Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cq9J0PUT-2yTTPaRNX7FGKUG54o.roa
File: cq9J0PUT-2yTTPaRNX7FGKUG54o.roa (raw, json)
Hash identifier: NQl/FtGnlBxKvIs2R51K3kXOrdCQEJcR2p6Sx3UzD3c=
Subject key identifier: 72:AF:49:D0:F5:13:FB:6C:93:4C:F6:91:35:7E:C5:18:A5:06:E7:8A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194AC03A4522CE2BD8E27114006414958D0
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cq9J0PUT-2yTTPaRNX7FGKUG54o.roa
Signing time: Tue 28 Jan 2025 08:25:07 +0000
ROA not before: Tue 28 Jan 2025 08:25:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215439
IP address blocks: 31.13.208.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.133.251.0/24 maxlen: 24
83.143.112.0/24 maxlen: 24
84.21.173.0/24 maxlen: 24
87.120.165.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.186.0/24 maxlen: 24
93.123.84.0/24 maxlen: 24
94.156.102.0/24 maxlen: 24
94.156.112.0/24 maxlen: 24
94.156.115.0/24 maxlen: 24
94.156.179.0/24 maxlen: 24
94.156.237.0/24 maxlen: 24
171.22.31.0/24 maxlen: 24
178.215.238.0/24 maxlen: 24
185.216.71.0/24 maxlen: 24
185.246.223.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
193.35.17.0/24 maxlen: 24
193.58.121.0/24 maxlen: 24
193.58.122.0/24 maxlen: 24
193.222.99.0/24 maxlen: 24
194.31.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Jan 2025 09:54:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ac:03:a4:52:2c:e2:bd:8e:27:11:40:06:41:49:58:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 28 08:25:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72af49d0f513fb6c934cf691357ec518a506e78a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6f:28:95:42:14:1e:49:7a:6a:d1:2e:6d:04:
7d:74:5d:1a:12:69:c0:06:ad:d4:1a:e2:bd:6c:3b:
79:b6:eb:48:3c:c8:62:a4:6b:97:15:54:6f:0d:94:
d4:07:2c:0e:b3:72:49:79:fa:96:97:2f:61:fe:e4:
01:5d:23:31:3b:9c:ac:af:5b:7d:e5:07:ff:91:3c:
8c:6d:bd:60:3d:58:34:66:42:ba:11:f2:bf:ba:82:
e0:a2:52:0c:9a:23:85:e8:cf:b4:a1:74:76:e4:a7:
28:e4:e4:0f:e1:d2:70:6c:50:0b:32:3e:64:e8:48:
50:14:38:39:70:0d:e2:bd:95:6e:03:d7:a3:cd:41:
a6:13:51:83:e5:59:2d:cb:38:9f:17:c1:c3:c5:40:
bd:93:6a:dd:3f:e2:48:58:12:f9:70:1e:46:d3:05:
fe:df:87:46:09:60:ac:35:de:28:97:39:05:30:4f:
d5:b6:20:ca:5a:f4:fa:cf:f6:e5:4b:a5:4f:54:ac:
a2:19:11:9b:f2:8e:48:b3:45:06:51:d6:3e:91:07:
38:2d:4f:66:53:e1:a9:2a:ae:59:3f:0d:78:53:3f:
89:49:e8:02:9b:8a:ad:f0:8f:57:ff:8e:2b:f1:ce:
30:0c:c3:4a:06:11:51:d4:e8:cd:02:a5:a1:dc:05:
f3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:AF:49:D0:F5:13:FB:6C:93:4C:F6:91:35:7E:C5:18:A5:06:E7:8A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cq9J0PUT-2yTTPaRNX7FGKUG54o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.208.0/24
45.66.228.0/24
45.133.251.0/24
83.143.112.0/24
84.21.173.0/24
87.120.165.0-87.120.166.255
87.120.186.0/24
93.123.84.0/24
94.156.102.0/24
94.156.112.0/24
94.156.115.0/24
94.156.179.0/24
94.156.237.0/24
171.22.31.0/24
178.215.238.0/24
185.216.71.0/24
185.246.223.0/24
193.25.216.0/24
193.35.17.0/24
193.58.121.0-193.58.122.255
193.222.99.0/24
194.31.223.0/24
Signature Algorithm: sha256WithRSAEncryption
57:37:0f:74:1e:da:c5:a6:fa:81:77:08:98:b3:4b:77:54:15:
20:ad:91:fb:e0:ea:32:fb:4d:58:3a:0f:71:89:63:c5:56:22:
02:01:6d:8d:a0:04:c3:7c:2a:43:4a:94:b4:06:b1:f0:8b:f4:
f2:57:99:3c:94:01:4b:be:20:19:8a:db:19:15:80:ed:66:10:
b9:fa:e6:c4:f7:92:1f:46:d3:0e:38:9c:23:39:27:07:27:b8:
fb:0b:42:b1:1e:1e:97:e8:23:3d:9b:e6:d1:62:4b:f0:72:5e:
15:94:c3:6f:49:ca:94:2d:aa:d1:4b:97:cf:e3:ce:19:50:6d:
3e:d8:40:42:35:35:82:8b:51:8c:75:60:18:4e:b8:1d:2a:7a:
cd:04:38:22:0a:2c:34:46:df:c8:6f:2c:41:e0:a4:f0:d7:7d:
80:63:b1:2f:fb:c8:26:7d:8f:84:8a:d7:a1:dc:1a:83:c8:d4:
88:04:fc:a1:66:0d:f1:e7:fe:e9:c3:55:15:66:e9:c2:bb:76:
40:9c:d2:58:06:3c:82:05:9a:ec:e2:bf:a8:1e:b9:ee:ef:7d:
ef:4f:61:61:64:aa:f5:fe:7b:42:20:b2:2f:64:d3:a9:e5:64:
6e:27:5e:5d:95:53:e6:f3:26:bf:cb:3d:38:50:39:22:e4:11:
11:42:06:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:11:13 2025 by rpki-client