Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/s7qkXdaypFgIeW96vJ3zntkO_xM.roa
File: s7qkXdaypFgIeW96vJ3zntkO_xM.roa (raw, json)
Hash identifier: ZSykcOyZn+T9NBpqHrIqAJvVanoKqBgrcx3lS6z701I=
Subject key identifier: B3:BA:A4:5D:D6:B2:A4:58:08:79:6F:7A:BC:9D:F3:9E:D9:0E:FF:13
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0193AFBAEA3B252D7A1CF1EB80EA4643EFFC
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/s7qkXdaypFgIeW96vJ3zntkO_xM.roa
Signing time: Tue 10 Dec 2024 08:41:22 +0000
ROA not before: Tue 10 Dec 2024 08:41:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8708
IP address blocks: 80.96.12.0/24 maxlen: 24
80.96.43.0/24 maxlen: 24
80.96.47.0/24 maxlen: 24
80.96.51.0/24 maxlen: 24
80.96.67.0/24 maxlen: 24
80.96.69.0/24 maxlen: 24
80.96.72.0/24 maxlen: 24
80.96.79.0/24 maxlen: 24
80.96.219.0/24 maxlen: 24
80.97.147.0/24 maxlen: 24
80.97.148.0/24 maxlen: 24
80.97.149.0/24 maxlen: 24
81.180.27.0/24 maxlen: 24
81.181.30.0/24 maxlen: 24
81.181.112.0/24 maxlen: 24
81.181.128.0/24 maxlen: 24
81.181.167.0/24 maxlen: 24
81.181.246.0/24 maxlen: 24
85.120.20.0/24 maxlen: 24
85.120.23.0/24 maxlen: 24
193.226.16.0/24 maxlen: 24
193.226.116.0/24 maxlen: 24
193.226.125.0/24 maxlen: 24
193.226.127.0/24 maxlen: 24
193.230.158.0/24 maxlen: 24
193.230.171.0/24 maxlen: 24
193.230.217.0/24 maxlen: 24
193.230.229.0/24 maxlen: 24
193.231.75.0/24 maxlen: 24
193.231.108.0/24 maxlen: 24
193.231.184.0/24 maxlen: 24
193.231.194.0/24 maxlen: 24
193.231.226.0/24 maxlen: 24
193.231.233.0/24 maxlen: 24
193.231.236.0/24 maxlen: 24
193.231.238.0/24 maxlen: 24
193.231.252.0/24 maxlen: 24
194.102.98.0/24 maxlen: 24
194.102.134.0/24 maxlen: 24
194.102.229.0/24 maxlen: 24
194.153.224.0/24 maxlen: 24
217.156.14.0/24 maxlen: 24
217.156.20.0/23 maxlen: 23
217.156.41.0/24 maxlen: 24
217.156.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:47:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:af:ba:ea:3b:25:2d:7a:1c:f1:eb:80:ea:46:43:ef:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Dec 10 08:41:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3baa45dd6b2a45808796f7abc9df39ed90eff13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:73:1d:17:f0:d9:0b:03:40:87:5f:d1:46:81:
be:1b:e0:04:cb:a3:69:66:ba:40:f3:40:dc:f1:45:
fb:9a:c0:08:72:48:81:4b:97:a3:7c:d8:9a:df:a7:
56:e9:47:35:bb:56:58:39:f2:4f:20:64:e2:5b:87:
1b:d0:61:ac:a3:66:7b:cb:27:e1:e3:c0:96:73:05:
e3:f1:bf:9b:e2:a9:a9:b4:64:93:ea:09:5b:6b:a2:
72:92:d7:92:d1:59:92:1a:20:77:5c:21:6d:f0:87:
32:4e:25:b7:ab:3a:c2:6f:27:8d:94:89:e6:a5:1f:
8e:8d:c6:f9:50:4a:81:03:95:6a:e2:9f:98:3c:37:
7b:34:6f:a3:23:a2:1c:6c:1b:e7:61:43:0e:d5:8e:
9e:f0:4e:24:df:ca:0f:cb:5a:c1:1a:f0:93:1c:84:
59:b1:4b:f3:b5:f2:90:98:5e:6e:46:e9:f6:f5:f1:
c1:de:04:cf:d1:02:dc:e8:e0:4e:ba:dc:09:6d:ac:
83:72:0a:61:e2:2a:14:13:cc:79:cd:12:51:03:e2:
02:ec:0a:73:af:51:17:6a:0f:c8:99:4e:80:9a:43:
05:7a:da:96:c6:1e:8a:ae:86:de:27:af:5e:a6:57:
c8:dd:2a:54:74:1f:b7:ac:7d:ae:27:34:53:bd:d9:
0f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BA:A4:5D:D6:B2:A4:58:08:79:6F:7A:BC:9D:F3:9E:D9:0E:FF:13
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/s7qkXdaypFgIeW96vJ3zntkO_xM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.12.0/24
80.96.43.0/24
80.96.47.0/24
80.96.51.0/24
80.96.67.0/24
80.96.69.0/24
80.96.72.0/24
80.96.79.0/24
80.96.219.0/24
80.97.147.0-80.97.149.255
81.180.27.0/24
81.181.30.0/24
81.181.112.0/24
81.181.128.0/24
81.181.167.0/24
81.181.246.0/24
85.120.20.0/24
85.120.23.0/24
193.226.16.0/24
193.226.116.0/24
193.226.125.0/24
193.226.127.0/24
193.230.158.0/24
193.230.171.0/24
193.230.217.0/24
193.230.229.0/24
193.231.75.0/24
193.231.108.0/24
193.231.184.0/24
193.231.194.0/24
193.231.226.0/24
193.231.233.0/24
193.231.236.0/24
193.231.238.0/24
193.231.252.0/24
194.102.98.0/24
194.102.134.0/24
194.102.229.0/24
194.153.224.0/24
217.156.14.0/24
217.156.20.0/23
217.156.41.0/24
217.156.92.0/24
Signature Algorithm: sha256WithRSAEncryption
39:99:81:4b:fa:ad:28:45:d9:fd:fc:bd:8a:1e:dc:1a:29:b4:
fb:22:d6:e0:9b:d2:c5:f3:3b:0c:97:30:45:2a:f0:12:4a:31:
30:db:b9:ff:cb:f5:89:fc:ec:57:bf:7b:6b:81:05:d8:cf:5f:
1e:32:d3:cf:a3:98:f6:35:7e:af:a5:4a:04:a9:c7:a7:89:f1:
e2:ec:51:ef:63:05:ca:46:12:03:d7:a8:6b:6d:12:9a:1f:f5:
33:57:5a:cb:f8:ee:e8:87:1f:5d:93:5c:5a:11:e8:c7:b6:40:
2d:d3:eb:bc:a4:13:da:eb:86:01:f1:fe:4e:f7:44:99:0d:d3:
84:2f:ac:21:3c:e2:5f:78:db:05:ad:a6:51:af:b3:5b:95:3b:
5f:85:7b:a9:a6:6d:2e:16:c8:98:33:84:d6:4e:b3:bd:be:89:
af:d0:4c:d5:57:cf:a1:bd:7e:60:bb:b1:0f:da:ae:6e:d2:21:
bf:a6:20:3c:5b:fe:63:45:bf:10:cd:3b:fa:2c:af:c3:4e:3d:
81:3e:8d:4c:81:77:63:d9:7c:ff:2b:18:05:6a:77:44:4c:d3:
db:8e:3a:57:7b:57:55:34:aa:8f:41:15:29:bb:cf:9b:bd:e4:
7c:ad:32:54:5e:0d:51:05:b6:4c:db:1a:60:96:e2:fc:00:3e:
a2:8f:ca:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:16:21 2025 by rpki-client