Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CknTsJQUHM6UUyKksuy_ssF8Qz8.roa
File: CknTsJQUHM6UUyKksuy_ssF8Qz8.roa (raw, json)
Hash identifier: Way1R+RtuhIpkUrjyJRDHXTMBd7SbPlZpmiGVOfAzTQ=
Subject key identifier: 0A:49:D3:B0:94:14:1C:CE:94:53:22:A4:B2:EC:BF:B2:C1:7C:43:3F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0195665C4E621D8183B366DC7C0BC36F4BA7
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CknTsJQUHM6UUyKksuy_ssF8Qz8.roa
Signing time: Wed 05 Mar 2025 12:51:20 +0000
ROA not before: Wed 05 Mar 2025 12:51:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151612
IP address blocks: 31.13.224.0/24 maxlen: 24
31.13.231.0/24 maxlen: 24
87.120.89.0/24 maxlen: 24
94.156.239.0/24 maxlen: 24
193.37.47.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Mar 2025 14:43:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:66:5c:4e:62:1d:81:83:b3:66:dc:7c:0b:c3:6f:4b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 5 12:51:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a49d3b094141cce945322a4b2ecbfb2c17c433f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e2:be:a5:48:46:d4:9b:ff:f2:59:a4:be:28:
aa:14:79:99:c9:c3:1b:06:cf:e6:b3:c9:88:a7:22:
ed:1f:2a:06:88:bd:3a:81:35:1b:ea:67:38:27:10:
92:f1:76:e6:e6:c2:8d:e9:1f:65:5a:47:ec:c8:e9:
da:39:bc:87:7b:10:ea:bd:2a:03:a1:5f:26:91:63:
28:05:c2:0e:56:08:ed:c1:03:29:25:dd:e3:cf:7b:
b5:9d:c8:e7:f5:91:d1:1c:95:1a:03:d6:3d:8d:3f:
fa:6f:ef:e7:b3:30:f2:80:0e:81:c6:60:c3:85:6a:
9b:fe:ed:9d:42:79:7f:ce:89:b8:96:9d:e7:e2:54:
a9:ae:15:e1:d6:b6:e5:c7:72:2a:f6:b2:4f:54:fb:
e4:44:9a:a5:92:0a:2f:91:db:24:62:9f:0a:2a:6f:
64:80:bc:e2:d4:bd:90:fb:05:c7:7b:1f:50:a5:d6:
07:e1:97:3c:01:a9:06:fb:5c:81:97:eb:3b:89:f4:
3b:ce:b0:8d:1e:c3:62:3d:c0:fe:dc:31:d8:a3:5c:
5a:13:50:96:1a:37:59:dc:f8:26:59:4d:28:c7:16:
52:22:f3:14:85:26:cb:c5:28:be:6a:4d:d8:00:66:
2d:56:ea:bd:e7:5d:c7:f3:08:03:b6:59:cf:ba:47:
fc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:49:D3:B0:94:14:1C:CE:94:53:22:A4:B2:EC:BF:B2:C1:7C:43:3F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CknTsJQUHM6UUyKksuy_ssF8Qz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.224.0/24
31.13.231.0/24
87.120.89.0/24
94.156.239.0/24
193.37.47.0/24
194.48.251.0/24
Signature Algorithm: sha256WithRSAEncryption
03:3c:46:68:17:c6:b3:bc:58:3a:a7:80:b5:1b:51:49:ac:50:
ed:21:a6:32:13:85:9a:5a:21:99:ae:60:be:44:31:53:bb:b5:
10:d8:24:53:27:f6:74:56:85:4c:d3:78:2d:16:e3:52:34:45:
1a:1d:11:1d:5b:91:ed:9e:ad:4f:c0:7d:3f:07:be:de:08:16:
06:63:87:fd:68:fb:75:24:ab:55:74:8b:cc:ed:73:86:4b:2c:
91:c8:cc:fd:8f:98:bf:a9:33:f2:14:2a:85:b2:13:60:d3:f0:
56:ad:87:8b:2e:60:a8:76:1b:48:25:b6:46:8a:e5:c0:fa:e7:
af:ef:88:a5:e2:c3:98:a3:22:45:53:aa:4b:66:e9:8b:cc:ac:
10:6a:6e:d1:7f:2b:9c:ff:7d:57:dd:51:bf:19:6f:69:1c:97:
63:08:f3:36:16:fc:a6:8d:43:9b:2e:af:b4:4d:31:ff:37:83:
1c:dc:93:93:e1:e5:71:14:60:fc:cc:aa:05:ab:a0:15:1a:4e:
bd:ee:cc:b7:6e:ca:cb:a0:3a:d9:1b:e4:f1:f8:bf:a6:bb:52:
35:85:6e:a4:38:db:76:1c:0f:fc:b7:f2:93:e5:c5:ec:c8:e6:
3d:c6:36:b3:2f:88:5e:41:2f:1f:aa:cb:04:8b:b8:45:ab:89:
79:0d:f9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 20:02:49 2025 by rpki-client