Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/KK3DRs7Ynkbg-dXND3_6M-_mzOI.roa
File: KK3DRs7Ynkbg-dXND3_6M-_mzOI.roa (raw, json)
Hash identifier: 5CKfYhlG5AvqnGA0V373o3OyiC2ywPEm/S+6Tim982Q=
Subject key identifier: 28:AD:C3:46:CE:D8:9E:46:E0:F9:D5:CD:0F:7F:FA:33:EF:E6:CC:E2
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 0196F29999C0D4869925DE2E3AE2A12A5C02
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/KK3DRs7Ynkbg-dXND3_6M-_mzOI.roa
Signing time: Wed 21 May 2025 11:27:54 +0000
ROA not before: Wed 21 May 2025 11:27:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215672
IP address blocks: 80.93.193.0/24 maxlen: 24
80.93.203.0/24 maxlen: 24
80.93.204.0/24 maxlen: 24
80.93.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 May 2025 14:24:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f2:99:99:c0:d4:86:99:25:de:2e:3a:e2:a1:2a:5c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: May 21 11:27:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28adc346ced89e46e0f9d5cd0f7ffa33efe6cce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:de:6d:ff:81:08:21:46:9b:18:a6:0d:94:2d:
1b:67:2f:93:2b:4d:e1:12:6f:dd:80:f4:18:7d:c5:
d1:cd:46:d5:ea:e5:09:3c:be:99:62:66:aa:ff:d0:
ba:5d:ba:87:64:06:d4:9c:b0:4b:59:5e:f3:b0:0e:
f3:6a:55:37:7e:bd:38:9b:75:75:9f:b8:25:b9:e3:
d6:e0:6f:1e:d3:7f:53:d3:12:08:e1:0e:69:ea:e4:
e8:f8:53:b3:4e:bb:9e:e6:9a:45:37:17:b4:8d:23:
c1:6d:69:f1:3e:b0:7d:34:c7:ba:d7:5b:56:a3:5c:
91:46:86:e4:44:a9:03:f7:5c:4e:fe:3d:fa:99:0a:
e4:09:28:46:80:de:2f:1c:c3:42:f8:af:3b:5c:ff:
c2:09:ef:9c:cd:77:b5:1a:99:99:be:fe:49:b2:d5:
08:de:91:70:3e:69:a0:40:3a:37:e2:e2:3b:e9:46:
f8:54:5e:a6:91:57:60:28:ca:4c:b1:89:90:57:11:
d2:13:99:45:33:6f:e0:43:be:06:38:07:47:64:a0:
fe:27:88:8e:c3:df:17:fc:ae:b7:c8:83:45:5e:a0:
7b:6a:7c:7e:9d:c8:7f:95:5a:20:6c:f1:36:61:32:
34:4d:99:fe:2c:a1:5f:b0:03:11:e2:2c:06:7b:89:
69:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AD:C3:46:CE:D8:9E:46:E0:F9:D5:CD:0F:7F:FA:33:EF:E6:CC:E2
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/KK3DRs7Ynkbg-dXND3_6M-_mzOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.193.0/24
80.93.203.0-80.93.205.255
Signature Algorithm: sha256WithRSAEncryption
11:3e:f8:ae:72:30:dd:b4:f3:c5:2a:b6:c3:74:9d:c2:1b:9f:
98:43:5f:df:81:18:37:45:c1:41:d5:ec:6d:19:e9:9f:7c:51:
c5:56:10:76:ef:d4:94:3a:6a:dc:2a:e1:13:75:50:c6:5b:a3:
80:6c:10:a7:da:58:4f:a7:d8:94:14:69:89:7f:50:c3:74:07:
b2:93:92:73:d1:d5:17:e7:97:20:0e:ef:74:8e:99:ce:5b:d0:
af:c3:7d:c5:e0:45:3a:a3:ed:bd:d5:c4:4e:64:10:4f:29:4c:
fd:7f:a2:63:51:99:19:73:90:2d:7f:32:26:1c:5a:a6:29:3f:
aa:4f:e6:79:44:b0:8a:21:46:9c:88:b6:be:89:07:ab:6b:e4:
6f:04:cc:d1:b1:96:ae:68:8e:c6:d0:7b:0f:93:20:b4:be:c1:
87:30:cf:ee:1a:e5:50:25:9f:78:8a:8a:5a:9d:3e:55:35:59:
56:f2:64:fe:bf:f2:97:30:51:2d:e5:9a:fe:c8:5d:5a:a8:1d:
f7:00:5c:4a:c4:a4:38:05:09:c8:6b:51:8d:7a:bf:41:ae:91:
c0:89:78:58:b8:56:a1:2c:f0:b5:10:ac:47:b5:90:42:ed:13:
be:a2:c0:ec:0f:1e:b0:39:a1:d2:a7:77:e9:cc:b9:2e:66:21:
a3:f6:f9:51
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZbymZnA1IaZJd4uOuKhKlwCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1
NmRiZmQwHhcNMjUwNTIxMTEyNzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOGFkYzM0NmNlZDg5ZTQ2ZTBmOWQ1Y2QwZjdmZmEzM2VmZTZjY2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsN5t/4EIIUabGKYNlC0bZy+TK03h
Em/dgPQYfcXRzUbV6uUJPL6ZYmaq/9C6XbqHZAbUnLBLWV7zsA7zalU3fr04m3V1
n7gluePW4G8e039T0xII4Q5p6uTo+FOzTrue5ppFNxe0jSPBbWnxPrB9NMe611tW
o1yRRobkRKkD91xO/j36mQrkCShGgN4vHMNC+K87XP/CCe+czXe1GpmZvv5JstUI
3pFwPmmgQDo34uI76Ub4VF6mkVdgKMpMsYmQVxHSE5lFM2/gQ74GOAdHZKD+J4iO
w98X/K63yINFXqB7anx+nch/lVogbPE2YTI0TZn+LKFfsAMR4iwGe4lpiQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFCitw0bO2J5G4PnVzQ9/+jPv5sziMB8GA1UdIwQY
MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt
ZTIxNjZhZDc0ZTNmLzEvS0szRFJzN1lua2JnLWRYTkQzXzZNLV9tek9JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm
LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAUF3BMAwD
BABQXcsDBAFQXcwwDQYJKoZIhvcNAQELBQADggEBABE++K5yMN2088UqtsN0ncIb
n5hDX9+BGDdFwUHV7G0Z6Z98UcVWEHbv1JQ6atwq4RN1UMZbo4BsEKfaWE+n2JQU
aYl/UMN0B7KTknPR1RfnlyAO73SOmc5b0K/DfcXgRTqj7b3VxE5kEE8pTP1/omNR
mRlzkC1/MiYcWqYpP6pP5nlEsIohRpyItr6JB6tr5G8EzNGxlq5ojsbQew+TILS+
wYcwz+4a5VAln3iKilqdPlU1WVbyZP6/8pcwUS3lmv7IXVqoHfcAXErEpDgFCchr
UY16v0GukcCJeFi4VqEs8LUQrEe1kELtE76iwOwPHrA5odKnd+nMuS5mIaP2+VE=
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:48:55 2025 by rpki-client