Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/A18MvISdqGfWAhlc0eV2AYPmwPs.roa
File: A18MvISdqGfWAhlc0eV2AYPmwPs.roa (raw, json)
Hash identifier: ILv2DwE0ejSeKdcGwqvVwTTd+DAJi3HeMYXhPrombB0=
Subject key identifier: 03:5F:0C:BC:84:9D:A8:67:D6:02:19:5C:D1:E5:76:01:83:E6:C0:FB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194400026E9E77F0459015BE6DA27A7DA20
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/A18MvISdqGfWAhlc0eV2AYPmwPs.roa
Signing time: Tue 07 Jan 2025 09:02:19 +0000
ROA not before: Tue 07 Jan 2025 09:02:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215439
IP address blocks: 31.13.208.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.133.251.0/24 maxlen: 24
83.143.112.0/24 maxlen: 24
84.21.173.0/24 maxlen: 24
87.120.165.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.186.0/24 maxlen: 24
93.123.84.0/24 maxlen: 24
94.156.112.0/24 maxlen: 24
94.156.115.0/24 maxlen: 24
94.156.179.0/24 maxlen: 24
94.156.237.0/24 maxlen: 24
171.22.31.0/24 maxlen: 24
185.246.223.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
193.35.17.0/24 maxlen: 24
193.58.121.0/24 maxlen: 24
193.58.122.0/24 maxlen: 24
193.222.99.0/24 maxlen: 24
194.31.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Jan 2025 09:13:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:40:00:26:e9:e7:7f:04:59:01:5b:e6:da:27:a7:da:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 7 09:02:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=035f0cbc849da867d602195cd1e5760183e6c0fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5e:3a:a8:35:ac:bb:f2:9d:90:91:f8:34:da:
00:03:73:f1:09:f6:1b:cd:34:ca:50:e4:a2:c7:f9:
ea:01:18:3a:59:8c:ed:d6:c1:ef:07:00:dc:0b:c5:
ad:ab:6d:f2:95:81:cc:43:ff:56:13:fb:2b:65:80:
c0:28:1e:89:4d:cf:41:d2:a3:44:e3:33:50:f2:b1:
6f:9c:93:4b:33:1f:8a:d9:fb:50:dd:32:71:18:c2:
6b:d2:1b:24:0f:19:84:0f:df:7a:d0:33:c5:08:ad:
3d:38:3e:14:97:d5:6c:60:ea:f8:4b:7a:36:05:c6:
55:b9:be:e7:f6:00:bf:08:a5:39:ed:e4:c8:c3:2a:
67:2f:7d:d1:ef:a0:81:00:19:0b:91:8f:d8:68:5a:
cc:1b:54:3b:1c:a6:31:b1:dd:7b:8f:c1:ce:f0:5a:
d0:e3:ac:cb:7e:6c:55:88:19:1f:4b:10:11:e1:12:
6a:92:5e:ab:27:d8:27:c9:bc:a9:48:f6:1a:f7:e8:
bc:db:c4:07:ff:61:93:a0:6a:ce:a0:19:31:72:32:
92:b2:18:a4:e6:c4:28:ce:e0:79:c8:cb:a0:fc:dd:
60:cf:18:60:6a:e0:5b:13:66:2d:4c:b7:be:ae:ea:
2b:fe:bd:0b:33:75:33:5c:54:39:d9:f3:50:4c:bc:
31:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:5F:0C:BC:84:9D:A8:67:D6:02:19:5C:D1:E5:76:01:83:E6:C0:FB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/A18MvISdqGfWAhlc0eV2AYPmwPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.208.0/24
45.66.228.0/24
45.133.251.0/24
83.143.112.0/24
84.21.173.0/24
87.120.165.0-87.120.166.255
87.120.186.0/24
93.123.84.0/24
94.156.112.0/24
94.156.115.0/24
94.156.179.0/24
94.156.237.0/24
171.22.31.0/24
185.246.223.0/24
193.25.216.0/24
193.35.17.0/24
193.58.121.0-193.58.122.255
193.222.99.0/24
194.31.223.0/24
Signature Algorithm: sha256WithRSAEncryption
70:ce:27:3c:7a:6c:40:9a:8d:0b:89:13:df:e2:d2:20:3d:71:
95:91:01:e3:5f:f2:89:38:46:cc:6c:c0:fc:41:2b:a2:78:46:
e5:a8:34:0f:37:95:1b:24:89:b4:3c:05:d7:65:e6:08:0e:18:
71:6f:a4:32:a9:75:89:f0:3d:69:d4:ff:32:86:b0:a3:bc:5b:
9b:0c:45:34:31:9e:c3:40:0e:24:31:c8:8f:7e:23:be:4f:22:
ca:4c:f6:cb:c6:12:d3:db:9a:d4:7a:c4:85:7d:c8:e1:b7:21:
95:43:76:e3:fb:95:82:34:23:78:68:43:66:6b:14:82:9f:6c:
a6:c4:81:bf:d0:d6:70:80:cc:c9:3f:45:d8:d1:2a:7e:68:e4:
05:e5:1a:27:a2:8c:8e:c7:12:b8:1f:6b:c4:8c:f9:36:eb:d6:
09:b8:78:19:11:f2:b0:36:df:57:a8:b1:32:5d:8e:b0:1c:64:
89:82:18:5f:84:f2:d3:93:40:c4:ac:d0:fb:c5:5c:1f:7e:b1:
4b:68:46:2c:48:48:74:96:81:08:eb:36:69:15:32:4e:b8:e7:
8f:ba:d0:a4:4f:57:bd:79:f4:c3:e8:e7:ba:5d:1d:e0:7b:41:
86:3e:99:72:39:32:8f:55:0b:af:20:70:89:32:13:bd:69:3c:
34:73:c5:cf
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgISAZRAACbp538EWQFb5tonp9ogMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMTA3MDkwMjE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzVmMGNiYzg0OWRhODY3ZDYwMjE5NWNkMWU1NzYwMTgzZTZjMGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzV46qDWsu/KdkJH4NNoAA3PxCfYb
zTTKUOSix/nqARg6WYzt1sHvBwDcC8Wtq23ylYHMQ/9WE/srZYDAKB6JTc9B0qNE
4zNQ8rFvnJNLMx+K2ftQ3TJxGMJr0hskDxmED9960DPFCK09OD4Ul9VsYOr4S3o2
BcZVub7n9gC/CKU57eTIwypnL33R76CBABkLkY/YaFrMG1Q7HKYxsd17j8HO8FrQ
46zLfmxViBkfSxAR4RJqkl6rJ9gnybypSPYa9+i828QH/2GToGrOoBkxcjKSshik
5sQozuB5yMug/N1gzxhgauBbE2YtTLe+ruor/r0LM3UzXFQ52fNQTLwxNwIDAQAB
o4ICijCCAoYwHQYDVR0OBBYEFANfDLyEnahn1gIZXNHldgGD5sD7MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvQTE4TXZJU2RxR2ZXQWhsYzBlVjJBWVBtd1BzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGfBggrBgEFBQcBBwEB/wSBjzCBjDCBiQQCAAEwgYIDBAAf
DdADBAAtQuQDBAAthfsDBABTj3ADBABUFa0wDAMEAFd4pQMEAFd4pgMEAFd4ugME
AF17VAMEAF6ccAMEAF6ccwMEAF6cswMEAF6c7QMEAKsWHwMEALn23wMEAMEZ2AME
AMEjETAMAwQAwTp5AwQAwTp6AwQAwd5jAwQAwh/fMA0GCSqGSIb3DQEBCwUAA4IB
AQBwzic8emxAmo0LiRPf4tIgPXGVkQHjX/KJOEbMbMD8QSuieEblqDQPN5UbJIm0
PAXXZeYIDhhxb6QyqXWJ8D1p1P8yhrCjvFubDEU0MZ7DQA4kMciPfiO+TyLKTPbL
xhLT25rUesSFfcjhtyGVQ3bj+5WCNCN4aENmaxSCn2ymxIG/0NZwgMzJP0XY0Sp+
aOQF5RonooyOxxK4H2vEjPk269YJuHgZEfKwNt9XqLEyXY6wHGSJghhfhPLTk0DE
rND7xVwffrFLaEYsSEh0loEI6zZpFTJOuOePutCkT1e9efTD6Oe6XR3ge0GGPply
OTKPVQuvIHCJMhO9aTw0c8XP
-----END CERTIFICATE-----
Generated at Sun Apr 27 10:13:30 2025 by rpki-client