Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ssdI9RboEJJ0lBZ5nnbjfYonmZg.roa
File: ssdI9RboEJJ0lBZ5nnbjfYonmZg.roa (raw, json)
Hash identifier: Bmr6hE7OdCyL726wGV5oxyLSnJHbKYXnj1VahyCBPRw=
Subject key identifier: B2:C7:48:F5:16:E8:10:92:74:94:16:79:9E:76:E3:7D:8A:27:99:98
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194BAFB1E63F08B12F8F5CCCB2F300F112E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ssdI9RboEJJ0lBZ5nnbjfYonmZg.roa
Signing time: Fri 31 Jan 2025 06:10:06 +0000
ROA not before: Fri 31 Jan 2025 06:10:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215590
IP address blocks: 45.95.3.0/24 maxlen: 24
83.143.113.0/24 maxlen: 24
85.209.135.0/24 maxlen: 24
87.121.98.0/24 maxlen: 24
87.121.218.0/24 maxlen: 24
185.246.222.0/24 maxlen: 24
193.168.196.0/24 maxlen: 24
193.168.197.0/24 maxlen: 24
193.168.198.0/24 maxlen: 24
193.168.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 Jan 2025 12:19:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:fb:1e:63:f0:8b:12:f8:f5:cc:cb:2f:30:0f:11:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 31 06:10:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2c748f516e81092749416799e76e37d8a279998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9d:70:8a:db:5f:8d:30:9d:dd:d9:c0:d6:64:
b0:7d:0b:27:00:55:c0:e0:72:46:e7:d4:cc:93:f5:
09:b1:06:36:cd:19:c3:ab:61:fa:83:d0:3e:5f:9b:
b3:45:9c:95:d3:8b:93:51:24:9b:76:8d:d1:64:40:
56:75:d9:22:a6:65:ab:4c:05:fb:bb:6f:7d:74:1b:
c4:48:09:43:4b:b9:3f:58:bb:f2:e3:62:b8:82:7b:
20:9a:68:ba:fe:25:99:75:4a:47:67:56:b5:2f:1a:
19:a8:28:f2:a4:8b:4e:d7:21:a0:73:5c:93:af:b3:
4a:e5:88:ea:3a:41:bb:41:67:3d:07:f5:39:75:8a:
8d:ce:b4:0a:e1:09:ef:7e:df:33:ca:76:b5:a9:f6:
68:23:2a:c8:00:82:99:25:78:c0:67:a6:8d:79:14:
da:15:28:05:42:10:b0:38:32:57:eb:02:d3:d4:75:
de:9a:8f:7c:ea:e1:0a:77:97:c6:b4:dd:42:00:04:
10:85:92:65:04:ff:ff:96:ab:93:76:90:c1:8a:c6:
31:2c:06:b1:e5:db:09:b5:c4:ac:10:06:70:12:27:
a1:44:e7:0f:ba:97:3e:e1:18:a2:f7:86:30:7b:ba:
ad:16:e3:32:1c:32:14:99:cc:46:6f:d0:1a:55:ab:
8e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C7:48:F5:16:E8:10:92:74:94:16:79:9E:76:E3:7D:8A:27:99:98
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ssdI9RboEJJ0lBZ5nnbjfYonmZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.3.0/24
83.143.113.0/24
85.209.135.0/24
87.121.98.0/24
87.121.218.0/24
185.246.222.0/24
193.168.196.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:59:1e:56:e7:3a:89:98:0a:c2:44:19:37:b6:a9:bc:34:e2:
86:dc:fb:9f:2d:b6:d3:d4:ec:a2:a9:10:22:f3:e2:08:d3:70:
29:8e:76:80:d6:b8:85:af:6b:51:90:ce:22:67:c9:f4:c0:fe:
6e:e7:cb:62:e9:9e:fe:66:59:2f:17:1e:c5:7c:d4:95:6f:5f:
79:7e:d7:38:7d:e6:6f:3f:96:6e:11:fc:cf:43:4e:d8:ec:fe:
a6:ac:e8:c9:bf:92:bc:c7:80:ff:4c:1d:0e:e2:b9:d5:da:4e:
07:a4:9b:4a:76:0d:39:f2:7b:43:92:15:e9:d9:6c:f4:b2:e4:
47:75:f8:a3:2e:2a:07:65:26:81:ee:11:76:aa:21:a5:65:d7:
c5:fc:ce:f8:81:89:1c:e1:4e:48:ea:ba:12:9c:6f:88:4f:71:
48:90:5d:4f:92:56:25:d9:fe:e0:a5:61:a4:ee:24:2b:52:6e:
64:8b:ff:81:a6:24:3f:8a:0a:db:bc:fd:56:5c:9e:02:fc:36:
0e:15:f3:68:c0:03:1d:c4:7b:40:c8:5c:64:fa:e2:89:e5:aa:
ff:2b:be:bd:8b:15:47:ce:8d:ba:73:30:fa:b0:10:1b:1f:a0:
6e:c7:06:b1:d3:5b:99:75:58:d9:21:d0:c9:4a:4f:da:e0:e8:
f0:ef:1c:03
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZS6+x5j8IsS+PXMyy8wDxEuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMTMxMDYxMDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMmM3NDhmNTE2ZTgxMDkyNzQ5NDE2Nzk5ZTc2ZTM3ZDhhMjc5OTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZ1wittfjTCd3dnA1mSwfQsnAFXA
4HJG59TMk/UJsQY2zRnDq2H6g9A+X5uzRZyV04uTUSSbdo3RZEBWddkipmWrTAX7
u299dBvESAlDS7k/WLvy42K4gnsgmmi6/iWZdUpHZ1a1LxoZqCjypItO1yGgc1yT
r7NK5YjqOkG7QWc9B/U5dYqNzrQK4Qnvft8zyna1qfZoIyrIAIKZJXjAZ6aNeRTa
FSgFQhCwODJX6wLT1HXemo986uEKd5fGtN1CAAQQhZJlBP//lquTdpDBisYxLAax
5dsJtcSsEAZwEiehROcPupc+4Rii94Ywe7qtFuMyHDIUmcxGb9AaVauOmwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFLLHSPUW6BCSdJQWeZ52432KJ5mYMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvc3NkSTlSYm9FSkowbEJaNW5uYmpmWW9ubVpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQALV8DAwQA
U49xAwQAVdGHAwQAV3liAwQAV3naAwQAufbeAwQCwajEMA0GCSqGSIb3DQEBCwUA
A4IBAQANWR5W5zqJmArCRBk3tqm8NOKG3PufLbbT1OyiqRAi8+II03ApjnaA1riF
r2tRkM4iZ8n0wP5u58ti6Z7+ZlkvFx7FfNSVb195ftc4feZvP5ZuEfzPQ07Y7P6m
rOjJv5K8x4D/TB0O4rnV2k4HpJtKdg058ntDkhXp2Wz0suRHdfijLioHZSaB7hF2
qiGlZdfF/M74gYkc4U5I6roSnG+IT3FIkF1PklYl2f7gpWGk7iQrUm5ki/+BpiQ/
igrbvP1WXJ4C/DYOFfNowAMdxHtAyFxk+uKJ5ar/K769ixVHzo26czD6sBAbH6Bu
xwax01uZdVjZIdDJSk/a4Ojw7xwD
-----END CERTIFICATE-----
Generated at Thu Apr 17 09:42:14 2025 by rpki-client