Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Il08prcDeVRXdFm7j4B-J-rzHbY.roa
File: Il08prcDeVRXdFm7j4B-J-rzHbY.roa (raw, json)
Hash identifier: +XqH2Tr+Ub0Irh8Hl71LtVwuancz6WBxABEUCfjs+eA=
Subject key identifier: 22:5D:3C:A6:B7:03:79:54:57:74:59:BB:8F:80:7E:27:EA:F3:1D:B6
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 019537713C900EB74C4E2FE4C8C4D42C2AE7
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Il08prcDeVRXdFm7j4B-J-rzHbY.roa
Signing time: Mon 24 Feb 2025 10:12:02 +0000
ROA not before: Mon 24 Feb 2025 10:12:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48678
IP address blocks: 31.210.48.0/24 maxlen: 24
31.210.50.0/24 maxlen: 24
77.92.143.0/24 maxlen: 24
77.92.145.0/24 maxlen: 24
77.92.146.0/24 maxlen: 24
78.135.66.0/24 maxlen: 24
78.135.92.0/24 maxlen: 24
78.135.93.0/24 maxlen: 24
78.135.100.0/24 maxlen: 24
185.17.139.0/24 maxlen: 24
188.132.129.0/24 maxlen: 24
188.132.130.0/24 maxlen: 24
188.132.153.0/24 maxlen: 24
188.132.165.0/24 maxlen: 24
188.132.168.0/24 maxlen: 24
188.132.183.0/24 maxlen: 24
188.132.184.0/24 maxlen: 24
188.132.185.0/24 maxlen: 24
188.132.186.0/24 maxlen: 24
188.132.189.0/24 maxlen: 24
188.132.199.0/24 maxlen: 24
188.132.201.0/24 maxlen: 24
188.132.202.0/24 maxlen: 24
188.132.209.0/24 maxlen: 24
188.132.234.0/24 maxlen: 24
188.132.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Mar 2025 08:54:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:37:71:3c:90:0e:b7:4c:4e:2f:e4:c8:c4:d4:2c:2a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Feb 24 10:12:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=225d3ca6b7037954577459bb8f807e27eaf31db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:25:3b:9e:bb:60:85:2f:a6:a6:e3:6a:29:18:
9a:97:f3:43:0f:6e:26:6e:46:00:54:16:be:cd:66:
39:dd:67:f6:7b:2c:19:6b:0c:6a:97:f3:e7:31:e9:
90:fd:49:50:08:66:f0:8e:15:bf:50:89:bb:f5:98:
c7:9b:59:29:20:ae:5a:fc:6c:e3:e0:32:5c:1f:d7:
53:bb:7a:e6:61:23:9a:80:a3:ea:83:85:39:51:8b:
0e:a9:f0:3e:bc:21:0d:06:57:b4:7f:0b:53:24:73:
a7:fb:10:b4:5d:bb:34:24:4d:87:0f:33:31:39:60:
10:b8:72:2d:0e:4e:c7:77:43:a4:fb:79:ec:46:9b:
53:3c:81:32:25:41:b8:9f:42:81:ae:ea:46:12:03:
91:f8:ab:46:e3:41:48:8f:01:2f:99:48:dd:8c:c1:
02:64:6b:32:ce:99:f5:f1:52:ad:3f:2d:75:74:92:
e6:5a:97:fa:c1:ef:66:52:4b:b8:1c:c6:d4:1d:13:
82:45:6d:b0:9e:1b:71:77:28:01:e2:49:fe:a2:d8:
50:07:79:f1:2f:49:db:c6:e7:6d:1f:9a:61:8c:ca:
38:cf:8d:26:13:db:2d:58:a9:69:76:f0:0c:e6:5a:
65:67:35:b2:e0:bc:2a:2a:56:26:b4:20:34:f3:7b:
da:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5D:3C:A6:B7:03:79:54:57:74:59:BB:8F:80:7E:27:EA:F3:1D:B6
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Il08prcDeVRXdFm7j4B-J-rzHbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.48.0/24
31.210.50.0/24
77.92.143.0/24
77.92.145.0-77.92.146.255
78.135.66.0/24
78.135.92.0/23
78.135.100.0/24
185.17.139.0/24
188.132.129.0-188.132.130.255
188.132.153.0/24
188.132.165.0/24
188.132.168.0/24
188.132.183.0-188.132.186.255
188.132.189.0/24
188.132.199.0/24
188.132.201.0-188.132.202.255
188.132.209.0/24
188.132.234.0/23
Signature Algorithm: sha256WithRSAEncryption
94:73:8d:cb:db:62:85:45:58:6e:91:10:72:91:77:d8:2c:8a:
d7:df:3b:5a:5b:a9:5c:fe:ba:f0:dc:4c:d8:f8:0f:73:aa:5a:
f4:75:88:f3:90:85:92:b3:06:39:2e:22:c2:dc:8e:a8:03:e1:
d2:fa:a4:84:47:74:ea:fd:95:65:d6:66:97:64:dc:c6:f7:6b:
e8:a0:42:b3:7c:ca:a5:ad:1f:9d:cf:c5:4c:ad:bb:dd:5a:24:
04:87:8c:4b:1a:b0:ed:39:f3:ce:2d:d9:2c:64:e8:92:3c:bc:
9e:f1:9c:5c:d3:a1:64:eb:50:51:72:c1:60:7c:27:84:97:9c:
5b:7b:eb:3b:d5:b3:2e:21:11:08:f0:e8:21:09:d4:f9:d8:b7:
89:b8:48:29:67:51:99:60:7d:b9:85:a8:42:16:11:20:51:1b:
d2:b9:41:ec:ce:07:b8:e8:91:a7:d4:f1:d4:d9:40:b4:73:71:
57:44:58:d9:0d:5e:9b:8b:a3:ac:f2:1d:15:1b:82:fc:c1:bd:
3e:3b:1b:d4:34:e3:26:ee:ea:ad:39:c3:0a:f1:32:64:38:3a:
2b:63:80:47:bb:07:23:48:d5:a7:1e:ff:65:c5:6a:4d:cc:71:
68:c9:5a:db:1e:64:5e:73:76:14:22:14:d9:4b:a6:87:e8:d3:
b1:c2:f6:2e
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgISAZU3cTyQDrdMTi/kyMTULCrnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjUwMjI0MTAxMjAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjVkM2NhNmI3MDM3OTU0NTc3NDU5YmI4ZjgwN2UyN2VhZjMxZGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iU7nrtghS+mpuNqKRial/NDD24m
bkYAVBa+zWY53Wf2eywZawxql/PnMemQ/UlQCGbwjhW/UIm79ZjHm1kpIK5a/Gzj
4DJcH9dTu3rmYSOagKPqg4U5UYsOqfA+vCENBle0fwtTJHOn+xC0Xbs0JE2HDzMx
OWAQuHItDk7Hd0Ok+3nsRptTPIEyJUG4n0KBrupGEgOR+KtG40FIjwEvmUjdjMEC
ZGsyzpn18VKtPy11dJLmWpf6we9mUku4HMbUHROCRW2wnhtxdygB4kn+othQB3nx
L0nbxudtH5phjMo4z40mE9stWKlpdvAM5lplZzWy4LwqKlYmtCA083va8QIDAQAB
o4IClDCCApAwHQYDVR0OBBYEFCJdPKa3A3lUV3RZu4+Afifq8x22MB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvSWwwOHByY0RlVlJYZEZtN2o0Qi1KLXJ6SGJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGpBggrBgEFBQcBBwEB/wSBmTCBljCBkwQCAAEwgYwDBAAf
0jADBAAf0jIDBABNXI8wDAMEAE1ckQMEAE1ckgMEAE6HQgMEAU6HXAMEAE6HZAME
ALkRizAMAwQAvISBAwQAvISCAwQAvISZAwQAvISlAwQAvISoMAwDBAC8hLcDBAC8
hLoDBAC8hL0DBAC8hMcwDAMEALyEyQMEALyEygMEALyE0QMEAbyE6jANBgkqhkiG
9w0BAQsFAAOCAQEAlHONy9tihUVYbpEQcpF32CyK1987WlupXP668NxM2PgPc6pa
9HWI85CFkrMGOS4iwtyOqAPh0vqkhEd06v2VZdZml2Tcxvdr6KBCs3zKpa0fnc/F
TK273VokBIeMSxqw7Tnzzi3ZLGTokjy8nvGcXNOhZOtQUXLBYHwnhJecW3vrO9Wz
LiERCPDoIQnU+di3ibhIKWdRmWB9uYWoQhYRIFEb0rlB7M4HuOiRp9Tx1NlAtHNx
V0RY2Q1em4ujrPIdFRuC/MG9Pjsb1DTjJu7qrTnDCvEyZDg6K2OAR7sHI0jVpx7/
ZcVqTcxxaMla2x5kXnN2FCIU2Uumh+jTscL2Lg==
-----END CERTIFICATE-----
Generated at Thu Apr 17 07:00:29 2025 by rpki-client