Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qbRSInwJC_5HwwIpFdnQT81uuWI.roa
File: qbRSInwJC_5HwwIpFdnQT81uuWI.roa (raw, json)
Hash identifier: ckOSMNNQYrHjYI3DWT5vVqgtgkLoelQQMjZ9tPbDwao=
Subject key identifier: A9:B4:52:22:7C:09:0B:FE:47:C3:02:29:15:D9:D0:4F:CD:6E:B9:62
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0195295F8F118D0294EC5AD330159EDB29C8
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qbRSInwJC_5HwwIpFdnQT81uuWI.roa
Signing time: Fri 21 Feb 2025 16:38:03 +0000
ROA not before: Fri 21 Feb 2025 16:38:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215439
IP address blocks: 31.13.208.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.133.251.0/24 maxlen: 24
83.143.112.0/24 maxlen: 24
84.21.173.0/24 maxlen: 24
87.120.84.0/24 maxlen: 24
87.120.165.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.186.0/24 maxlen: 24
87.120.187.0/24 maxlen: 24
87.121.89.0/24 maxlen: 24
87.121.105.0/24 maxlen: 24
93.123.84.0/24 maxlen: 24
94.156.102.0/24 maxlen: 24
94.156.112.0/24 maxlen: 24
94.156.114.0/24 maxlen: 24
94.156.115.0/24 maxlen: 24
94.156.170.0/24 maxlen: 24
94.156.179.0/24 maxlen: 24
94.156.237.0/24 maxlen: 24
141.98.7.0/24 maxlen: 24
171.22.31.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
178.215.238.0/24 maxlen: 24
185.216.71.0/24 maxlen: 24
185.246.223.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
193.35.17.0/24 maxlen: 24
193.58.121.0/24 maxlen: 24
193.58.122.0/24 maxlen: 24
193.222.99.0/24 maxlen: 24
194.31.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Mar 2025 14:50:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:29:5f:8f:11:8d:02:94:ec:5a:d3:30:15:9e:db:29:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 21 16:38:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9b452227c090bfe47c3022915d9d04fcd6eb962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:da:a9:ab:36:4c:b5:0a:5a:65:d4:95:71:e9:
3d:a6:8a:f1:1f:2a:ac:ca:b1:b3:29:96:65:98:d2:
64:74:f9:a0:53:24:9f:ac:cd:f0:e5:f0:76:be:04:
f2:b7:6d:43:5a:b7:b0:d5:1f:38:02:1f:36:8f:66:
ed:c8:df:3f:bd:a3:e5:af:93:b4:c3:f5:c0:7f:de:
e9:08:69:15:2f:66:c2:43:28:1b:e7:6f:8f:3e:57:
f9:f4:00:4f:e8:02:b2:4a:28:cb:d6:d0:79:91:5b:
c7:af:8d:0a:5b:40:f3:7c:c5:c1:25:b5:bc:dc:1b:
55:dc:59:98:03:d2:4f:c9:44:98:48:be:b6:6d:9c:
c3:53:30:3d:63:85:a7:ab:42:f5:6c:f0:36:ec:ef:
3a:fb:29:c9:5c:23:ed:89:c9:16:40:a2:ce:78:c9:
6d:ca:cc:4b:78:08:f8:70:9d:78:a6:84:89:6d:6a:
f7:3c:72:8c:61:ec:d3:ca:e1:d4:7d:1d:76:9a:74:
77:0b:6b:a3:1c:8b:5c:47:79:a9:d7:7f:d3:7a:89:
af:52:e0:be:e1:0a:71:52:6a:35:28:55:a1:cc:51:
eb:9a:29:e0:75:fe:d8:a7:d5:7e:10:bf:2f:66:17:
29:dd:8f:e3:80:63:09:f3:eb:69:f0:be:c9:b7:b6:
75:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B4:52:22:7C:09:0B:FE:47:C3:02:29:15:D9:D0:4F:CD:6E:B9:62
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qbRSInwJC_5HwwIpFdnQT81uuWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.208.0/24
45.66.228.0/24
45.133.251.0/24
83.143.112.0/24
84.21.173.0/24
87.120.84.0/24
87.120.165.0-87.120.166.255
87.120.186.0/23
87.121.89.0/24
87.121.105.0/24
93.123.84.0/24
94.156.102.0/24
94.156.112.0/24
94.156.114.0/23
94.156.170.0/24
94.156.179.0/24
94.156.237.0/24
141.98.7.0/24
171.22.31.0/24
178.215.236.0/24
178.215.238.0/24
185.216.71.0/24
185.246.223.0/24
193.25.216.0/24
193.35.17.0/24
193.58.121.0-193.58.122.255
193.222.99.0/24
194.31.223.0/24
Signature Algorithm: sha256WithRSAEncryption
44:46:aa:8c:89:b3:2b:39:bf:3a:2a:ce:7b:70:4c:e0:8c:e9:
68:24:61:23:2e:77:2a:27:10:bb:f5:47:94:9e:b5:3e:4e:3b:
b7:a0:be:ae:91:04:a0:f3:c8:ec:0a:86:c8:84:9b:c3:07:b4:
4b:d5:b9:b8:e8:11:4c:a0:0b:2a:ca:bb:ff:e5:9a:13:f3:d6:
ac:10:86:f2:04:81:8e:9a:3d:ed:9f:a5:d0:f0:66:0b:4a:0d:
54:9c:c2:83:58:05:11:a8:e4:66:70:9a:7e:26:24:fb:91:50:
fc:6a:83:e9:ad:68:9b:2d:58:98:22:5c:c4:f1:3d:5a:69:f2:
c5:89:2a:f1:57:a1:be:0f:d5:f0:2f:5f:24:d7:ab:e5:88:19:
02:0b:f3:ea:f6:d5:f3:12:c4:06:66:5d:02:87:aa:6b:58:c8:
25:80:b0:be:a2:27:55:5b:f0:26:57:63:36:b3:5a:dc:83:52:
5e:8a:81:67:e5:17:d8:c6:a6:7a:06:68:f8:14:ac:e3:7b:12:
d8:26:b2:8a:1c:71:aa:b8:d4:59:de:44:94:46:71:9c:ab:4d:
a3:f9:4f:fe:68:73:85:cd:be:01:d7:b4:33:bb:a4:fa:0b:2f:
13:31:dd:ee:95:1e:ec:7f:a2:de:07:58:2e:ee:54:e0:78:21:
fe:f9:25:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:19:48 2025 by rpki-client