Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tmPCb8Jaj6SZfMVeczJPJmGreTU.roa
File: tmPCb8Jaj6SZfMVeczJPJmGreTU.roa (raw, json)
Hash identifier: 6PF0PCRuJdf9thlL7pY7vqtldSamv4llwEa6gxguvLI=
Subject key identifier: B6:63:C2:6F:C2:5A:8F:A4:99:7C:C5:5E:73:32:4F:26:61:AB:79:35
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0195A182AB3CA9259F2BD94CD873662A8ECB
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tmPCb8Jaj6SZfMVeczJPJmGreTU.roa
Signing time: Mon 17 Mar 2025 00:30:50 +0000
ROA not before: Mon 17 Mar 2025 00:30:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.13.211.0/24 maxlen: 24
45.12.253.0/24 maxlen: 24
45.81.39.0/24 maxlen: 24
87.120.68.0/23 maxlen: 24
87.121.60.0/24 maxlen: 24
87.121.61.0/24 maxlen: 24
93.123.74.0/23 maxlen: 24
93.123.119.0/24 maxlen: 24
94.156.253.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
178.215.227.0/24 maxlen: 24
185.252.160.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Mar 2025 12:36:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a1:82:ab:3c:a9:25:9f:2b:d9:4c:d8:73:66:2a:8e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 17 00:30:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b663c26fc25a8fa4997cc55e73324f2661ab7935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:03:31:83:98:8d:1a:9a:ba:d8:ad:35:78:fc:
d0:6b:21:a3:55:e1:09:ce:51:6a:d2:8f:62:ed:0b:
31:ce:d8:e4:1c:f1:40:a7:7b:00:87:74:68:5c:bb:
2c:1c:88:4a:36:c3:9c:d0:f4:a4:9b:cf:83:90:6b:
be:46:e5:f1:68:8f:3b:cf:6a:d2:7d:40:91:2f:64:
23:ad:b6:47:44:8b:2f:97:0f:54:aa:94:aa:6f:3d:
19:ff:f7:fe:3f:aa:5c:fb:f3:c4:2c:62:cd:ea:b2:
b4:91:fa:fe:57:cd:af:3f:af:ea:23:83:89:c6:ba:
7c:4e:ef:92:62:db:ec:4a:32:dc:1b:8e:fe:8c:d5:
83:c8:16:af:6d:47:b4:50:2c:7d:47:37:f2:d1:11:
bf:56:fb:42:33:d1:ee:f0:50:ae:8f:e1:4f:ec:b7:
66:93:e9:52:02:6f:6f:70:33:b8:4a:5d:cf:15:2f:
59:c5:b7:12:2a:72:2b:74:5d:ec:1d:5e:a5:93:a7:
79:73:05:b2:ec:f9:a6:1a:e5:53:b4:bd:7f:35:da:
bf:96:83:79:17:55:12:72:06:c4:64:7f:ba:3b:72:
92:48:26:c8:bb:23:35:75:1f:07:fb:45:76:82:29:
44:30:1d:a1:51:fa:f4:f6:c6:0a:80:9f:f0:5a:1b:
c7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:63:C2:6F:C2:5A:8F:A4:99:7C:C5:5E:73:32:4F:26:61:AB:79:35
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tmPCb8Jaj6SZfMVeczJPJmGreTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.211.0/24
45.12.253.0/24
45.81.39.0/24
87.120.68.0/23
87.121.60.0/23
93.123.74.0/23
93.123.119.0/24
94.156.253.0/24
147.78.102.0/24
178.215.227.0/24
185.252.160.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:0c:29:7b:67:d2:72:41:c4:dc:0c:42:8d:34:ce:ca:5d:ea:
b2:1e:8a:d3:8e:90:09:e6:7c:ff:ce:e1:36:5e:ec:0d:49:f4:
38:8a:bf:80:3d:84:f5:87:ee:59:f1:bf:5b:63:69:fc:6d:80:
04:0d:6e:fe:12:3b:d2:a7:e5:c3:91:5d:54:ac:38:17:bd:f7:
d6:c8:61:43:bd:57:83:91:8d:d3:f9:e6:1c:2a:8a:49:6b:e6:
32:11:bb:53:e6:dc:d2:cd:95:38:b0:e5:bd:b3:d2:da:d6:cd:
83:b7:32:c5:5a:c8:27:bc:6f:cc:80:f5:5e:e2:42:cc:fe:a9:
06:d5:f5:85:44:e5:7c:0d:eb:a1:f4:28:b0:f3:4e:49:82:a8:
2d:fd:7b:c6:14:35:7f:f8:91:46:1b:5f:9c:b6:b3:cd:0a:d9:
e1:28:50:1c:3a:6a:fc:14:c0:7b:33:a6:4d:bc:e9:4e:43:46:
4d:1f:f1:cf:95:2d:72:c3:c3:70:96:c7:8d:5f:70:a4:08:03:
90:a0:2d:23:e7:1e:c7:fc:8b:dc:2e:31:10:74:bf:bf:2c:47:
53:08:1f:e7:a7:6e:03:fc:3e:46:f7:82:96:3d:b2:55:0d:8f:
87:dd:a3:e8:53:44:40:88:84:e5:43:15:da:f8:d3:6a:73:ef:
ec:0b:9b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:09:24 2025 by rpki-client