Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/7KjjAg-jahMlC2aGPtS9ZwK8cEM.roa
File: 7KjjAg-jahMlC2aGPtS9ZwK8cEM.roa (raw, json)
Hash identifier: 2YXlUUkg4v0hV6u5C10i/HEMvGzcVuF56hcVmOufPbw=
Subject key identifier: EC:A8:E3:02:0F:A3:6A:13:25:0B:66:86:3E:D4:BD:67:02:BC:70:43
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0196CD467C1641071C3C7F9C5CE0AFBD4908
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/7KjjAg-jahMlC2aGPtS9ZwK8cEM.roa
Signing time: Wed 14 May 2025 05:31:10 +0000
ROA not before: Wed 14 May 2025 05:31:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61002
IP address blocks: 80.96.107.0/24 maxlen: 24
80.97.54.0/23 maxlen: 23
85.120.44.0/23 maxlen: 23
85.122.44.0/24 maxlen: 24
217.156.108.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 02 Jun 2025 14:36:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:46:7c:16:41:07:1c:3c:7f:9c:5c:e0:af:bd:49:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: May 14 05:31:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eca8e3020fa36a13250b66863ed4bd6702bc7043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e1:d9:ef:6a:88:04:8e:c6:fd:7a:36:61:a8:
d2:35:4b:f3:66:3e:83:23:0f:5a:da:47:17:bd:d7:
24:dd:ab:55:bd:22:55:a6:d7:8c:35:c2:3e:7b:b3:
fb:82:b9:78:da:b5:c5:54:a8:eb:23:ff:de:6a:28:
30:9e:d1:dd:42:98:33:7b:a8:ce:5c:d3:b3:f8:18:
96:aa:a0:ef:c8:0e:63:a0:72:d0:f8:6e:41:71:be:
f4:84:47:6f:20:4a:8c:53:a1:2b:62:68:38:a0:37:
54:36:ca:b0:50:83:ac:18:26:15:11:5b:ca:a2:44:
32:e2:13:db:19:f2:c4:cc:3b:22:2e:78:d6:c8:66:
2c:20:76:90:89:06:6b:72:d8:e0:01:3f:e8:7c:62:
80:37:42:e1:5f:14:f7:44:c3:bd:f5:2a:59:56:e9:
99:f4:42:85:0a:12:e4:ad:b9:b4:08:d6:c4:02:68:
37:dd:c3:c8:e3:03:75:fa:68:97:3d:09:da:b3:a2:
9a:ac:32:59:0a:c6:47:4e:f5:eb:a4:91:dc:54:27:
88:22:50:51:4f:c3:fc:f9:b3:28:df:4e:7a:de:b8:
e1:fd:2c:e7:e7:b1:8c:70:e2:5b:01:34:3e:6a:db:
bb:a0:3f:0e:6d:bc:81:fd:96:ba:a8:c7:99:6d:6e:
53:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A8:E3:02:0F:A3:6A:13:25:0B:66:86:3E:D4:BD:67:02:BC:70:43
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/7KjjAg-jahMlC2aGPtS9ZwK8cEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.107.0/24
80.97.54.0/23
85.120.44.0/23
85.122.44.0/24
217.156.108.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:67:02:48:7b:a8:f0:e2:94:d1:e2:21:3f:6f:eb:49:d5:f9:
b5:5b:e5:82:11:07:0b:3c:56:24:4a:48:b8:40:e1:54:33:63:
20:e6:79:1e:7e:56:93:c9:cd:01:98:19:1d:18:d3:ee:a0:a8:
e7:9f:fe:08:2e:6c:26:71:d7:d9:dc:48:59:38:01:ce:17:40:
c6:f6:05:c0:a7:86:6e:38:13:0b:b5:8e:8d:08:b7:1e:39:49:
39:36:3a:08:59:66:8b:90:df:ed:7c:b1:fb:e5:bd:83:71:f9:
d4:1d:5c:6d:5f:dc:1a:64:99:85:ce:1b:e8:5d:27:57:0f:a0:
8a:10:a8:69:98:aa:b7:91:ee:b5:a0:86:00:db:73:fa:7d:2a:
08:7b:c6:b4:13:01:e5:dc:fd:b4:0e:14:fd:24:35:fd:69:14:
f1:c0:4a:d8:2b:f3:55:0f:2b:7a:52:4c:7b:da:b1:75:9f:09:
fa:1a:ed:f2:10:cf:f4:2d:21:43:64:91:09:5f:de:5a:ef:f5:
d9:9e:d4:cc:fe:78:56:dc:8b:9a:67:6e:72:2a:55:1f:81:6a:
cd:45:cc:4c:14:fa:9c:45:44:8d:ed:1d:47:a9:95:fe:86:7f:
51:15:d3:fe:a6:55:f4:3a:5a:db:e5:a0:b7:9c:ec:ab:21:7e:
1f:68:77:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:40:24 2025 by rpki-client