Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cY99hXF3h_UzI1Q3NqW-lPTz3mY.roa
File: cY99hXF3h_UzI1Q3NqW-lPTz3mY.roa (raw, json)
Hash identifier: 45GYCNZwuhcZkKCCXBhuiFQze6T6zDVO+tdTRY4DSWs=
Subject key identifier: 71:8F:7D:85:71:77:87:F5:33:23:54:37:36:A5:BE:94:F4:F3:DE:66
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019428248EB7131BFD0252098A0631F4A4CF
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cY99hXF3h_UzI1Q3NqW-lPTz3mY.roa
Signing time: Thu 02 Jan 2025 17:51:11 +0000
ROA not before: Thu 02 Jan 2025 17:51:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57634
IP address blocks: 31.13.192.0/24 maxlen: 24
31.13.199.0/24 maxlen: 24
31.13.209.0/24 maxlen: 24
85.217.168.0/23 maxlen: 23
87.120.67.0/24 maxlen: 24
87.120.156.0/23 maxlen: 23
93.123.9.0/24 maxlen: 24
94.156.0.0/23 maxlen: 23
94.156.7.0/24 maxlen: 24
94.156.76.0/24 maxlen: 24
94.156.170.0/24 maxlen: 24
94.156.171.0/24 maxlen: 24
212.73.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Jan 2025 08:40:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:8e:b7:13:1b:fd:02:52:09:8a:06:31:f4:a4:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=718f7d85717787f53323543736a5be94f4f3de66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2c:da:00:7d:47:1f:3e:70:d6:51:7a:50:de:
0b:c7:cd:37:49:9f:50:83:bf:cc:9d:6d:77:47:b1:
4f:d5:2f:25:7b:ad:f0:ad:2f:40:c3:f6:b0:c5:83:
7f:b6:0a:95:84:53:8f:b7:a0:8b:10:88:e4:27:a3:
d6:40:e5:76:bd:3b:0e:a6:46:a9:b8:72:3e:da:89:
1f:c7:93:06:8d:df:d5:1f:44:05:fa:5b:c6:04:67:
1f:c7:82:8e:56:5a:c5:41:39:54:32:3a:c5:15:04:
06:80:2f:be:65:2a:12:f6:ca:6c:e4:07:0a:39:71:
e7:31:16:8c:1d:e1:4b:47:af:30:8a:52:13:b3:8b:
bb:bf:f5:a3:7e:c9:fa:e1:49:99:e0:f9:5f:43:38:
1a:26:60:f1:e5:cb:d6:a7:59:f6:a2:62:b7:d7:45:
61:b5:aa:7b:79:aa:c3:bf:37:c9:30:d9:91:b8:1e:
a3:8f:6b:ff:25:53:09:92:4d:4c:76:b2:ae:fe:96:
1e:9f:e3:d9:96:c9:6a:05:4d:db:ad:e7:f8:88:35:
fd:ab:b6:24:8d:1c:c0:81:48:12:11:e9:0b:53:bb:
44:76:91:cc:e6:3b:52:9d:98:e4:39:d0:d9:39:2b:
6c:b7:ab:a1:26:0c:62:bb:5c:89:89:52:0a:06:9f:
b5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:8F:7D:85:71:77:87:F5:33:23:54:37:36:A5:BE:94:F4:F3:DE:66
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cY99hXF3h_UzI1Q3NqW-lPTz3mY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.192.0/24
31.13.199.0/24
31.13.209.0/24
85.217.168.0/23
87.120.67.0/24
87.120.156.0/23
93.123.9.0/24
94.156.0.0/23
94.156.7.0/24
94.156.76.0/24
94.156.170.0/23
212.73.151.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:a8:fd:f8:41:cc:15:53:63:33:68:27:ab:ec:1d:81:07:72:
62:99:30:4e:ce:9e:a5:90:86:03:30:f6:79:52:17:d9:11:07:
c4:ee:8b:b8:94:7e:0a:3d:0c:27:0b:9d:e9:99:a8:9a:90:ef:
18:73:3e:61:77:ba:45:94:a7:b4:e4:e7:11:72:21:3a:6d:1d:
bf:cf:04:c1:cb:13:ad:96:40:10:c0:61:5c:c5:0c:bc:22:bd:
c2:60:46:c5:9e:46:21:78:4a:1c:81:45:41:e8:ed:c9:59:78:
d2:c4:de:23:38:a5:ed:0f:fb:a5:77:5a:32:db:fa:51:12:30:
eb:98:23:c0:24:a9:f9:8a:a7:4c:bd:e7:e0:cb:9c:7b:8a:98:
35:92:58:e4:43:14:2a:3b:54:6a:a6:60:5d:61:cf:5e:e8:0f:
ca:a2:60:04:ae:d2:81:58:ca:0a:13:d3:89:5d:a2:89:6a:e8:
9c:18:66:d8:cf:79:84:a0:23:2c:4b:3d:6d:12:9f:0b:39:7d:
10:9a:3e:0f:c1:50:ff:ba:71:c2:db:3c:50:9c:eb:fa:c8:4e:
25:bc:5c:5b:21:80:f4:2b:e9:4b:af:0d:f2:5f:39:c4:80:d3:
1c:7b:15:06:15:38:7d:8b:8c:01:bf:c6:9c:ac:7e:81:ba:35:
c2:2d:80:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:35:27 2025 by rpki-client