Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pRun0ilfWoO03pYQjZtKz38lJjE.roa
File: pRun0ilfWoO03pYQjZtKz38lJjE.roa (raw, json)
Hash identifier: FzZlKQJNYAvvI9Btn3LadsZ3C/aiImx4j3BBs8Kh0V0=
Subject key identifier: A5:1B:A7:D2:29:5F:5A:83:B4:DE:96:10:8D:9B:4A:CF:7F:25:26:31
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01985AF56B0F3C2DF525DB18B0863E8B9B32
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pRun0ilfWoO03pYQjZtKz38lJjE.roa
Signing time: Wed 30 Jul 2025 10:51:29 +0000
ROA not before: Wed 30 Jul 2025 10:51:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41745
IP address blocks: 31.169.124.0/24 maxlen: 24
31.169.125.0/24 maxlen: 24
31.169.126.0/24 maxlen: 24
31.169.127.0/24 maxlen: 24
45.12.254.0/24 maxlen: 24
45.14.165.0/24 maxlen: 24
45.81.243.0/24 maxlen: 24
45.88.67.0/24 maxlen: 24
84.21.172.0/24 maxlen: 24
85.31.45.0/24 maxlen: 24
85.209.132.0/24 maxlen: 24
85.209.134.0/24 maxlen: 24
93.123.30.0/24 maxlen: 24
94.125.100.0/24 maxlen: 24
94.125.101.0/24 maxlen: 24
94.156.236.0/24 maxlen: 24
109.206.241.0/24 maxlen: 24
171.22.30.0/24 maxlen: 24
185.246.220.0/24 maxlen: 24
192.145.28.0/24 maxlen: 24
192.145.29.0/24 maxlen: 24
192.145.30.0/24 maxlen: 24
192.145.31.0/24 maxlen: 24
193.8.184.0/24 maxlen: 24
193.47.60.0/24 maxlen: 24
193.148.58.0/24 maxlen: 24
193.148.59.0/24 maxlen: 24
212.87.220.0/24 maxlen: 24
212.87.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Aug 2025 13:08:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5a:f5:6b:0f:3c:2d:f5:25:db:18:b0:86:3e:8b:9b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 30 10:51:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a51ba7d2295f5a83b4de96108d9b4acf7f252631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f1:48:09:4a:8d:e7:15:b1:ba:11:e9:82:14:
27:b0:a6:ef:be:d5:97:75:52:d2:c2:e6:b1:1f:1a:
ea:d5:54:8a:17:4c:0a:78:ab:64:6b:28:c4:40:04:
b2:a8:bd:49:40:67:e7:9b:bd:70:33:03:fc:c3:d0:
20:c9:7c:2e:79:f3:fe:d4:0b:44:cc:40:52:3e:b2:
a0:f2:ea:96:10:e1:c6:04:64:1d:2c:82:b9:c4:25:
85:6a:27:85:c2:fb:5d:3d:82:60:e0:26:2b:89:38:
46:57:f8:c1:e7:9f:c5:36:bd:43:94:65:e6:08:65:
ac:3e:f9:6f:50:1e:b0:70:f4:b7:cb:6d:d8:7b:63:
74:12:69:71:4e:47:b0:30:c7:fb:e0:6f:65:ff:45:
73:c7:4c:0a:03:29:f9:ba:65:d2:05:82:df:35:8a:
96:ca:7e:fe:9f:79:cd:0a:40:e3:6b:4b:97:0f:7b:
03:9e:91:6d:eb:8b:ed:3d:8e:71:ba:25:e4:ec:ad:
4c:fd:08:3f:97:7f:40:4d:84:8b:d4:ab:aa:e8:7c:
4a:c5:0d:92:e0:26:57:8a:a5:4d:fe:13:57:84:27:
0a:dc:64:62:20:60:7a:aa:8a:c9:82:ba:38:8d:ee:
dc:c9:61:a9:04:95:d3:f2:8e:9a:ff:36:24:cc:a8:
d5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:1B:A7:D2:29:5F:5A:83:B4:DE:96:10:8D:9B:4A:CF:7F:25:26:31
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pRun0ilfWoO03pYQjZtKz38lJjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.124.0/22
45.12.254.0/24
45.14.165.0/24
45.81.243.0/24
45.88.67.0/24
84.21.172.0/24
85.31.45.0/24
85.209.132.0/24
85.209.134.0/24
93.123.30.0/24
94.125.100.0/23
94.156.236.0/24
109.206.241.0/24
171.22.30.0/24
185.246.220.0/24
192.145.28.0/22
193.8.184.0/24
193.47.60.0/24
193.148.58.0/23
212.87.220.0/24
212.87.223.0/24
Signature Algorithm: sha256WithRSAEncryption
00:82:76:72:63:1b:e2:f4:f1:c8:0c:80:98:c3:de:23:69:83:
04:12:5e:04:06:c7:7a:94:7f:2f:76:8e:de:54:36:c5:16:54:
27:52:92:04:a8:fc:26:c6:a6:40:9e:f6:6a:3f:e8:27:2f:ac:
f8:da:14:fb:ed:2b:e2:ef:0d:0d:d3:ad:0f:61:82:1f:9c:f4:
17:8f:8d:10:34:b6:b6:ef:c2:ce:6f:e0:9c:43:74:02:13:a8:
4c:4c:41:49:4b:6c:1b:f8:ac:a4:57:82:41:35:11:91:19:a9:
e9:7a:6f:6b:68:52:b2:4b:fb:71:69:e7:02:3b:26:4e:5d:64:
6d:61:17:4a:cd:72:4f:6c:e7:7d:f8:b2:1b:3a:c4:e4:af:cb:
37:0e:ba:d5:96:65:be:67:e5:bf:92:a9:00:e3:78:29:69:33:
41:dc:53:ed:7c:39:cf:d6:e4:11:fe:e7:3a:c2:19:c6:74:34:
d9:46:f2:86:4d:d1:cc:ff:5f:50:c5:f0:b0:44:dc:df:78:1f:
d8:1c:81:6e:50:7d:a0:35:e9:87:df:1a:3a:bb:64:b2:50:86:
95:4e:00:f6:48:b9:9b:c7:3d:ac:b3:3a:ae:79:02:c3:18:3f:
06:ec:0b:2c:c0:88:e5:d5:71:d0:ac:1b:26:c1:1e:d5:de:65:
5c:44:ae:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:51:53 2025 by rpki-client