Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/kMbSjzfMkXslb2YVbBbnIleOoHs.roa
File: kMbSjzfMkXslb2YVbBbnIleOoHs.roa (raw, json)
Hash identifier: /vjcCgG+KHQw5r9VASk+6xoHDzyyCj6yryLw25W5mU4=
Subject key identifier: 90:C6:D2:8F:37:CC:91:7B:25:6F:66:15:6C:16:E7:22:57:8E:A0:7B
Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial: 0196F1D3D59D1CAA297BE16AACD5570C4909
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/kMbSjzfMkXslb2YVbBbnIleOoHs.roa
Signing time: Wed 21 May 2025 07:51:53 +0000
ROA not before: Wed 21 May 2025 07:51:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202391
IP address blocks: 95.38.144.0/22 maxlen: 22
95.38.144.0/24 maxlen: 24
95.38.145.0/24 maxlen: 24
95.38.147.0/24 maxlen: 24
95.38.148.0/22 maxlen: 22
95.38.148.0/24 maxlen: 24
95.38.149.0/24 maxlen: 24
95.38.192.0/24 maxlen: 24
95.38.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 25 May 2025 05:26:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f1:d3:d5:9d:1c:aa:29:7b:e1:6a:ac:d5:57:0c:49:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Validity
Not Before: May 21 07:51:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90c6d28f37cc917b256f66156c16e722578ea07b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:61:6b:91:91:c6:c6:55:83:a0:e9:dc:a1:3e:
2e:50:6d:3b:05:c1:6b:bd:cb:96:81:51:b0:e2:fb:
0f:1a:76:55:25:e3:62:fe:f8:60:8c:74:cf:30:a7:
f4:81:06:72:1f:54:cb:44:8f:a5:43:4e:e3:ac:9a:
97:9a:d3:a4:b0:48:93:a4:df:2e:a2:51:e7:83:3b:
ac:dc:d0:08:38:b3:dd:99:a2:10:70:02:2e:af:e3:
1c:8d:4f:e3:9d:15:0c:d2:77:22:56:c7:24:a3:4c:
47:d8:a6:be:83:e2:55:b6:44:b5:e2:1e:48:b6:e0:
55:92:f4:a6:b4:1b:ae:99:78:92:94:b0:9f:a2:ac:
de:c1:6a:94:67:33:50:30:13:3c:74:83:82:3d:b4:
49:7e:47:f8:44:08:34:e8:eb:bc:48:9e:db:f5:f6:
b6:60:a5:dd:c6:b8:ed:66:09:d4:da:08:b8:0d:ff:
97:b6:bc:03:e4:41:db:7a:fd:ff:8e:ed:e8:bd:e1:
0a:c5:45:be:11:31:14:55:98:37:8b:67:0d:fc:59:
d4:ac:40:a5:45:8a:99:c6:1a:cd:e6:97:42:2c:80:
2f:28:08:1a:6b:04:df:d7:74:54:a1:2b:9e:71:15:
39:ec:d5:60:4c:94:a8:17:d0:9d:ed:ac:ca:0f:c3:
bb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C6:D2:8F:37:CC:91:7B:25:6F:66:15:6C:16:E7:22:57:8E:A0:7B
X509v3 Authority Key Identifier:
keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/kMbSjzfMkXslb2YVbBbnIleOoHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.38.144.0/21
95.38.192.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:68:c9:b2:49:28:f8:f9:fa:34:da:ee:70:01:4b:92:f8:8e:
d8:35:f4:61:86:72:6c:af:9e:21:78:7c:3f:2e:c0:56:44:28:
17:94:ed:a5:1b:a4:ce:2a:bd:a8:8a:14:c0:cf:72:6a:d9:6e:
d8:ec:60:3d:60:81:95:aa:f2:46:d1:b8:19:1f:94:20:b6:d1:
2d:31:d4:22:b7:dd:c6:dd:38:80:ac:23:33:a8:71:78:f1:6f:
a4:10:95:ed:68:a1:62:b3:a4:5c:dd:2a:15:1c:c8:fc:a5:81:
a8:e0:15:aa:69:be:07:ee:2e:7f:74:66:27:46:04:b8:e3:17:
f0:2f:b1:bc:79:ff:45:7d:4e:2e:64:1c:94:7a:2c:b0:de:05:
ca:44:7f:dc:1a:13:bf:fc:31:15:0a:f4:26:de:39:44:e0:36:
9e:98:fa:da:36:95:39:40:96:c9:90:2e:44:45:99:35:ac:28:
56:96:e3:19:8f:3e:6d:a1:aa:34:70:43:77:53:8d:0f:24:7e:
14:f5:e0:a9:13:f0:80:9d:36:f5:35:2c:86:e2:60:d0:4a:69:
06:10:f4:ad:2d:9d:ad:2a:03:e7:06:b0:37:be:f4:74:be:7d:
03:4a:0e:bc:f3:c6:cf:4a:7b:9f:1b:65:3b:e9:3f:8b:1a:e8:
1a:70:6e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 08:43:07 2025 by rpki-client