Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/9oOSfdfstw1QvPp4feubqyR2O0Y.roa
File: 9oOSfdfstw1QvPp4feubqyR2O0Y.roa (raw, json)
Hash identifier: ngrcu5lzo3NGzJzeomkWp1G7/vgF01mZUUb+yPGpcjc=
Subject key identifier: F6:83:92:7D:D7:EC:B7:0D:50:BC:FA:78:7D:EB:9B:AB:24:76:3B:46
Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Certificate serial: 0195FAC72460CD9E8081DB67D8C6D3ACA646
Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/9oOSfdfstw1QvPp4feubqyR2O0Y.roa
Signing time: Thu 03 Apr 2025 08:31:49 +0000
ROA not before: Thu 03 Apr 2025 08:31:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24685
IP address blocks: 31.172.136.0/23 maxlen: 32
31.172.136.0/24 maxlen: 32
31.172.137.0/24 maxlen: 32
31.172.140.0/24 maxlen: 32
31.172.141.0/24 maxlen: 32
80.92.231.0/24 maxlen: 32
80.92.233.0/24 maxlen: 32
80.92.234.0/24 maxlen: 32
80.92.235.0/24 maxlen: 32
82.117.229.0/24 maxlen: 32
91.226.1.0/24 maxlen: 32
92.60.178.0/23 maxlen: 32
92.60.178.0/24 maxlen: 32
92.60.179.0/24 maxlen: 32
128.0.170.0/24 maxlen: 32
128.0.172.0/24 maxlen: 32
128.0.174.0/24 maxlen: 32
185.38.209.0/24 maxlen: 32
185.39.196.0/24 maxlen: 32
185.45.244.0/22 maxlen: 32
193.111.0.0/24 maxlen: 32
193.111.48.0/23 maxlen: 32
212.110.134.0/23 maxlen: 32
Validation: Failed, certificate revoked on Fri 04 Apr 2025 00:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fa:c7:24:60:cd:9e:80:81:db:67:d8:c6:d3:ac:a6:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Validity
Not Before: Apr 3 08:31:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f683927dd7ecb70d50bcfa787deb9bab24763b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:71:9d:68:a2:c3:c8:d8:28:de:05:fb:8e:73:
90:d0:49:67:58:4c:9e:66:f5:1e:57:18:fe:c8:fe:
50:95:fd:13:92:29:cf:c2:b1:98:f9:49:1b:7b:cb:
4e:9b:b3:7e:fc:82:15:53:6e:66:9e:7f:06:30:49:
8d:fe:57:d6:35:b4:5b:bd:35:2b:25:5f:26:d9:53:
e9:b8:bd:44:31:9e:c8:85:bc:44:8d:c4:55:fd:be:
fb:a4:64:10:27:68:40:25:25:bb:31:f7:14:3a:f8:
62:a7:46:62:7a:b2:dc:78:90:02:21:4b:9e:84:05:
97:0e:83:9d:c9:cf:0a:e3:8e:b0:1a:72:7f:53:6b:
37:43:9d:5c:5a:07:25:b9:63:73:02:5b:51:a6:0c:
b5:ac:6e:5f:41:ee:be:53:f0:2d:1f:63:b3:5f:f2:
03:cb:11:4d:e8:81:85:6b:40:00:3c:8e:5f:81:b4:
36:5f:2c:73:43:7d:c2:ae:55:bf:3e:3f:ad:bb:c6:
af:b3:70:8b:09:ab:85:71:ae:c8:fd:59:10:ef:f4:
64:cb:b8:29:bf:0f:9e:81:cd:66:c6:d7:c5:fc:24:
37:2e:f5:c8:7f:5e:6a:76:3d:da:23:24:69:af:66:
57:2e:02:97:04:35:a6:bb:0b:f8:59:77:56:e6:66:
bf:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:83:92:7D:D7:EC:B7:0D:50:BC:FA:78:7D:EB:9B:AB:24:76:3B:46
X509v3 Authority Key Identifier:
keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/9oOSfdfstw1QvPp4feubqyR2O0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.136.0/23
31.172.140.0/23
80.92.231.0/24
80.92.233.0-80.92.235.255
82.117.229.0/24
91.226.1.0/24
92.60.178.0/23
128.0.170.0/24
128.0.172.0/24
128.0.174.0/24
185.38.209.0/24
185.39.196.0/24
185.45.244.0/22
193.111.0.0/24
193.111.48.0/23
212.110.134.0/23
Signature Algorithm: sha256WithRSAEncryption
95:53:bd:cb:77:70:32:26:02:53:42:4b:f4:0d:f1:03:0f:be:
cc:97:8e:ac:9c:06:87:98:5d:e9:da:88:6d:9d:3d:65:35:ea:
21:bd:37:8b:44:b1:bf:59:56:e4:5b:ab:3d:26:d5:39:f8:93:
68:1a:ad:6e:19:f3:31:ec:28:e9:3a:cb:0c:da:e9:29:cf:d2:
ed:cf:f2:a0:4a:01:50:a1:8f:da:ba:d9:ea:78:8e:f7:5f:14:
6c:5b:03:a5:e6:12:fa:3d:63:ba:45:43:3b:37:53:d1:cb:00:
10:8c:20:aa:43:39:48:fa:71:cf:76:7f:26:4a:d2:00:6a:4c:
be:b1:e0:69:dc:11:a4:d5:8b:e9:e9:8e:34:f7:27:ab:1f:25:
31:44:0d:fa:d6:f2:25:05:30:2e:91:55:50:46:88:64:ce:fb:
16:2f:69:a9:32:35:90:b0:90:46:fa:1d:c4:a6:43:13:78:cc:
c3:bf:f3:62:50:d0:ba:82:1d:37:06:bb:5c:09:f2:e8:17:66:
81:8b:fa:ec:98:61:a1:90:0f:23:2a:b5:c1:5f:40:d4:7f:87:
e9:2a:24:7d:61:31:d2:c6:cc:c9:82:de:7e:df:0b:87:92:1e:
72:b1:b1:3b:6c:d5:f6:62:24:54:0f:0f:ae:61:61:36:7e:83:
30:b0:10:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:19:02 2025 by rpki-client