Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/A-cNKJbI824skO47BgdvmDTrgvU.roa
File: A-cNKJbI824skO47BgdvmDTrgvU.roa (raw, json)
Hash identifier: tIAjk+TRnpd5uqz04V7fJbtQ91h75HDVReF0OaqE8AQ=
Subject key identifier: 03:E7:0D:28:96:C8:F3:6E:2C:90:EE:3B:06:07:6F:98:34:EB:82:F5
Certificate issuer: /CN=b9e67fcb0bdc6001d8cf7073c649eb9819fc5eb8
Certificate serial: 0194228D90A5B5F1839DFDC80EAFB72B4EA2
Authority key identifier: B9:E6:7F:CB:0B:DC:60:01:D8:CF:70:73:C6:49:EB:98:19:FC:5E:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/A-cNKJbI824skO47BgdvmDTrgvU.roa
Signing time: Wed 01 Jan 2025 15:48:10 +0000
ROA not before: Wed 01 Jan 2025 15:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15547
IP address blocks: 31.31.48.0/20 maxlen: 20
77.242.160.0/20 maxlen: 20
78.155.0.0/19 maxlen: 19
81.13.128.0/17 maxlen: 17
81.88.176.0/20 maxlen: 20
81.88.176.0/21 maxlen: 21
86.111.128.0/20 maxlen: 20
92.62.176.0/20 maxlen: 20
92.240.96.0/19 maxlen: 19
95.215.60.0/22 maxlen: 22
178.157.84.0/22 maxlen: 22
178.237.80.0/20 maxlen: 20
185.17.108.0/22 maxlen: 22
185.17.176.0/22 maxlen: 22
185.44.196.0/22 maxlen: 22
185.50.220.0/22 maxlen: 22
185.55.216.0/22 maxlen: 22
188.239.160.0/20 maxlen: 20
192.162.24.0/22 maxlen: 22
194.12.16.0/20 maxlen: 20
195.162.160.0/22 maxlen: 22
195.162.164.0/23 maxlen: 23
195.162.167.0/24 maxlen: 24
195.162.168.0/21 maxlen: 21
195.162.176.0/20 maxlen: 20
213.221.128.0/19 maxlen: 19
213.230.52.0/22 maxlen: 22
213.230.56.0/21 maxlen: 21
213.238.0.0/19 maxlen: 19
217.79.192.0/20 maxlen: 20
2001:14a8::/32 maxlen: 32
2a02:26a0::/29 maxlen: 29
2a03:4380::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 19 Feb 2025 06:42:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:90:a5:b5:f1:83:9d:fd:c8:0e:af:b7:2b:4e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e67fcb0bdc6001d8cf7073c649eb9819fc5eb8
Validity
Not Before: Jan 1 15:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03e70d2896c8f36e2c90ee3b06076f9834eb82f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:25:69:13:7b:5f:7f:45:a9:7c:6f:5d:63:2a:
65:5c:bf:96:ab:30:4b:9f:29:72:e0:0e:b9:ca:62:
1b:f8:ad:e3:a0:5c:7b:6b:9c:da:0e:33:68:88:7f:
d5:c6:82:3c:fd:d1:e5:5b:cd:95:de:02:1e:d3:96:
8a:cc:ce:4d:08:87:82:d5:de:bf:9d:64:d8:c8:e2:
11:39:41:87:b8:f1:5f:f1:c4:cb:51:36:5d:c6:2b:
68:b2:8f:fd:48:6e:b3:83:bb:6e:18:22:fc:2d:5b:
f7:31:eb:50:5d:6e:6f:9f:e7:50:05:55:55:c0:7d:
89:f3:ce:21:dc:27:0f:8f:25:2a:8a:b0:aa:80:98:
a2:b5:1b:4c:b7:ff:46:aa:bb:ba:85:45:03:d9:6c:
a2:d5:35:6a:ca:b9:64:71:f2:c0:94:30:a7:c3:95:
3a:26:21:16:9a:5a:88:c9:6d:07:33:16:a0:94:57:
5c:68:68:15:5c:88:95:8a:ec:99:f0:89:ae:20:ff:
6d:5c:88:6d:cc:b9:51:04:3f:b7:ad:60:e5:1a:11:
cb:dc:28:f4:86:e5:2a:87:f8:a5:2f:64:ea:83:f4:
99:9b:08:67:f3:74:01:fb:74:ee:7c:1f:c9:9e:dc:
c4:4b:c2:bb:cb:a2:07:9c:a4:35:bf:6d:25:db:f6:
8b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E7:0D:28:96:C8:F3:6E:2C:90:EE:3B:06:07:6F:98:34:EB:82:F5
X509v3 Authority Key Identifier:
keyid:B9:E6:7F:CB:0B:DC:60:01:D8:CF:70:73:C6:49:EB:98:19:FC:5E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/A-cNKJbI824skO47BgdvmDTrgvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.31.48.0/20
77.242.160.0/20
78.155.0.0/19
81.13.128.0/17
81.88.176.0/20
86.111.128.0/20
92.62.176.0/20
92.240.96.0/19
95.215.60.0/22
178.157.84.0/22
178.237.80.0/20
185.17.108.0/22
185.17.176.0/22
185.44.196.0/22
185.50.220.0/22
185.55.216.0/22
188.239.160.0/20
192.162.24.0/22
194.12.16.0/20
195.162.160.0-195.162.165.255
195.162.167.0-195.162.191.255
213.221.128.0/19
213.230.52.0-213.230.63.255
213.238.0.0/19
217.79.192.0/20
IPv6:
2001:14a8::/32
2a02:26a0::/29
2a03:4380::/32
Signature Algorithm: sha256WithRSAEncryption
cd:dd:e8:24:fc:32:83:7d:7b:cd:67:dc:ed:6c:46:8a:6c:bc:
09:ca:94:7b:e6:13:11:19:d8:e5:2d:1d:91:10:31:18:68:98:
e5:a7:57:df:e2:a3:69:b6:2a:35:e8:ac:5b:25:60:16:64:a4:
5f:8c:21:4d:70:39:3a:2e:78:5b:a4:63:1e:28:9c:47:e0:4f:
e5:69:7c:1e:ca:d3:82:5c:ee:7d:a1:7e:20:f8:be:dd:b5:a4:
ab:74:63:f1:5d:be:e8:2d:bb:6a:54:c0:56:16:ea:eb:88:c7:
3a:80:57:09:23:a0:4b:94:d3:42:9c:94:65:7e:9e:85:df:2b:
12:54:d5:f7:a4:a9:e0:35:d2:66:f3:cb:7e:d5:c9:db:a0:02:
5f:ea:fb:39:bb:4e:26:57:63:0a:27:c8:31:4d:62:9b:76:fd:
bd:d3:0b:51:a0:93:db:ba:6e:89:c6:f1:a0:8c:28:77:19:0f:
29:79:03:c1:f9:d6:94:38:2b:7e:1e:8a:ab:73:76:c9:b1:2d:
e5:2b:71:b9:23:e2:81:8a:34:8d:f7:d9:f6:1e:04:e8:09:3f:
39:50:8c:2e:af:52:b4:af:45:a7:6f:23:e0:72:a2:86:0a:4b:
d2:66:a8:93:63:d7:6a:5f:b7:d1:45:67:07:ec:f7:b1:9e:44:
58:82:d4:f1
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgISAZQijZCltfGDnf3IDq+3K06iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5ZTY3ZmNiMGJkYzYwMDFkOGNmNzA3M2M2NDllYjk4MTlm
YzVlYjgwHhcNMjUwMTAxMTU0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwM2U3MGQyODk2YzhmMzZlMmM5MGVlM2IwNjA3NmY5ODM0ZWI4MmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7SVpE3tff0WpfG9dYyplXL+WqzBL
nyly4A65ymIb+K3joFx7a5zaDjNoiH/VxoI8/dHlW82V3gIe05aKzM5NCIeC1d6/
nWTYyOIROUGHuPFf8cTLUTZdxitoso/9SG6zg7tuGCL8LVv3MetQXW5vn+dQBVVV
wH2J884h3CcPjyUqirCqgJiitRtMt/9Gqru6hUUD2Wyi1TVqyrlkcfLAlDCnw5U6
JiEWmlqIyW0HMxaglFdcaGgVXIiViuyZ8ImuIP9tXIhtzLlRBD+3rWDlGhHL3Cj0
huUqh/ilL2Tqg/SZmwhn83QB+3TufB/JntzES8K7y6IHnKQ1v20l2/aLsQIDAQAB
o4IC0zCCAs8wHQYDVR0OBBYEFAPnDSiWyPNuLJDuOwYHb5g064L1MB8GA1UdIwQY
MBaAFLnmf8sL3GAB2M9wc8ZJ65gZ/F64MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWVaX3l3dmNZQUhZejNCenhrbnJtQm44WHJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8wZGJlNTYtM2RhYS00YTY0LTkyNWEt
ZmE3MWFlMDVkYzNmLzEvQS1jTktKYkk4MjRza080N0JnZHZtRFRyZ3ZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8wZGJlNTYtM2RhYS00YTY0LTkyNWEtZmE3MWFlMDVkYzNm
LzEvdWVaX3l3dmNZQUhZejNCenhrbnJtQm44WHJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHoBggrBgEFBQcBBwEB/wSB2DCB1TCBtQQCAAEwga4DBAQf
HzADBARN8qADBAVOmwADBAdRDYADBARRWLADBARWb4ADBARcPrADBAVc8GADBAJf
1zwDBAKynVQDBASy7VADBAK5EWwDBAK5EbADBAK5LMQDBAK5MtwDBAK5N9gDBAS8
76ADBALAohgDBATCDBAwDAMEBcOioAMEAcOipDAMAwQAw6KnAwQGw6KAAwQF1d2A
MAwDBALV5jQDBAbV5gADBAXV7gADBATZT8AwGwQCAAIwFQMFACABFKgDBQMqAiag
AwUAKgNDgDANBgkqhkiG9w0BAQsFAAOCAQEAzd3oJPwyg317zWfc7WxGimy8CcqU
e+YTERnY5S0dkRAxGGiY5adX3+KjabYqNeisWyVgFmSkX4whTXA5Oi54W6RjHiic
R+BP5Wl8HsrTglzufaF+IPi+3bWkq3Rj8V2+6C27alTAVhbq64jHOoBXCSOgS5TT
QpyUZX6ehd8rElTV96Sp4DXSZvPLftXJ26ACX+r7ObtOJldjCifIMU1im3b9vdML
UaCT27puicbxoIwodxkPKXkDwfnWlDgrfh6Kq3N2ybEt5StxuSPigYo0jffZ9h4E
6Ak/OVCMLq9StK9Fp28j4HKihgpL0maok2PXal+30UVnB+z3sZ5EWILU8Q==
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:25:09 2025 by rpki-client