Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xDCa8RkAM6-uLVTxFJSX_1CCnhA.roa
File: xDCa8RkAM6-uLVTxFJSX_1CCnhA.roa (raw, json)
Hash identifier: HZL6GsipUQx1gywdMjujnB/IqNGDE6PjcpzkJdC46QM=
Subject key identifier: C4:30:9A:F1:19:00:33:AF:AE:2D:54:F1:14:94:97:FF:50:82:9E:10
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0195D76C3F0782112099816D2751AC133A6E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xDCa8RkAM6-uLVTxFJSX_1CCnhA.roa
Signing time: Thu 27 Mar 2025 11:45:50 +0000
ROA not before: Thu 27 Mar 2025 11:45:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215439
IP address blocks: 31.13.208.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
83.143.112.0/24 maxlen: 24
84.21.173.0/24 maxlen: 24
87.120.84.0/24 maxlen: 24
87.120.165.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.186.0/24 maxlen: 24
87.120.187.0/24 maxlen: 24
87.121.89.0/24 maxlen: 24
87.121.105.0/24 maxlen: 24
93.123.84.0/24 maxlen: 24
94.156.102.0/24 maxlen: 24
94.156.106.0/24 maxlen: 24
94.156.112.0/24 maxlen: 24
94.156.114.0/24 maxlen: 24
94.156.115.0/24 maxlen: 24
94.156.170.0/24 maxlen: 24
94.156.237.0/24 maxlen: 24
141.98.7.0/24 maxlen: 24
171.22.31.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
178.215.238.0/24 maxlen: 24
185.216.71.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
193.35.17.0/24 maxlen: 24
193.58.121.0/24 maxlen: 24
193.58.122.0/24 maxlen: 24
193.222.99.0/24 maxlen: 24
194.31.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Mar 2025 13:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d7:6c:3f:07:82:11:20:99:81:6d:27:51:ac:13:3a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 27 11:45:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4309af1190033afae2d54f1149497ff50829e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:26:fd:1e:03:a2:7b:0b:aa:32:ee:b9:0b:4f:
e5:bb:d3:9e:79:06:a1:99:22:77:a5:4a:8f:b2:9a:
2b:e4:d7:9a:92:65:45:a0:10:74:25:22:93:31:0c:
af:a0:ce:c2:07:28:a2:98:f5:c3:a6:43:30:03:a1:
ca:b3:2b:1e:14:3d:af:ec:98:28:ac:5f:ae:db:e1:
f3:92:5e:27:45:45:04:a2:3a:3e:fc:5f:30:ec:d3:
05:8e:3f:fe:2a:19:84:b6:a0:51:69:16:69:23:35:
9e:40:a2:4b:f9:d7:85:c2:dc:07:38:d3:9f:63:52:
f5:2d:4f:4d:df:57:53:fa:5a:c2:1f:05:a6:1a:b7:
7f:0c:8d:8b:7b:f1:b6:8f:00:1e:ac:54:f8:82:7e:
04:a1:13:9f:b1:99:4a:f0:80:f4:b4:80:ab:fa:c4:
d9:c3:c7:e4:32:0a:08:9c:c2:7d:bb:db:fa:22:4c:
c6:45:0e:d4:62:2d:5a:89:41:da:5c:48:22:f4:2f:
4d:78:ac:e4:61:27:10:53:f5:07:5e:21:1f:7b:b0:
15:30:8b:10:a7:57:d0:e5:2e:7e:33:3d:8f:9c:d8:
2e:2b:f7:71:ed:95:bf:30:b5:47:0a:c4:a2:77:d9:
b4:de:b1:15:7d:6f:be:75:d5:aa:18:52:92:ce:8f:
72:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:30:9A:F1:19:00:33:AF:AE:2D:54:F1:14:94:97:FF:50:82:9E:10
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xDCa8RkAM6-uLVTxFJSX_1CCnhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.208.0/24
45.66.228.0/24
83.143.112.0/24
84.21.173.0/24
87.120.84.0/24
87.120.165.0-87.120.166.255
87.120.186.0/23
87.121.89.0/24
87.121.105.0/24
93.123.84.0/24
94.156.102.0/24
94.156.106.0/24
94.156.112.0/24
94.156.114.0/23
94.156.170.0/24
94.156.237.0/24
141.98.7.0/24
171.22.31.0/24
178.215.236.0/24
178.215.238.0/24
185.216.71.0/24
193.25.216.0/24
193.35.17.0/24
193.58.121.0-193.58.122.255
193.222.99.0/24
194.31.223.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:ed:6c:72:b8:00:46:6b:b2:f3:45:87:f9:9e:1e:a0:85:2c:
5e:5f:c6:cc:90:81:46:ce:a9:d3:4d:1a:77:69:f7:39:3b:f3:
ed:cf:fd:0d:80:82:56:5d:69:37:50:2b:de:84:a5:65:01:da:
1f:c2:bd:39:16:33:c7:71:b9:6b:fc:3c:e9:e9:73:37:e9:f6:
8c:e2:8e:02:10:32:d9:ce:52:bd:c3:36:a8:25:66:ff:f3:f0:
42:e7:6e:d0:f2:b5:2e:04:64:42:21:4a:4c:3a:ed:e6:60:89:
40:4f:b9:51:4d:99:01:12:d7:3c:96:09:8a:65:03:0f:a8:a8:
c4:ce:be:dc:8a:d7:96:06:28:d9:73:3a:5a:3a:ed:e2:ea:4d:
90:f8:6a:b2:ba:8e:6a:42:76:45:98:79:45:94:f6:b5:90:c1:
ef:42:23:8f:d4:55:aa:eb:19:86:b8:9a:2e:fb:c3:bb:d3:b0:
6c:0e:7b:31:c9:9e:c8:1c:5b:79:9a:fc:e2:b1:5b:a9:f6:3e:
77:ae:75:a7:ee:81:a0:65:94:a8:7a:d4:c9:30:91:ac:1f:e9:
1e:25:a5:85:6c:ee:f3:be:f2:b4:93:f3:58:de:8f:96:30:8a:
f7:bc:e4:05:29:ec:30:12:56:fa:b8:fe:21:ca:0b:4d:5b:6d:
c2:ba:bb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:43:14 2025 by rpki-client