Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sAkO1QuA1PdYCntKL8EJJUjn-tk.roa
File: sAkO1QuA1PdYCntKL8EJJUjn-tk.roa (raw, json)
Hash identifier: /V70LFVktoeRToFG7tm8xzX9LtVKTHIRtrb45EF8wCw=
Subject key identifier: B0:09:0E:D5:0B:80:D4:F7:58:0A:7B:4A:2F:C1:09:25:48:E7:FA:D9
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0195B955EB1199F722660FCF14F1E9C797BB
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sAkO1QuA1PdYCntKL8EJJUjn-tk.roa
Signing time: Fri 21 Mar 2025 15:32:50 +0000
ROA not before: Fri 21 Mar 2025 15:32:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215439
IP address blocks: 31.13.208.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.133.251.0/24 maxlen: 24
83.143.112.0/24 maxlen: 24
84.21.173.0/24 maxlen: 24
87.120.84.0/24 maxlen: 24
87.120.165.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.186.0/24 maxlen: 24
87.120.187.0/24 maxlen: 24
87.121.89.0/24 maxlen: 24
87.121.105.0/24 maxlen: 24
93.123.84.0/24 maxlen: 24
94.156.102.0/24 maxlen: 24
94.156.106.0/24 maxlen: 24
94.156.112.0/24 maxlen: 24
94.156.114.0/24 maxlen: 24
94.156.115.0/24 maxlen: 24
94.156.170.0/24 maxlen: 24
94.156.179.0/24 maxlen: 24
94.156.237.0/24 maxlen: 24
141.98.7.0/24 maxlen: 24
171.22.31.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
178.215.238.0/24 maxlen: 24
185.216.71.0/24 maxlen: 24
185.246.223.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
193.35.17.0/24 maxlen: 24
193.58.121.0/24 maxlen: 24
193.58.122.0/24 maxlen: 24
193.222.99.0/24 maxlen: 24
194.31.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Mar 2025 11:45:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b9:55:eb:11:99:f7:22:66:0f:cf:14:f1:e9:c7:97:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 21 15:32:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0090ed50b80d4f7580a7b4a2fc1092548e7fad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c4:b7:7f:b4:c0:64:b8:e8:43:48:3b:8a:24:
4e:f8:66:f8:f8:b3:d6:ff:7c:da:32:52:6a:61:7c:
71:6f:5c:0d:c9:19:79:01:57:0e:3a:74:be:35:e4:
f6:f0:c5:6c:73:05:77:d1:a7:8e:c4:4b:04:aa:58:
1a:7a:8b:9c:77:46:77:e0:b8:91:ff:29:e8:45:91:
df:59:51:60:01:e2:55:67:1c:bb:27:87:9f:5a:4f:
46:c6:3f:21:5a:27:d0:39:1c:f8:46:7a:ff:91:b3:
76:0d:90:50:2d:0e:02:13:03:62:cb:50:70:fa:b7:
35:b6:7e:7e:24:27:b6:3d:fd:08:b0:5b:5b:7b:e5:
d9:dd:b1:22:a4:3d:06:5b:8e:65:8d:5f:6b:fb:b3:
c2:71:ea:46:6d:98:16:7d:f9:f7:53:89:af:6e:97:
b9:3a:dc:26:0b:2d:be:75:55:1c:b2:c9:ef:48:42:
02:29:13:2c:0a:36:f6:32:fe:ed:d8:fa:29:a3:9a:
f6:ab:98:58:c9:77:26:85:1d:6b:e5:d7:6a:5d:d9:
a1:4d:29:c5:85:11:bd:e4:c9:d3:fb:72:f1:de:21:
90:b4:88:3c:bd:72:4e:a2:56:0b:18:9b:bd:3b:37:
58:9f:e6:85:52:de:6b:6e:8f:d4:dd:07:ad:bc:d7:
33:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:09:0E:D5:0B:80:D4:F7:58:0A:7B:4A:2F:C1:09:25:48:E7:FA:D9
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sAkO1QuA1PdYCntKL8EJJUjn-tk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.208.0/24
45.66.228.0/24
45.133.251.0/24
83.143.112.0/24
84.21.173.0/24
87.120.84.0/24
87.120.165.0-87.120.166.255
87.120.186.0/23
87.121.89.0/24
87.121.105.0/24
93.123.84.0/24
94.156.102.0/24
94.156.106.0/24
94.156.112.0/24
94.156.114.0/23
94.156.170.0/24
94.156.179.0/24
94.156.237.0/24
141.98.7.0/24
171.22.31.0/24
178.215.236.0/24
178.215.238.0/24
185.216.71.0/24
185.246.223.0/24
193.25.216.0/24
193.35.17.0/24
193.58.121.0-193.58.122.255
193.222.99.0/24
194.31.223.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:f8:78:d0:77:3c:b9:88:ba:a1:ab:8b:95:08:30:71:e8:ca:
1a:c8:c9:6f:d8:15:d4:3c:aa:8d:b5:f7:1f:dd:ea:59:ed:09:
5d:98:11:63:a4:a9:ff:e3:5f:2b:2a:b6:10:35:6e:5a:28:b0:
a6:db:aa:8e:ca:d5:1a:af:7c:64:c9:d1:fc:51:1e:26:8d:e2:
23:cd:e4:91:56:d9:c4:04:10:f5:42:25:45:44:dd:71:99:a2:
1e:53:a0:03:85:90:9e:db:7d:eb:e3:56:ed:14:93:23:7b:ef:
08:fc:e0:77:5c:a8:a2:b4:2c:40:1b:8a:1c:cf:2d:c8:d2:45:
8b:02:86:e1:6c:6b:9a:a4:23:49:a9:8d:2e:93:95:56:6b:5e:
6b:5d:69:db:bc:e9:0e:da:2b:f1:50:49:86:e2:4e:8c:ad:b3:
58:7d:c5:67:aa:75:57:f0:bc:2c:5e:44:71:4d:65:ca:65:cd:
89:f6:1a:75:30:ad:af:76:ef:fe:e1:ea:9a:e2:f2:d9:46:fc:
03:54:e0:41:ff:9c:72:82:03:23:63:12:29:f8:4e:39:42:52:
6b:91:c6:2c:48:03:69:93:05:75:56:78:35:2d:4a:4e:da:eb:
67:25:97:c2:d5:32:d4:55:3a:54:bc:fa:ae:9c:fe:e4:ee:e0:
2b:a9:39:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:26:30 2025 by rpki-client