Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/kQMc0cXHnYsuTy0uWxR35y_Uxt8.roa
File: kQMc0cXHnYsuTy0uWxR35y_Uxt8.roa (raw, json)
Hash identifier: mjpvSM5U1fCdB4+y9eclgKlKuIZtqqd5kLFCJ/cHwfk=
Subject key identifier: 91:03:1C:D1:C5:C7:9D:8B:2E:4F:2D:2E:5B:14:77:E7:2F:D4:C6:DF
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0196B523971CAFED2C2A9586E4DF76CF6D5C
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/kQMc0cXHnYsuTy0uWxR35y_Uxt8.roa
Signing time: Fri 09 May 2025 13:02:10 +0000
ROA not before: Fri 09 May 2025 13:02:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8708
IP address blocks: 80.96.12.0/24 maxlen: 24
80.96.43.0/24 maxlen: 24
80.96.47.0/24 maxlen: 24
80.96.51.0/24 maxlen: 24
80.96.57.0/24 maxlen: 24
80.96.67.0/24 maxlen: 24
80.96.69.0/24 maxlen: 24
80.96.72.0/24 maxlen: 24
80.96.79.0/24 maxlen: 24
80.96.219.0/24 maxlen: 24
80.97.147.0/24 maxlen: 24
80.97.148.0/24 maxlen: 24
80.97.149.0/24 maxlen: 24
81.180.27.0/24 maxlen: 24
81.181.30.0/24 maxlen: 24
81.181.112.0/24 maxlen: 24
81.181.128.0/24 maxlen: 24
81.181.167.0/24 maxlen: 24
81.181.246.0/24 maxlen: 24
85.120.20.0/24 maxlen: 24
85.120.23.0/24 maxlen: 24
193.226.16.0/24 maxlen: 24
193.226.116.0/24 maxlen: 24
193.226.125.0/24 maxlen: 24
193.226.127.0/24 maxlen: 24
193.230.158.0/24 maxlen: 24
193.230.171.0/24 maxlen: 24
193.230.217.0/24 maxlen: 24
193.230.229.0/24 maxlen: 24
193.231.75.0/24 maxlen: 24
193.231.108.0/24 maxlen: 24
193.231.184.0/24 maxlen: 24
193.231.194.0/24 maxlen: 24
193.231.233.0/24 maxlen: 24
193.231.236.0/24 maxlen: 24
193.231.238.0/24 maxlen: 24
193.231.252.0/24 maxlen: 24
194.102.98.0/24 maxlen: 24
194.102.134.0/24 maxlen: 24
194.102.229.0/24 maxlen: 24
194.153.224.0/24 maxlen: 24
217.156.14.0/24 maxlen: 24
217.156.20.0/23 maxlen: 23
217.156.41.0/24 maxlen: 24
217.156.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 May 2025 06:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:23:97:1c:af:ed:2c:2a:95:86:e4:df:76:cf:6d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: May 9 13:02:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91031cd1c5c79d8b2e4f2d2e5b1477e72fd4c6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0e:7a:4d:cc:6f:a7:5f:14:0c:0c:77:49:07:
a5:df:f3:4d:f5:df:45:c1:80:b4:69:e4:6a:f9:c9:
0b:f8:10:b1:87:63:f9:dc:a0:ed:46:1e:4d:f5:ad:
4a:96:1e:51:a5:52:7b:16:7c:fd:4c:49:d7:81:37:
fb:fb:d4:ce:f2:7e:52:da:0f:5b:c3:b8:5b:4e:06:
13:0d:f6:f7:b4:46:56:74:c1:a5:3d:13:9f:8e:54:
40:42:a8:8a:a5:fe:a3:29:d2:cf:97:b1:27:2d:2f:
a4:9d:2d:ad:6f:f6:87:e7:24:e8:c7:90:53:20:14:
59:ea:85:a0:19:42:8b:87:38:a7:f2:2d:eb:0a:d7:
98:70:60:a6:99:a5:22:ab:aa:77:9e:42:86:62:15:
5c:1d:3e:82:7d:8b:89:31:ec:66:b7:ed:17:bd:e1:
9f:0a:4a:b1:87:a2:d9:3b:e5:b5:59:e4:5e:a4:d5:
b3:d6:07:7e:67:b5:fe:19:30:59:17:dc:5e:5e:fe:
4c:89:50:70:0e:ed:c9:ee:ae:b6:f3:39:7a:af:9a:
b3:57:30:26:c9:5a:94:3d:73:c7:31:f6:58:d6:99:
9d:26:13:9e:d7:43:f3:f8:69:d5:17:e8:7f:25:9b:
0c:41:c0:5c:6b:eb:13:22:1e:87:12:15:d8:80:b0:
a0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:03:1C:D1:C5:C7:9D:8B:2E:4F:2D:2E:5B:14:77:E7:2F:D4:C6:DF
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/kQMc0cXHnYsuTy0uWxR35y_Uxt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.12.0/24
80.96.43.0/24
80.96.47.0/24
80.96.51.0/24
80.96.57.0/24
80.96.67.0/24
80.96.69.0/24
80.96.72.0/24
80.96.79.0/24
80.96.219.0/24
80.97.147.0-80.97.149.255
81.180.27.0/24
81.181.30.0/24
81.181.112.0/24
81.181.128.0/24
81.181.167.0/24
81.181.246.0/24
85.120.20.0/24
85.120.23.0/24
193.226.16.0/24
193.226.116.0/24
193.226.125.0/24
193.226.127.0/24
193.230.158.0/24
193.230.171.0/24
193.230.217.0/24
193.230.229.0/24
193.231.75.0/24
193.231.108.0/24
193.231.184.0/24
193.231.194.0/24
193.231.233.0/24
193.231.236.0/24
193.231.238.0/24
193.231.252.0/24
194.102.98.0/24
194.102.134.0/24
194.102.229.0/24
194.153.224.0/24
217.156.14.0/24
217.156.20.0/23
217.156.41.0/24
217.156.92.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:e0:97:58:f3:1e:0c:23:d1:b9:f1:3b:df:1a:2a:d8:f9:59:
6e:92:f5:82:dd:6f:65:a7:17:7c:f5:0e:fb:c9:4c:6c:f9:d8:
8b:b0:5b:d9:25:0c:63:af:2b:35:38:ec:ed:e6:e4:22:f2:69:
9b:fe:0d:92:57:88:44:4f:81:5f:fa:fc:46:9e:91:f2:13:57:
4d:d7:93:22:b0:48:25:bc:4a:8e:de:92:c1:0c:4e:2a:c9:ec:
e1:71:7a:9d:d0:1d:37:32:6a:eb:d9:d3:e0:68:29:46:e9:b7:
b0:8b:d8:00:d1:8f:9a:a3:7e:45:ce:91:b9:f6:8e:ca:d2:4a:
67:4e:c3:1d:fa:56:c5:a5:ba:11:bb:31:6e:b1:71:5f:35:51:
aa:34:bb:ec:8c:66:7d:3c:06:a8:ab:94:14:14:cd:75:c5:c3:
62:58:36:84:11:21:76:4c:6b:df:83:45:fb:91:78:3b:34:b3:
55:8f:88:6a:40:60:10:d4:e5:74:22:9f:da:ef:36:ec:9c:f6:
d2:84:2c:2f:2d:72:b0:d5:61:6b:ea:70:8b:61:e3:4d:c2:46:
bb:c1:2a:c9:d3:d0:76:94:36:93:22:a8:58:59:f2:4c:46:3f:
cc:68:bd:0b:88:9d:5c:57:06:13:56:18:2e:d3:cc:cd:5e:02:
bb:af:e1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:42:06 2025 by rpki-client