Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/kOhkMzmKgGHT84SYE8BWN8YWz7g.roa
File: kOhkMzmKgGHT84SYE8BWN8YWz7g.roa (raw, json)
Hash identifier: H+kyYRkmKeuYnw1t28c/1lkmvnLgzMjqYWtpXrsFc54=
Subject key identifier: 90:E8:64:33:39:8A:80:61:D3:F3:84:98:13:C0:56:37:C6:16:CF:B8
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01955CA87A0BF02A0240CFF394C033BC9C72
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/kOhkMzmKgGHT84SYE8BWN8YWz7g.roa
Signing time: Mon 03 Mar 2025 15:38:19 +0000
ROA not before: Mon 03 Mar 2025 15:38:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 91.194.55.0/24 maxlen: 24
93.190.12.0/24 maxlen: 24
93.190.13.0/24 maxlen: 24
160.20.108.0/24 maxlen: 24
160.20.109.0/24 maxlen: 24
185.85.188.0/24 maxlen: 24
185.86.4.0/24 maxlen: 24
185.86.6.0/24 maxlen: 24
185.86.7.0/24 maxlen: 24
185.86.12.0/24 maxlen: 24
185.86.14.0/24 maxlen: 24
185.86.15.0/24 maxlen: 24
185.86.152.0/24 maxlen: 24
185.86.155.0/24 maxlen: 24
185.87.120.0/24 maxlen: 24
185.88.172.0/24 maxlen: 24
185.88.173.0/24 maxlen: 24
185.88.174.0/24 maxlen: 24
185.88.175.0/24 maxlen: 24
185.98.61.0/24 maxlen: 24
185.98.62.0/24 maxlen: 24
185.98.63.0/24 maxlen: 24
185.141.33.0/24 maxlen: 24
185.141.34.0/24 maxlen: 24
185.141.35.0/24 maxlen: 24
185.184.24.0/24 maxlen: 24
185.184.25.0/24 maxlen: 24
185.184.26.0/24 maxlen: 24
185.184.27.0/24 maxlen: 24
185.185.232.0/24 maxlen: 24
185.185.233.0/24 maxlen: 24
185.185.234.0/24 maxlen: 24
185.243.180.0/24 maxlen: 24
185.243.181.0/24 maxlen: 24
185.243.182.0/24 maxlen: 24
185.243.183.0/24 maxlen: 24
185.249.200.0/24 maxlen: 24
185.249.201.0/24 maxlen: 24
185.249.202.0/24 maxlen: 24
185.249.203.0/24 maxlen: 24
185.250.210.0/24 maxlen: 24
185.254.28.0/24 maxlen: 24
185.254.29.0/24 maxlen: 24
185.254.236.0/24 maxlen: 24
185.254.237.0/24 maxlen: 24
185.254.238.0/24 maxlen: 24
185.254.239.0/24 maxlen: 24
193.35.152.0/24 maxlen: 24
193.160.140.0/24 maxlen: 24
193.160.141.0/24 maxlen: 24
193.160.142.0/24 maxlen: 24
193.160.143.0/24 maxlen: 24
193.223.104.0/24 maxlen: 24
193.223.105.0/24 maxlen: 24
193.223.106.0/24 maxlen: 24
193.223.107.0/24 maxlen: 24
2a05:bf00::/29 maxlen: 29
2a07:e700::/29 maxlen: 29
2a0b:2780::/29 maxlen: 29
2a0d:49c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 03 Mar 2025 15:41:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5c:a8:7a:0b:f0:2a:02:40:cf:f3:94:c0:33:bc:9c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Mar 3 15:38:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90e86433398a8061d3f3849813c05637c616cfb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f2:d8:b2:80:38:62:86:1c:6b:c1:8d:b9:40:
c3:0f:59:fd:10:e5:94:42:fc:80:f6:ac:d9:3b:84:
86:ff:89:45:46:2a:2e:8c:4e:ae:5c:d9:76:a3:dc:
25:7e:91:6c:f2:06:cf:f8:33:05:73:7c:3d:22:bb:
66:85:4a:e4:05:0c:8e:d5:63:a9:5d:3b:7d:52:dd:
f6:01:9a:dd:4e:a6:d1:d7:ed:57:c4:ff:7b:a0:55:
3d:08:0f:bf:01:f6:cd:50:8a:32:bc:fe:6d:23:77:
3b:63:cb:a9:7a:1f:ac:99:6a:c9:26:34:52:10:d2:
2f:c1:6e:a3:e0:ae:48:45:78:25:dd:19:63:24:b3:
ab:3b:bf:74:26:c0:72:ca:b1:1c:d4:2f:87:fe:ef:
58:89:9a:66:bf:4c:e4:dc:32:7b:18:44:6d:a5:eb:
e1:45:06:90:c8:f8:55:a6:ca:f2:ba:61:b5:9f:c3:
a8:16:a2:f1:a3:ae:4f:c5:f3:95:7b:bf:40:ae:8a:
62:01:5e:52:d5:30:6d:cc:b1:1b:32:f3:53:da:45:
69:22:15:c3:ea:9a:37:d3:2b:28:86:3d:07:2a:1a:
30:31:95:d6:19:e1:5d:f8:0d:32:fc:ec:77:42:c8:
1f:80:bf:6a:f7:56:75:34:22:d8:65:63:32:ac:17:
b6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E8:64:33:39:8A:80:61:D3:F3:84:98:13:C0:56:37:C6:16:CF:B8
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/kOhkMzmKgGHT84SYE8BWN8YWz7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.55.0/24
93.190.12.0/23
160.20.108.0/23
185.85.188.0/24
185.86.4.0/24
185.86.6.0/23
185.86.12.0/24
185.86.14.0/23
185.86.152.0/24
185.86.155.0/24
185.87.120.0/24
185.88.172.0/22
185.98.61.0-185.98.63.255
185.141.33.0-185.141.35.255
185.184.24.0/22
185.185.232.0-185.185.234.255
185.243.180.0/22
185.249.200.0/22
185.250.210.0/24
185.254.28.0/23
185.254.236.0/22
193.35.152.0/24
193.160.140.0/22
193.223.104.0/22
IPv6:
2a05:bf00::/29
2a07:e700::/29
2a0b:2780::/29
2a0d:49c0::/29
Signature Algorithm: sha256WithRSAEncryption
7f:5f:26:8e:00:e5:8b:a6:c0:63:1c:f7:69:26:12:14:ee:a8:
5e:89:50:5b:ff:09:ce:2b:98:fb:84:24:41:0b:94:9b:5a:4d:
f7:a8:45:f4:10:e5:99:6d:0f:cf:d4:b7:a3:53:e0:17:7a:40:
66:f2:44:a0:54:d0:d9:ff:66:76:66:2b:d9:67:db:e8:c4:26:
ff:01:19:2c:db:44:5d:d2:0b:72:e7:2d:fe:c1:bd:11:c5:24:
b2:ff:0f:84:45:45:d8:45:3e:dc:95:ca:5b:33:c4:bc:52:52:
ed:d3:ac:41:1d:22:08:33:84:fc:1e:bf:3a:53:6b:09:1c:6d:
59:a5:f5:9e:d0:b6:78:85:a1:23:4f:99:7f:51:76:8f:ab:b6:
1d:b4:20:b8:fc:22:e0:ba:a6:50:d6:05:40:6e:9a:d3:f6:b2:
90:bd:13:71:85:1e:01:5e:6c:02:a1:14:0d:e3:83:3b:fd:70:
b5:4a:52:ae:0a:7f:41:d3:46:6c:75:4d:27:f9:ec:3f:10:12:
93:46:48:58:17:6e:3f:d1:66:64:94:07:37:13:05:30:af:8e:
5d:70:7a:fd:62:9b:c1:4d:14:8a:e4:9e:5a:fd:17:05:f5:87:
86:ed:3e:d0:f7:fe:88:5d:dd:02:52:f8:09:13:9c:9d:d5:f7:
4a:e1:13:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:27:30 2025 by rpki-client