.69.0-31.169.72.255
31.169.74.0/24
31.169.76.0-31.169.78.255
31.169.81.0-31.169.82.255
31.169.84.0/24
31.169.92.0-31.169.94.255
185.33.63.0/24
IPv6:
2a00:5740::/29
Signature Algorithm: sha256WithRSAEncryption
a5:3c:45:56:70:f2:3e:71:76:cd:a6:a2:bf:cd:a6:71:2b:ed:
90:8c:83:ae:b6:ff:6a:97:ad:fc:68:02:96:e6:cb:34:b9:81:
65:3c:70:a8:2d:cf:88:09:94:46:d1:22:2c:96:e6:bd:5d:27:
06:b8:3c:df:a6:2e:1f:10:9a:bc:28:37:65:72:d1:13:00:61:
af:a1:d5:7c:0b:ee:2e:2d:da:9e:98:17:87:68:ce:c3:27:b8:
16:d7:32:35:56:84:41:c5:3e:8e:88:69:d4:31:55:6c:09:3f:
54:f1:89:c5:dd:03:a2:0f:2e:19:8d:1e:80:97:79:69:86:c3:
11:fa:2b:85:7a:95:d7:92:5c:2b:e1:48:6d:af:32:52:b9:a3:
7f:f6:01:c3:96:a0:36:1e:52:c7:50:ed:d8:de:5e:84:84:c2:
e2:a8:f1:58:94:23:bb:b1:20:92:cd:76:e4:77:af:79:fa:8b:
fb:70:0c:55:84:24:64:e3:14:3c:dc:82:7d:53:44:ba:c6:68:
5a:46:fa:d4:3c:86:3d:ab:13:6b:e8:b3:e1:96:ea:df:e5:9d:
80:fa:58:bd:e4:c4:5f:df:22:f7:c9:82:fc:31:0d:04:22:d3:
74:68:15:f8:af:cd:6f:65:7e:8c:eb:47:92:76:97:6c:e4:52:
11:f4:55:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 23:13:10 2025 by rpki-client