Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/X94fsreXzrnirSMMo41DynPA0mE.roa
File: X94fsreXzrnirSMMo41DynPA0mE.roa (raw, json)
Hash identifier: DoyQw734jbkFBPOm8TBHK/Tz4cwYp9PaK9tp3Q+ee9A=
Subject key identifier: 5F:DE:1F:B2:B7:97:CE:B9:E2:AD:23:0C:A3:8D:43:CA:73:C0:D2:61
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C41FE9EB65E6B2A27A64C7F0AD756
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/X94fsreXzrnirSMMo41DynPA0mE.roa
Signing time: Wed 01 Jan 2025 01:47:53 +0000
ROA not before: Wed 01 Jan 2025 01:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 81.180.112.0/20 maxlen: 24
81.181.54.0/24 maxlen: 24
81.181.55.0/24 maxlen: 24
81.181.56.0/24 maxlen: 24
81.181.57.0/24 maxlen: 24
81.181.58.0/24 maxlen: 24
81.181.59.0/24 maxlen: 24
81.181.60.0/24 maxlen: 24
81.181.61.0/24 maxlen: 24
81.181.62.0/24 maxlen: 24
81.181.63.0/24 maxlen: 24
85.122.160.0/20 maxlen: 24
85.122.192.0/19 maxlen: 24
85.122.224.0/22 maxlen: 24
85.122.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Mar 2025 10:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:41:fe:9e:b6:5e:6b:2a:27:a6:4c:7f:0a:d7:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5fde1fb2b797ceb9e2ad230ca38d43ca73c0d261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cd:d7:f9:dc:73:8b:cf:8b:f7:7e:20:85:1e:
a7:ff:dc:fc:2c:44:c6:9f:75:a6:66:75:be:ba:ce:
2d:1b:c2:46:3d:f4:c8:95:f5:d3:d5:99:5c:bf:33:
f1:bb:33:29:3a:1e:3a:50:6b:51:81:51:ec:ff:d8:
3c:0a:5d:90:a3:3d:e8:dc:ed:0f:68:59:6d:f3:2b:
2a:e5:ec:0d:df:97:a8:3a:46:49:ce:0f:03:a0:5a:
17:1a:24:a4:45:fa:c6:73:b7:19:f4:d5:d1:fa:ec:
93:94:e7:f6:18:2c:a5:9e:48:2d:1a:b6:fc:89:94:
6d:75:9f:7e:90:24:2f:74:1b:d3:f2:d3:d6:55:6b:
58:9e:59:d8:77:83:31:74:69:4f:04:2a:7c:f2:13:
d2:17:6d:e2:95:c4:40:09:91:99:20:b3:42:7c:fb:
f0:9c:28:ea:99:c9:60:ee:e3:65:f1:ec:7d:9a:a2:
ea:0e:7c:38:22:1e:2c:b6:4c:03:71:8c:5b:6f:32:
a0:a1:f1:c3:5a:a1:ac:03:b3:d5:7f:35:fc:67:32:
f8:05:c3:1c:ec:82:15:e5:85:12:f0:4d:a3:1b:3a:
5d:df:03:fe:35:6e:13:9d:f0:3e:ef:60:1f:b2:a7:
64:f0:0a:3b:ae:15:99:33:80:1f:68:8a:26:9d:7f:
64:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DE:1F:B2:B7:97:CE:B9:E2:AD:23:0C:A3:8D:43:CA:73:C0:D2:61
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/X94fsreXzrnirSMMo41DynPA0mE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.180.112.0/20
81.181.54.0-81.181.63.255
85.122.160.0/20
85.122.192.0-85.122.228.255
Signature Algorithm: sha256WithRSAEncryption
00:21:63:25:32:ca:c4:00:af:90:47:db:39:92:b3:f1:29:da:
85:c1:24:c4:c6:81:25:77:0d:04:dd:b1:8a:ad:94:25:af:f1:
f2:17:44:0f:81:2e:55:c0:de:25:90:16:a8:95:90:76:83:6a:
4f:6b:f4:28:76:ef:1b:b4:fe:55:2d:8b:4c:c0:87:5e:14:ca:
6c:dc:a4:d5:e3:6f:3a:c2:d6:0e:72:20:e0:74:b0:0f:2d:5a:
fe:76:b6:75:a3:59:9f:54:69:3d:0f:aa:84:e5:a1:58:91:af:
1a:58:ba:57:7e:4e:1c:a4:71:8e:15:69:4f:30:c3:6c:2e:80:
50:cb:f5:ec:a8:97:4c:89:15:94:33:c0:2f:98:b9:94:ba:97:
c1:40:ba:0b:ab:4d:6b:e3:2d:2a:43:ce:92:71:bf:19:b9:f8:
17:60:fc:f3:e3:a5:f2:b6:96:37:45:16:45:3a:37:b5:81:50:
8b:c8:81:d5:11:a7:af:97:05:27:d6:af:3c:9d:c3:20:ec:a0:
83:2c:66:60:36:a3:8e:22:6c:70:b1:fd:9b:eb:2e:44:e6:5c:
93:08:98:61:1d:a4:58:a5:55:9a:7c:c5:e9:36:14:1f:a4:7d:
23:60:2d:00:c4:9f:75:6e:ca:00:38:d6:63:a6:92:0c:34:f5:
83:0b:ce:c3
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAZQfjEH+nrZeayonpkx/CtdWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjUwMTAxMDE0NzUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZmRlMWZiMmI3OTdjZWI5ZTJhZDIzMGNhMzhkNDNjYTczYzBkMjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk83X+dxzi8+L934ghR6n/9z8LETG
n3WmZnW+us4tG8JGPfTIlfXT1ZlcvzPxuzMpOh46UGtRgVHs/9g8Cl2Qoz3o3O0P
aFlt8ysq5ewN35eoOkZJzg8DoFoXGiSkRfrGc7cZ9NXR+uyTlOf2GCylnkgtGrb8
iZRtdZ9+kCQvdBvT8tPWVWtYnlnYd4MxdGlPBCp88hPSF23ilcRACZGZILNCfPvw
nCjqmclg7uNl8ex9mqLqDnw4Ih4stkwDcYxbbzKgofHDWqGsA7PVfzX8ZzL4BcMc
7IIV5YUS8E2jGzpd3wP+NW4TnfA+72Afsqdk8Ao7rhWZM4AfaIomnX9kHQIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFF/eH7K3l8654q0jDKONQ8pzwNJhMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvWDk0ZnNyZVh6cm5pclNNTW80MUR5blBBMG1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQEUbRwMAwD
BAFRtTYDBAZRtQADBARVeqAwDAMEBlV6wAMEAFV65DANBgkqhkiG9w0BAQsFAAOC
AQEAACFjJTLKxACvkEfbOZKz8SnahcEkxMaBJXcNBN2xiq2UJa/x8hdED4EuVcDe
JZAWqJWQdoNqT2v0KHbvG7T+VS2LTMCHXhTKbNyk1eNvOsLWDnIg4HSwDy1a/na2
daNZn1RpPQ+qhOWhWJGvGli6V35OHKRxjhVpTzDDbC6AUMv17KiXTIkVlDPAL5i5
lLqXwUC6C6tNa+MtKkPOknG/Gbn4F2D88+Ol8raWN0UWRTo3tYFQi8iB1RGnr5cF
J9avPJ3DIOyggyxmYDajjiJscLH9m+suROZckwiYYR2kWKVVmnzF6TYUH6R9I2At
AMSfdW7KADjWY6aSDDT1gwvOww==
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:27:02 2025 by rpki-client