Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/DeqC3AKKDwBDgF7r2M5U7ZYD6K4.roa
File: DeqC3AKKDwBDgF7r2M5U7ZYD6K4.roa (raw, json)
Hash identifier: 4lyeKxEMIGmQrlUkyfGNEbdQyd6cpocOQSWxnvUzN9Y=
Subject key identifier: 0D:EA:82:DC:02:8A:0F:00:43:80:5E:EB:D8:CE:54:ED:96:03:E8:AE
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0196CD467B2DE6A75231DB3693223F63CE01
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/DeqC3AKKDwBDgF7r2M5U7ZYD6K4.roa
Signing time: Wed 14 May 2025 05:31:10 +0000
ROA not before: Wed 14 May 2025 05:31:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 81.180.36.0/23 maxlen: 23
81.180.172.0/23 maxlen: 23
81.180.204.0/23 maxlen: 23
81.181.236.0/22 maxlen: 22
194.102.120.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 02 Jun 2025 14:35:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:46:7b:2d:e6:a7:52:31:db:36:93:22:3f:63:ce:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: May 14 05:31:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0dea82dc028a0f0043805eebd8ce54ed9603e8ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1c:b7:56:22:59:8b:95:7d:10:37:49:64:d8:
92:af:ae:4d:b7:12:01:c2:5f:f5:c9:47:bf:cd:b0:
c8:2a:50:86:70:eb:22:02:78:16:b3:88:66:18:16:
ac:ae:ff:18:f7:58:eb:53:c8:f9:57:b0:38:bc:67:
99:12:78:a9:f4:f2:fe:2f:27:f8:75:53:21:23:fa:
3c:fe:9f:f4:d7:10:8e:f4:1f:09:5f:2d:b2:c7:5c:
89:6e:e9:1c:07:ea:44:bc:73:f7:04:15:cf:7b:d4:
55:cb:a7:d0:05:84:2b:4e:b5:f5:3d:ca:10:85:9a:
de:dd:69:22:9e:c5:ab:1b:8f:cc:8c:0f:c2:cc:5e:
b3:db:9e:f4:ff:4a:dc:d7:38:a7:23:02:d4:7c:ab:
7e:5f:3a:70:85:69:17:7f:e8:65:bb:91:d1:84:b1:
f0:c7:3d:c3:7e:c7:e1:49:e2:16:01:5b:69:e1:23:
1d:80:df:72:6d:71:48:69:27:f2:ac:04:ab:bd:fa:
06:f3:d4:ad:db:93:15:d6:fb:23:6e:3c:68:d8:43:
2c:df:72:3e:5d:7f:41:7d:85:ba:3d:a8:1d:b5:66:
a3:7c:47:d7:78:cf:61:5d:34:12:a7:13:a2:94:2f:
0d:c1:f2:2c:a5:cb:fa:67:a5:3e:0a:f2:05:d8:24:
d1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:EA:82:DC:02:8A:0F:00:43:80:5E:EB:D8:CE:54:ED:96:03:E8:AE
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/DeqC3AKKDwBDgF7r2M5U7ZYD6K4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.180.36.0/23
81.180.172.0/23
81.180.204.0/23
81.181.236.0/22
194.102.120.0/22
Signature Algorithm: sha256WithRSAEncryption
97:3a:ce:6a:44:e6:57:d8:4e:b0:0f:d5:7e:fc:42:72:80:b7:
5b:f4:00:a6:59:18:ec:5d:ff:13:fd:ba:36:0a:8e:86:e1:80:
b7:26:31:7c:81:e7:8c:75:52:86:18:a1:1a:79:da:0e:00:0a:
34:24:2c:ba:71:ad:cc:5b:b8:b4:e1:c5:64:58:a6:83:be:d7:
0f:22:21:8c:cd:d3:5c:1a:05:9a:58:e0:4b:d0:c9:68:b0:16:
9a:01:82:9a:9a:47:b7:0d:f9:66:39:a9:32:79:4f:67:80:94:
90:83:49:0c:d0:44:65:97:07:58:0b:86:13:59:06:48:79:95:
3f:23:0e:60:aa:ac:2c:c1:03:2d:ca:fc:d6:23:21:dc:13:38:
bf:27:06:b7:61:df:67:c4:6d:25:65:33:1e:ae:23:e6:d0:27:
bb:91:77:53:7d:5b:fa:23:c9:7e:e8:68:c9:2b:22:49:ba:6f:
c6:c8:9e:57:17:6a:92:0f:82:6d:12:19:9c:d5:ab:84:a9:a3:
e4:73:58:35:7f:5b:32:e1:a9:81:4b:5d:23:e4:e0:1a:0d:3d:
75:31:28:af:7a:e2:f8:4c:09:5e:39:b5:bf:21:8d:a7:bd:91:
07:86:8e:86:ef:75:55:a0:56:a7:91:c2:9f:c5:0a:6c:63:af:
56:95:46:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:48:48 2025 by rpki-client