Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_HZbzEUqF4lGejqQvjqefYC39C0.roa
File: _HZbzEUqF4lGejqQvjqefYC39C0.roa (raw, json)
Hash identifier: 3+l7KjUbRIVFBaM2i/aT/lXtJSMZhWVbBAfDDUkSqbA=
Subject key identifier: FC:76:5B:CC:45:2A:17:89:46:7A:3A:90:BE:3A:9E:7D:80:B7:F4:2D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0195A496060E0BB5439B136970ADA3404662
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_HZbzEUqF4lGejqQvjqefYC39C0.roa
Signing time: Mon 17 Mar 2025 14:50:50 +0000
ROA not before: Mon 17 Mar 2025 14:50:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215439
IP address blocks: 31.13.208.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.133.251.0/24 maxlen: 24
83.143.112.0/24 maxlen: 24
84.21.173.0/24 maxlen: 24
87.120.84.0/24 maxlen: 24
87.120.165.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.186.0/24 maxlen: 24
87.120.187.0/24 maxlen: 24
87.121.89.0/24 maxlen: 24
87.121.105.0/24 maxlen: 24
93.123.84.0/24 maxlen: 24
94.156.102.0/24 maxlen: 24
94.156.106.0/24 maxlen: 24
94.156.112.0/24 maxlen: 24
94.156.114.0/24 maxlen: 24
94.156.115.0/24 maxlen: 24
94.156.170.0/24 maxlen: 24
94.156.179.0/24 maxlen: 24
94.156.237.0/24 maxlen: 24
141.98.7.0/24 maxlen: 24
171.22.31.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
178.215.238.0/24 maxlen: 24
185.216.71.0/24 maxlen: 24
185.246.223.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
193.35.17.0/24 maxlen: 24
193.58.121.0/24 maxlen: 24
193.58.122.0/24 maxlen: 24
193.222.99.0/24 maxlen: 24
194.31.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Mar 2025 13:45:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a4:96:06:0e:0b:b5:43:9b:13:69:70:ad:a3:40:46:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 17 14:50:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc765bcc452a1789467a3a90be3a9e7d80b7f42d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1e:1e:6b:4b:e0:cc:b2:a2:94:c7:3d:3d:b3:
dd:44:db:90:de:bf:51:36:29:65:86:3c:ca:89:78:
d8:2b:20:60:fe:7e:ca:15:08:0e:11:05:4d:52:1f:
7c:e2:41:b6:0d:7b:49:76:b4:87:9c:a1:98:69:79:
f8:06:77:79:70:95:a7:85:67:46:ce:1f:c5:6a:04:
34:f4:22:dc:07:f6:e4:6c:a4:b5:04:0d:96:d2:5e:
39:7b:6c:73:14:49:40:45:f1:e5:62:6f:fb:16:e0:
8b:1a:6c:5b:c7:b3:dd:d0:b8:44:13:74:f4:f2:73:
e9:ec:30:b9:b4:c2:21:81:a6:8b:d0:ba:68:96:8d:
cc:d4:87:23:81:75:23:2b:d6:29:1e:f9:3c:e2:77:
12:c6:85:36:bf:12:0e:ed:05:e0:47:82:a6:53:28:
a0:17:ae:78:6d:de:ea:5c:a2:65:02:14:57:53:1a:
38:62:83:60:02:fa:1b:ea:ce:0c:d5:09:0e:ce:e8:
10:e5:0c:8c:aa:66:2c:65:f9:19:e9:14:f5:9c:08:
1f:57:42:21:a0:f8:82:92:1d:f4:88:75:fd:cd:5d:
12:9c:ff:87:b5:bf:aa:d1:4c:08:15:94:ce:0e:c9:
06:d1:f1:97:1a:35:14:12:a7:ab:72:9f:34:4c:ed:
d2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:76:5B:CC:45:2A:17:89:46:7A:3A:90:BE:3A:9E:7D:80:B7:F4:2D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_HZbzEUqF4lGejqQvjqefYC39C0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.208.0/24
45.66.228.0/24
45.133.251.0/24
83.143.112.0/24
84.21.173.0/24
87.120.84.0/24
87.120.165.0-87.120.166.255
87.120.186.0/23
87.121.89.0/24
87.121.105.0/24
93.123.84.0/24
94.156.102.0/24
94.156.106.0/24
94.156.112.0/24
94.156.114.0/23
94.156.170.0/24
94.156.179.0/24
94.156.237.0/24
141.98.7.0/24
171.22.31.0/24
178.215.236.0/24
178.215.238.0/24
185.216.71.0/24
185.246.223.0/24
193.25.216.0/24
193.35.17.0/24
193.58.121.0-193.58.122.255
193.222.99.0/24
194.31.223.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:91:bc:c2:d8:f0:05:52:27:24:bc:df:dc:f6:b0:0e:63:76:
41:d0:40:dd:01:f3:c0:56:b5:66:89:c6:11:80:46:95:66:ae:
96:52:f4:5d:5c:b0:fc:6a:ac:64:08:e3:a5:cc:65:27:ba:63:
4c:4d:cc:d6:8c:dc:ed:e8:17:33:d8:d4:c6:a9:ca:61:63:89:
fc:63:ba:bc:84:0c:c0:ac:29:b8:f2:f9:98:44:da:e0:7a:ea:
97:97:22:a4:64:5d:5b:87:8f:a3:3f:12:28:21:08:d3:80:e1:
d7:a3:17:51:18:20:78:e3:02:13:5e:8b:23:4d:5d:f5:c8:2e:
0b:97:ba:bf:f8:3f:2d:8d:a4:3d:44:0d:bc:8c:c9:99:91:57:
9e:72:a5:66:06:15:87:a1:10:32:a7:db:9b:c9:e6:6c:f2:e1:
62:f2:1e:be:95:b8:8b:ca:ac:3e:46:95:3e:d8:c1:74:78:bf:
68:fb:57:58:28:04:ee:1a:f5:20:1e:67:81:0a:f2:ba:36:9e:
30:28:bf:e0:e1:2c:5a:e6:2d:f0:72:88:d8:56:26:42:1b:f5:
36:15:4a:78:ca:54:35:eb:aa:d0:f7:40:fe:71:64:ed:5a:50:
08:98:f1:50:a1:c6:43:29:5d:b9:92:71:23:2b:cb:95:59:df:
47:42:99:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:36:01 2025 by rpki-client