Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/80WA8FpdOJjtQnYCVqkK9Eo0n3I.roa
File: 80WA8FpdOJjtQnYCVqkK9Eo0n3I.roa (raw, json)
Hash identifier: 54ckLzesCNqI3cb15aU+CgHbo6wuqEzp0SGvkf2QDqg=
Subject key identifier: F3:45:80:F0:5A:5D:38:98:ED:42:76:02:56:A9:0A:F4:4A:34:9F:72
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194793A3B27951FC2ACB44F9E521D542741
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/80WA8FpdOJjtQnYCVqkK9Eo0n3I.roa
Signing time: Sat 18 Jan 2025 11:44:06 +0000
ROA not before: Sat 18 Jan 2025 11:44:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215590
IP address blocks: 45.95.3.0/24 maxlen: 24
83.143.113.0/24 maxlen: 24
87.121.98.0/24 maxlen: 24
87.121.218.0/24 maxlen: 24
185.246.222.0/24 maxlen: 24
193.168.196.0/24 maxlen: 24
193.168.197.0/24 maxlen: 24
193.168.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Jan 2025 02:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:79:3a:3b:27:95:1f:c2:ac:b4:4f:9e:52:1d:54:27:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 18 11:44:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f34580f05a5d3898ed42760256a90af44a349f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c2:de:5c:54:a6:eb:30:ef:60:66:b3:0f:fc:
63:e9:0c:e2:51:35:91:48:7a:f2:29:5f:f0:5c:3b:
7e:dd:d0:b9:4c:85:b8:85:0e:de:f9:bf:d1:a2:c2:
10:7a:e7:e1:53:b6:f7:c0:85:00:b1:cb:c3:3e:71:
f8:6b:db:3d:2f:eb:2a:ec:bd:21:ad:9f:0f:73:a5:
d1:ef:fb:74:09:69:d6:5b:81:48:85:8f:07:84:42:
15:cf:50:f5:69:9c:3f:72:16:a6:f8:17:c6:a4:be:
05:dd:0d:8a:db:3a:4a:e7:2d:a3:55:52:52:0c:28:
8a:bc:54:f4:79:fb:49:db:56:0e:4b:24:f9:c7:28:
d1:eb:a4:de:8a:e9:81:5d:59:d4:50:41:67:a5:f2:
bb:96:98:fb:a7:38:70:56:2b:7c:c8:b1:08:b2:db:
6b:4b:9d:09:6b:08:8d:c8:8a:3d:54:2a:ea:b9:0e:
99:cf:66:ca:d4:56:7c:4d:e4:f6:5d:04:c1:54:d6:
7a:4a:83:ef:f7:40:62:49:1c:05:27:45:39:e5:64:
e1:f6:3c:b2:71:02:a3:e7:5c:bb:88:2a:1f:ed:f8:
59:b2:d3:cd:00:c7:0c:6a:3c:8e:b9:29:4d:6f:02:
83:99:a1:79:d3:2a:cc:96:a2:1e:0c:5c:0c:35:b1:
05:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:45:80:F0:5A:5D:38:98:ED:42:76:02:56:A9:0A:F4:4A:34:9F:72
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/80WA8FpdOJjtQnYCVqkK9Eo0n3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.3.0/24
83.143.113.0/24
87.121.98.0/24
87.121.218.0/24
185.246.222.0/24
193.168.196.0/23
193.168.199.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:e2:f5:64:16:e1:8f:83:b0:dd:68:3f:6d:a3:bd:b3:f9:05:
32:38:16:9d:d9:fb:77:7a:95:64:5a:3f:b8:94:9d:ce:63:ba:
ec:27:2e:7c:b0:f6:00:e4:ea:79:56:aa:f8:50:84:88:f8:75:
9f:a6:6e:ba:a5:18:d9:11:60:7f:fa:2d:86:9c:00:55:94:99:
27:24:11:75:81:05:f5:1c:34:98:7f:9b:61:f3:74:4a:a1:b6:
34:57:57:99:bf:5b:1e:4d:66:e3:91:ec:5f:ef:27:64:09:e1:
79:fa:18:bb:03:48:b0:e9:50:4a:3c:e8:ad:32:d6:4a:b0:6e:
ee:2f:13:58:43:98:c0:f8:88:40:88:6b:10:7c:ab:a5:16:11:
b0:11:6e:fd:fc:34:05:c2:1c:ad:1b:7c:a6:c0:1d:64:36:1c:
46:7f:55:3a:c4:c6:1e:1f:44:e7:33:01:4d:28:58:70:4b:6c:
45:46:97:1d:a4:24:2b:c4:cd:7e:dd:8d:42:6c:8c:ee:21:a5:
1a:c0:6a:89:9a:47:36:83:e4:48:82:45:4b:8b:4f:37:5a:b8:
3d:2a:45:9d:b8:62:00:7c:52:9a:c7:54:5f:80:06:8e:28:34:
a2:49:a0:09:f9:ca:ef:a8:95:4b:ac:77:a9:bd:d2:40:2f:39:
d1:12:e4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:17:24 2025 by rpki-client