Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qRNUHJ1UVyPXO0qTPiMBDeXeea4.roa
File: qRNUHJ1UVyPXO0qTPiMBDeXeea4.roa (raw, json)
Hash identifier: 69HE2WYKj8tT2BiG6RpnbFvIbGvRpw7IPFP+auS0jV4=
Subject key identifier: A9:13:54:1C:9D:54:57:23:D7:3B:4A:93:3E:23:01:0D:E5:DE:79:AE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0195968E6899E5ADA6FD6E113F6A08B8006E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qRNUHJ1UVyPXO0qTPiMBDeXeea4.roa
Signing time: Fri 14 Mar 2025 21:27:50 +0000
ROA not before: Fri 14 Mar 2025 21:27:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.13.211.0/24 maxlen: 24
45.12.253.0/24 maxlen: 24
45.81.39.0/24 maxlen: 24
87.120.68.0/23 maxlen: 24
87.121.60.0/24 maxlen: 24
93.123.74.0/23 maxlen: 24
93.123.119.0/24 maxlen: 24
94.156.253.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
178.215.227.0/24 maxlen: 24
185.252.160.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Mar 2025 00:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:96:8e:68:99:e5:ad:a6:fd:6e:11:3f:6a:08:b8:00:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 14 21:27:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a913541c9d545723d73b4a933e23010de5de79ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:26:ed:c4:2f:07:80:8a:69:18:89:7c:b2:ee:
2e:0d:81:f0:db:8b:5c:ef:72:6e:39:78:f6:ca:12:
9b:1c:72:64:dd:93:0c:1f:31:97:de:56:43:ff:f3:
38:ee:ed:b8:a1:5d:19:3d:99:56:0b:fa:c2:2c:ed:
70:44:5e:8d:f7:21:17:90:9e:ef:dd:d4:6b:48:bb:
2e:82:05:4b:fd:43:d7:f9:cd:81:b2:51:21:26:64:
47:17:1c:81:a5:e3:e5:e8:a9:f8:7b:6e:1e:d5:09:
d7:8b:6e:02:1f:d7:50:0f:29:41:d9:8b:9f:ad:9c:
27:2d:8d:69:91:39:60:68:8e:78:fe:12:2c:3f:b8:
bd:b0:d7:6f:c3:e6:a5:e7:49:96:7e:95:01:f7:14:
ff:3f:f0:0a:41:aa:78:2c:68:d9:94:c9:cf:2f:8f:
fd:65:5b:44:d1:a8:40:62:8e:bf:b2:58:c1:9e:c2:
68:f5:33:05:c1:58:a9:25:67:3f:9d:b8:0f:1a:5d:
2f:66:4c:c8:1c:83:06:f1:c2:f5:48:24:83:39:9d:
ff:f8:3e:c4:ee:d0:39:92:c5:ce:1f:2b:f1:cd:0f:
e3:d6:62:d7:5a:05:c5:46:53:33:cf:8d:ba:82:78:
05:7a:18:bd:f6:18:27:52:5c:8d:d4:a2:8d:34:09:
41:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:13:54:1C:9D:54:57:23:D7:3B:4A:93:3E:23:01:0D:E5:DE:79:AE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qRNUHJ1UVyPXO0qTPiMBDeXeea4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.211.0/24
45.12.253.0/24
45.81.39.0/24
87.120.68.0/23
87.121.60.0/24
93.123.74.0/23
93.123.119.0/24
94.156.253.0/24
147.78.102.0/24
178.215.227.0/24
185.252.160.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:54:34:22:5b:1f:25:41:4c:b4:03:6c:ad:b1:f0:74:b6:0e:
5c:4e:03:99:fc:17:e2:ae:19:4e:10:01:4a:18:91:e7:e5:f7:
81:59:13:e1:29:0b:35:e2:51:f1:02:27:b8:23:19:5f:d3:be:
dd:61:da:49:be:3c:28:3b:53:2e:9c:72:31:fe:b8:8e:26:79:
c4:5c:7d:13:f2:6c:6f:70:72:be:3f:c0:42:6d:c1:06:3c:01:
04:b9:10:5b:f5:f6:13:ad:0d:ab:85:77:ed:59:ce:f2:1b:6b:
e5:08:15:dd:c5:d7:97:80:ef:4b:e3:17:b2:09:f3:7a:1c:52:
ba:c0:2a:22:7e:4f:2d:bc:eb:d4:85:ad:7f:0e:59:6d:27:d3:
c4:72:8d:90:31:19:1b:07:67:09:94:4d:ce:44:37:89:30:e5:
69:65:7c:51:d7:2f:c3:24:4c:27:e1:67:50:60:0a:dc:95:c9:
bc:4a:7f:9b:a2:07:47:c1:a4:60:e4:b8:43:6e:68:0b:b7:64:
b1:c2:7a:2b:b4:75:71:23:db:e0:f4:1f:3d:08:0f:5b:56:5c:
5d:60:26:72:d6:3c:ca:7c:b9:15:6a:29:5b:25:71:1e:87:35:
81:7a:fe:a1:94:df:4a:c8:62:6b:dc:61:6c:a4:1c:6f:88:17:
ec:94:e3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:33:29 2025 by rpki-client