Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Pmei3qk8c9MOznYoNHwSickkcfo.roa
File: Pmei3qk8c9MOznYoNHwSickkcfo.roa (raw, json)
Hash identifier: TbCWlwyBO7yenlijtpVAteFRLX5/WugRHFU2MZgUIFA=
Subject key identifier: 3E:67:A2:DE:A9:3C:73:D3:0E:CE:76:28:34:7C:12:89:C9:24:71:FA
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0196C992E9562745C4A9927D9D9987CDC865
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Pmei3qk8c9MOznYoNHwSickkcfo.roa
Signing time: Tue 13 May 2025 12:16:10 +0000
ROA not before: Tue 13 May 2025 12:16:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61002
IP address blocks: 80.96.107.0/24 maxlen: 24
80.97.54.0/23 maxlen: 23
81.180.204.0/23 maxlen: 23
85.120.44.0/23 maxlen: 23
85.122.44.0/24 maxlen: 24
217.156.108.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 14 May 2025 05:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:92:e9:56:27:45:c4:a9:92:7d:9d:99:87:cd:c8:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: May 13 12:16:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e67a2dea93c73d30ece7628347c1289c92471fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:04:fe:20:a0:a5:5c:bf:db:27:e0:e3:fa:2b:
b0:79:34:1d:03:86:70:ce:5b:eb:ca:51:8a:b9:24:
0f:77:cf:79:19:e5:19:b0:f9:de:fe:d8:dd:6b:a8:
7a:b3:26:1b:39:13:8f:c1:d2:40:42:00:6b:1b:e0:
f1:b8:27:95:3b:52:19:60:2e:78:e5:cd:41:46:3a:
35:41:7e:88:07:8d:2f:4b:e5:75:f2:b8:ac:19:a6:
80:fc:61:5c:e7:00:89:7a:e4:b9:fd:75:e7:0f:a5:
cd:c9:27:80:42:1d:32:99:ca:62:8c:29:08:78:07:
47:1f:59:47:9a:cf:66:71:71:f6:93:60:8e:bc:c3:
e9:7a:2d:ab:a8:14:77:c3:6c:a8:c3:13:99:af:01:
31:3a:b2:48:51:3a:24:a0:2d:e8:cd:52:34:47:80:
30:fc:4f:ba:34:ae:87:4c:88:d6:84:1d:ef:eb:7a:
5c:1f:bf:18:be:b2:a5:05:54:04:09:d3:85:2c:e4:
89:65:c5:d5:bc:38:02:f0:75:52:d8:58:60:d1:55:
f9:1d:c6:47:50:13:44:44:84:13:df:68:5c:7b:02:
ad:fa:96:0f:71:b8:2a:4c:18:d2:17:f7:f8:25:5e:
7a:6f:dc:b1:7f:5b:9e:37:90:70:54:41:09:5d:3c:
06:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:67:A2:DE:A9:3C:73:D3:0E:CE:76:28:34:7C:12:89:C9:24:71:FA
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Pmei3qk8c9MOznYoNHwSickkcfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.107.0/24
80.97.54.0/23
81.180.204.0/23
85.120.44.0/23
85.122.44.0/24
217.156.108.0/23
Signature Algorithm: sha256WithRSAEncryption
90:69:a7:51:0b:0f:77:c4:2f:10:a4:54:ef:4d:67:85:a8:53:
8c:66:20:13:6a:f4:d7:28:3c:c0:c2:d6:03:c5:02:6c:cb:89:
ae:95:e3:a2:56:c0:31:cd:46:55:24:0d:52:d0:a7:ed:b1:09:
ac:f2:7c:38:43:0d:7e:68:c9:3e:86:a6:17:b9:d7:57:14:b7:
80:3a:0e:73:f2:e1:65:80:a3:fe:78:27:b0:ca:10:20:93:97:
e0:39:ca:47:9a:93:5b:df:8f:c0:5d:ec:c7:8a:09:26:c2:6d:
5f:8e:43:67:8c:5d:05:6a:26:8a:14:41:02:1b:b6:9c:00:24:
74:98:20:c6:9c:b2:16:69:55:35:5f:d7:e5:19:b1:a6:ba:f1:
f0:5e:6f:cc:18:de:31:f6:28:96:95:a4:ee:a0:94:3f:2b:16:
3a:8b:14:b2:84:0a:bd:76:09:18:23:81:2e:a3:e5:91:5c:e2:
a8:b3:eb:17:62:69:67:6d:41:7e:20:9a:86:2c:fb:e3:61:f2:
e2:97:cb:72:66:72:de:8a:d0:b7:46:8b:0b:82:28:19:c2:3e:
cd:af:bc:7d:42:05:20:e8:02:2f:d5:48:1c:b1:f1:ed:d7:15:
36:30:04:58:40:cf:a1:0c:c1:25:99:4c:1e:58:21:e8:53:95:
9f:3f:4d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:20:09 2025 by rpki-client