Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EK3iAaCZIL0ALBUDYXZYsOizKyw.roa
File: EK3iAaCZIL0ALBUDYXZYsOizKyw.roa (raw, json)
Hash identifier: WfKefE+hyiXiSIJ0T/bRSQBVEY/10R/ieYt6hvERx+0=
Subject key identifier: 10:AD:E2:01:A0:99:20:BD:00:2C:15:03:61:76:58:B0:E8:B3:2B:2C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0195B8F4DE2AD86C438BE9C5A94921860056
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EK3iAaCZIL0ALBUDYXZYsOizKyw.roa
Signing time: Fri 21 Mar 2025 13:46:50 +0000
ROA not before: Fri 21 Mar 2025 13:46:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215439
IP address blocks: 31.13.208.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.133.251.0/24 maxlen: 24
83.143.112.0/24 maxlen: 24
84.21.173.0/24 maxlen: 24
87.120.84.0/24 maxlen: 24
87.120.165.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.186.0/24 maxlen: 24
87.120.187.0/24 maxlen: 24
87.121.89.0/24 maxlen: 24
87.121.105.0/24 maxlen: 24
93.123.84.0/24 maxlen: 24
94.156.102.0/24 maxlen: 24
94.156.106.0/24 maxlen: 24
94.156.114.0/24 maxlen: 24
94.156.170.0/24 maxlen: 24
94.156.179.0/24 maxlen: 24
141.98.7.0/24 maxlen: 24
171.22.31.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
178.215.238.0/24 maxlen: 24
185.216.71.0/24 maxlen: 24
185.246.223.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
193.35.17.0/24 maxlen: 24
193.58.121.0/24 maxlen: 24
193.58.122.0/24 maxlen: 24
193.222.99.0/24 maxlen: 24
194.31.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Mar 2025 15:32:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b8:f4:de:2a:d8:6c:43:8b:e9:c5:a9:49:21:86:00:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 21 13:46:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10ade201a09920bd002c1503617658b0e8b32b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b5:68:3f:13:df:e1:76:d9:94:e5:3c:91:cb:
a8:32:c3:00:2f:d5:63:51:0d:de:1a:3d:f6:6d:57:
c9:1f:5a:80:c7:ad:39:e8:c6:c7:de:b4:59:46:da:
78:b0:7c:28:59:f8:65:c7:46:63:6b:1b:dc:ba:6d:
2b:fe:91:06:b5:14:b6:82:8a:0e:d4:6b:db:9a:1e:
cf:f9:59:4a:24:a0:d0:2e:b5:f9:92:55:1d:48:97:
83:41:86:7b:df:15:f2:a6:28:ff:78:db:4f:7c:63:
75:82:85:90:f6:3e:93:be:2e:59:74:b9:f9:06:aa:
f3:d6:41:6c:3e:20:2d:db:86:ae:92:3e:72:fd:c6:
5f:ed:08:5a:06:9e:31:a7:c4:68:1b:15:89:99:e9:
bc:7c:04:d7:a2:b1:6f:37:57:30:68:88:d9:0d:60:
b2:cb:4d:e8:53:44:b6:7f:73:1c:9e:6d:0f:b4:31:
c3:2b:13:a2:88:1c:07:bc:57:e4:36:ae:7e:0c:27:
0f:38:a2:42:bb:5e:37:d5:77:f0:5f:02:ab:ee:ac:
f5:ca:86:a5:33:2c:30:8d:0e:48:58:43:2e:74:c7:
c1:65:df:9b:26:d3:1f:ed:e3:28:d8:b9:7f:91:05:
70:4c:b7:9d:a9:8a:45:c6:bd:e7:1b:41:1e:ae:3d:
a6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:AD:E2:01:A0:99:20:BD:00:2C:15:03:61:76:58:B0:E8:B3:2B:2C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EK3iAaCZIL0ALBUDYXZYsOizKyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.208.0/24
45.66.228.0/24
45.133.251.0/24
83.143.112.0/24
84.21.173.0/24
87.120.84.0/24
87.120.165.0-87.120.166.255
87.120.186.0/23
87.121.89.0/24
87.121.105.0/24
93.123.84.0/24
94.156.102.0/24
94.156.106.0/24
94.156.114.0/24
94.156.170.0/24
94.156.179.0/24
141.98.7.0/24
171.22.31.0/24
178.215.236.0/24
178.215.238.0/24
185.216.71.0/24
185.246.223.0/24
193.25.216.0/24
193.35.17.0/24
193.58.121.0-193.58.122.255
193.222.99.0/24
194.31.223.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:fd:b8:9e:db:40:e7:e0:db:eb:ce:6c:dd:63:9c:f6:a4:de:
49:b7:8d:75:1f:c2:61:b2:9a:34:89:8c:01:7c:cd:9b:5c:1a:
aa:b6:14:64:92:59:18:37:00:29:c6:92:2b:92:70:1b:09:fc:
b7:a1:df:27:13:96:21:07:ab:24:6d:35:6c:53:a9:e9:a7:d9:
83:9a:16:ad:d4:9b:36:5e:c3:c2:04:c1:ea:2c:d2:56:6d:3a:
d6:f4:e0:a1:05:79:0a:29:b6:45:58:a8:27:07:bc:60:54:64:
aa:5f:2b:57:ed:28:f5:64:5d:12:81:45:8d:32:18:1d:0b:08:
8c:c0:25:51:a6:55:d4:f2:5c:42:22:6f:5c:3b:ef:74:62:7a:
14:83:d8:af:9b:b9:9a:8a:d5:a7:a2:d9:91:ab:c1:90:ab:18:
2d:c6:d9:ac:99:f9:5a:86:47:81:67:3a:de:dc:f9:33:ac:e8:
14:6d:f8:a2:b0:49:d2:27:d0:21:4e:10:ef:2f:7c:cd:ae:66:
c9:f9:2b:3d:55:28:cf:57:34:99:12:11:0b:f0:8e:a6:a9:bc:
02:c1:5c:8f:bd:1b:6b:80:7a:74:fa:b1:9e:8a:b8:69:8a:da:
32:ef:87:47:47:ce:8f:12:47:d1:36:fb:4e:fc:ee:e7:75:24:
2f:6f:ba:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:24:05 2025 by rpki-client