Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/l3mp-cfLhuPzlTAudJxCG1UIVuY.roa
File: l3mp-cfLhuPzlTAudJxCG1UIVuY.roa (raw, json)
Hash identifier: 9feaH2zv8BY8YuB+O/b6mwRY2M9PY0sP+3n6fRcxEkA=
Subject key identifier: 97:79:A9:F9:C7:CB:86:E3:F3:95:30:2E:74:9C:42:1B:55:08:56:E6
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0196CD45913F9132E41FE730D28669140244
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/l3mp-cfLhuPzlTAudJxCG1UIVuY.roa
Signing time: Wed 14 May 2025 05:30:10 +0000
ROA not before: Wed 14 May 2025 05:30:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34304
IP address blocks: 80.96.99.0/24 maxlen: 24
80.96.106.0/24 maxlen: 24
81.180.252.0/23 maxlen: 23
81.181.173.0/24 maxlen: 24
85.122.84.0/24 maxlen: 24
194.102.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Jun 2025 14:35:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:45:91:3f:91:32:e4:1f:e7:30:d2:86:69:14:02:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: May 14 05:30:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9779a9f9c7cb86e3f395302e749c421b550856e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9f:c7:20:87:c0:73:f8:70:5f:c8:e5:82:9e:
97:78:68:59:68:b0:52:a5:49:ca:bf:83:ee:85:17:
a1:c8:37:c0:0f:97:96:91:34:b3:de:1e:4b:5e:fb:
63:3b:94:66:92:08:bf:6f:be:9f:4f:c0:48:50:aa:
0b:27:2d:f5:8a:c2:65:fe:a7:52:54:a6:c2:a9:f7:
5a:e1:bf:8a:47:f7:83:9d:62:02:4e:a2:2d:47:f2:
fe:ef:03:e5:89:5c:81:c1:d7:71:5f:f2:d7:43:fc:
49:48:11:bf:19:cb:d3:85:2c:8a:f7:30:b7:7a:22:
61:0d:3f:14:e1:e9:e4:76:bb:69:3d:d2:04:64:1d:
fe:2e:d2:0b:ba:6b:35:96:91:a2:0c:1f:41:06:25:
cb:f6:b4:8b:98:e8:b4:d1:b1:bd:3c:2d:0e:15:0c:
0a:c4:44:3d:f1:65:b4:e8:86:ad:d5:6e:0f:5a:3a:
46:b2:8e:9e:91:63:d2:ae:dc:09:76:59:a9:ae:b2:
54:60:a9:75:d2:2b:8e:d6:1a:13:60:02:7c:de:ad:
b6:57:56:12:7f:a0:87:32:ef:ff:8e:d9:d1:03:83:
33:5d:40:47:e4:8e:3c:00:25:41:05:d0:34:7c:fb:
43:6f:84:05:31:ad:8a:e7:42:56:d5:2c:7b:12:fa:
81:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:79:A9:F9:C7:CB:86:E3:F3:95:30:2E:74:9C:42:1B:55:08:56:E6
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/l3mp-cfLhuPzlTAudJxCG1UIVuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.99.0/24
80.96.106.0/24
81.180.252.0/23
81.181.173.0/24
85.122.84.0/24
194.102.217.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:fb:46:65:2b:9a:56:04:8d:2c:e2:98:91:92:d2:fe:0a:a0:
50:fa:36:16:97:ed:f3:75:6d:81:d8:f5:a1:a4:38:ed:b0:1b:
f0:85:a9:f6:09:03:19:cb:5c:c2:52:30:da:11:e6:95:b7:9e:
5e:10:31:2b:f3:27:86:82:68:c4:29:00:ce:e6:9f:76:73:25:
47:e8:f6:1d:09:f5:0c:5f:8b:a9:0d:e7:fb:0f:b0:51:e1:a1:
b7:2e:a3:00:98:e6:04:dd:aa:82:e1:19:94:0f:54:bc:67:f7:
6e:3d:44:8c:93:5a:c5:a4:b0:98:1f:17:57:1c:10:43:88:55:
00:44:16:32:d7:1a:7d:f9:e9:6e:a8:bd:f3:00:97:64:b7:da:
e9:58:b7:51:4f:fb:8f:12:73:1d:a1:18:09:da:94:c0:a0:d7:
c5:e0:f1:6b:ba:0d:33:ed:27:ee:41:a8:75:99:9f:7b:73:c1:
aa:69:97:43:b1:dd:ce:43:d7:fb:45:2a:56:00:f2:ca:80:ca:
dd:d8:fa:13:1f:6b:26:29:4e:0d:71:93:18:d1:65:d8:87:4e:
86:32:09:45:59:86:67:ce:cf:7f:fd:0e:6b:a1:07:de:e8:69:
de:ad:3e:d5:52:56:76:11:99:9a:99:39:f8:46:4e:26:aa:ed:
72:22:29:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:28:40 2025 by rpki-client