Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/h64vjtRKqlLrxaMpg6CpZx-WvbQ.roa
File: h64vjtRKqlLrxaMpg6CpZx-WvbQ.roa (raw, json)
Hash identifier: 3Aj3rmfBcAt1BC2BFL0nJBCv4IKIJRFYFXhekcQ1nBU=
Subject key identifier: 87:AE:2F:8E:D4:4A:AA:52:EB:C5:A3:29:83:A0:A9:67:1F:96:BD:B4
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 019420D59DC42E76CC777CC3475F52F2063D
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/h64vjtRKqlLrxaMpg6CpZx-WvbQ.roa
Signing time: Wed 01 Jan 2025 07:47:37 +0000
ROA not before: Wed 01 Jan 2025 07:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 80.12.71.0/24 maxlen: 32
80.12.76.0/24 maxlen: 24
80.12.79.0/24 maxlen: 24
80.12.96.0/22 maxlen: 24
80.12.96.0/23 maxlen: 24
80.12.98.0/24 maxlen: 24
81.52.128.0/21 maxlen: 24
81.52.136.0/22 maxlen: 24
81.52.140.0/23 maxlen: 24
81.52.160.0/24 maxlen: 24
81.52.166.0/23 maxlen: 24
81.52.168.0/23 maxlen: 24
81.52.176.0/20 maxlen: 24
81.52.190.0/24 maxlen: 24
81.52.202.0/24 maxlen: 24
81.52.236.0/22 maxlen: 24
90.84.48.0/20 maxlen: 24
90.84.128.0/20 maxlen: 24
90.84.148.0/24 maxlen: 24
90.84.151.0/24 maxlen: 24
90.84.255.0/24 maxlen: 24
193.251.128.0/19 maxlen: 24
193.251.148.0/23 maxlen: 23
193.251.160.0/20 maxlen: 24
193.251.169.0/24 maxlen: 24
193.251.220.0/22 maxlen: 24
193.251.240.0/20 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Mar 2025 12:50:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:9d:c4:2e:76:cc:77:7c:c3:47:5f:52:f2:06:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 07:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87ae2f8ed44aaa52ebc5a32983a0a9671f96bdb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1c:ab:a8:5b:a5:45:95:0d:f7:cd:8c:24:60:
59:13:75:5f:18:06:ab:e0:bc:4e:85:8c:61:0c:70:
76:b3:dc:30:6a:dd:3e:b2:27:66:87:b9:44:da:01:
eb:5b:1a:d2:cc:f0:d0:06:b9:5a:a7:b8:99:75:8f:
9b:eb:6b:09:8f:03:5d:e9:30:cc:70:c9:50:97:b1:
fe:61:4f:01:25:ed:ff:1b:01:1c:7d:ba:43:61:3e:
e3:13:cb:c3:56:8d:e0:38:b4:c4:15:66:9a:ac:d3:
30:42:93:b5:ee:59:23:e5:1c:b3:b7:66:4e:88:ba:
65:3a:35:c9:a4:fa:ba:b8:6d:93:c2:8a:a6:c4:6c:
b7:55:00:13:d5:ff:26:1d:c9:8a:20:48:cb:d6:80:
93:19:60:5f:88:bb:82:ab:28:ba:3c:a8:28:3d:a0:
f5:be:68:44:90:86:e2:35:fc:cd:ba:26:6b:a0:ee:
18:d0:28:fa:3e:95:db:f4:20:7b:77:f9:06:df:e2:
0b:2d:e4:cf:5b:72:11:04:e0:5b:4d:e9:2b:80:a3:
bd:1e:1a:c1:6c:18:7d:0b:6c:25:c6:58:d2:d9:32:
0f:f2:fd:35:7b:15:9c:d9:9b:66:4e:32:6b:3c:2a:
00:4d:15:42:72:f4:da:2e:e8:ca:f1:e4:6f:05:be:
3b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:AE:2F:8E:D4:4A:AA:52:EB:C5:A3:29:83:A0:A9:67:1F:96:BD:B4
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/h64vjtRKqlLrxaMpg6CpZx-WvbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.12.71.0/24
80.12.76.0/24
80.12.79.0/24
80.12.96.0/22
81.52.128.0-81.52.141.255
81.52.160.0/24
81.52.166.0-81.52.169.255
81.52.176.0/20
81.52.202.0/24
81.52.236.0/22
90.84.48.0/20
90.84.128.0/20
90.84.148.0/24
90.84.151.0/24
90.84.255.0/24
193.251.128.0-193.251.175.255
193.251.220.0/22
193.251.240.0/20
Signature Algorithm: sha256WithRSAEncryption
24:12:30:30:e5:3b:c8:90:9a:01:de:a8:0f:62:14:38:2f:fe:
14:8d:5d:16:c9:fe:38:8e:04:79:e7:30:68:55:d3:2a:81:03:
e0:57:56:93:ea:13:57:23:ab:be:46:bc:2b:cd:bf:08:06:2c:
f1:4f:08:1a:fd:06:92:40:17:3f:c1:bf:56:c4:ef:69:7e:15:
ca:8a:e6:b5:bd:df:ff:b7:32:a5:47:2f:8c:1d:98:e5:39:65:
30:18:db:2f:b8:32:e6:df:3b:19:3f:c3:63:e8:3e:09:7e:38:
10:fb:43:e3:ab:3c:5c:16:94:2e:8f:1f:2e:71:74:dd:f8:ee:
05:58:6f:e9:9f:bb:32:2a:b8:92:84:2e:62:28:ab:af:ba:5c:
8b:a1:a4:28:c2:01:a6:37:09:ec:27:b9:e6:ea:fd:d8:a1:38:
a4:d8:9a:a9:31:6e:e5:98:cf:06:94:05:3e:d5:d4:ae:e4:83:
7c:8f:56:29:c1:57:28:eb:86:53:91:b9:4a:e2:42:a7:23:98:
b4:f8:80:f6:1c:18:39:90:3c:4e:58:c5:71:79:01:98:02:c9:
c0:b5:b4:81:b1:c5:15:54:79:b7:31:c4:99:e6:fb:2f:02:29:
31:52:76:d8:21:92:8f:97:7b:21:64:ed:89:76:c5:57:f7:3a:
62:aa:b8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 04:46:25 2025 by rpki-client