Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/CmUKHYt-q1q2TvQBNe3k3k1wzJk.roa
File: CmUKHYt-q1q2TvQBNe3k3k1wzJk.roa (raw, json)
Hash identifier: pt1BMJeo9Mi3noT9Vo+YYAAXglaoR02RrGLOR3nVNWs=
Subject key identifier: 0A:65:0A:1D:8B:7E:AB:5A:B6:4E:F4:01:35:ED:E4:DE:4D:70:CC:99
Certificate issuer: /CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d
Certificate serial: 0195600C65A15ED87297C90D6AA307128744
Authority key identifier: 8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/CmUKHYt-q1q2TvQBNe3k3k1wzJk.roa
Signing time: Tue 04 Mar 2025 07:26:19 +0000
ROA not before: Tue 04 Mar 2025 07:26:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48551
IP address blocks: 31.193.186.0/24 maxlen: 24
45.94.252.0/24 maxlen: 24
45.94.254.0/24 maxlen: 24
45.94.255.0/24 maxlen: 24
45.150.150.0/24 maxlen: 24
45.159.196.0/24 maxlen: 24
45.159.197.0/24 maxlen: 24
45.159.198.0/24 maxlen: 24
45.159.199.0/24 maxlen: 24
91.217.177.0/24 maxlen: 24
103.216.60.0/24 maxlen: 24
103.216.61.0/24 maxlen: 24
103.216.62.0/24 maxlen: 24
103.216.63.0/24 maxlen: 24
157.119.188.0/24 maxlen: 24
157.119.190.0/24 maxlen: 24
157.119.191.0/24 maxlen: 24
185.63.114.0/24 maxlen: 24
185.74.221.0/24 maxlen: 24
185.86.180.0/24 maxlen: 24
185.86.181.0/24 maxlen: 24
185.128.40.0/24 maxlen: 24
185.149.192.0/24 maxlen: 24
185.159.189.0/24 maxlen: 24
185.228.58.0/24 maxlen: 24
185.236.36.0/24 maxlen: 24
185.236.37.0/24 maxlen: 24
185.236.38.0/24 maxlen: 24
185.236.39.0/24 maxlen: 24
185.238.143.0/24 maxlen: 24
194.147.212.0/24 maxlen: 24
194.147.222.0/24 maxlen: 24
195.114.4.0/24 maxlen: 24
195.114.5.0/24 maxlen: 24
195.114.8.0/24 maxlen: 24
195.114.9.0/24 maxlen: 24
2a0d:9500::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 19 Mar 2025 14:50:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:60:0c:65:a1:5e:d8:72:97:c9:0d:6a:a3:07:12:87:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d
Validity
Not Before: Mar 4 07:26:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a650a1d8b7eab5ab64ef40135ede4de4d70cc99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0b:f2:ca:43:26:80:62:74:65:1a:70:25:5e:
c3:5c:86:86:e8:d5:36:19:c6:b2:4d:49:b7:81:5e:
4a:93:40:7f:c3:f7:e1:54:ef:0c:af:7d:54:4a:5e:
8b:45:86:54:c8:b3:f2:29:b0:dc:64:f0:c7:88:14:
d0:e9:2f:da:ce:8b:aa:be:c9:ad:2f:54:df:c1:1c:
ec:86:68:c5:69:eb:ad:7c:f8:89:46:29:1e:e2:88:
ee:2d:b5:f4:8e:1a:10:78:b0:1e:ec:85:91:93:b7:
e3:88:56:b9:54:95:86:02:da:23:5b:a3:a0:91:6f:
c0:14:15:a8:d0:18:96:e0:71:94:c5:46:5f:61:9a:
e7:1a:27:ae:b2:f3:06:68:c0:f1:66:e8:ed:98:0b:
1e:f1:f7:21:0b:b5:55:09:1d:33:6b:4d:13:f4:05:
e7:0d:bb:8e:9d:61:84:cd:58:be:f6:25:b2:df:94:
09:f6:20:fe:5a:96:7a:17:f3:2a:c4:a3:82:66:92:
ac:00:c4:69:99:36:a7:84:51:d4:a0:82:63:67:36:
79:9d:f6:a7:61:3d:2c:cd:29:22:b9:83:6e:71:24:
1e:fa:cd:a8:6e:e1:b8:53:d8:12:36:11:7f:e7:c2:
7a:69:64:a1:67:8c:b6:46:04:13:32:51:3d:c7:53:
87:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:65:0A:1D:8B:7E:AB:5A:B6:4E:F4:01:35:ED:E4:DE:4D:70:CC:99
X509v3 Authority Key Identifier:
keyid:8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/CmUKHYt-q1q2TvQBNe3k3k1wzJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.186.0/24
45.94.252.0/24
45.94.254.0/23
45.150.150.0/24
45.159.196.0/22
91.217.177.0/24
103.216.60.0/22
157.119.188.0/24
157.119.190.0/23
185.63.114.0/24
185.74.221.0/24
185.86.180.0/23
185.128.40.0/24
185.149.192.0/24
185.159.189.0/24
185.228.58.0/24
185.236.36.0/22
185.238.143.0/24
194.147.212.0/24
194.147.222.0/24
195.114.4.0/23
195.114.8.0/23
IPv6:
2a0d:9500::/29
Signature Algorithm: sha256WithRSAEncryption
76:c2:15:cc:ad:f7:39:c4:7e:e5:a3:b3:1d:3a:5b:84:71:90:
70:d1:d6:fe:89:98:c0:a6:8c:c1:21:47:5a:f0:26:a0:f7:e1:
5c:6c:f7:ae:db:13:3d:57:23:29:80:b1:04:00:90:01:da:ed:
a7:fe:64:2a:ef:9c:ef:8f:9b:cc:91:74:fc:18:43:04:a1:e2:
98:2d:86:cc:46:34:1f:47:bc:c4:43:34:8d:ae:85:ef:52:bd:
fd:f9:b0:aa:6b:8a:b7:58:de:f7:28:c6:7b:e6:29:2d:56:1e:
75:f8:6e:95:90:51:93:93:fe:1d:8c:7e:d3:66:ec:04:e7:49:
bc:f9:a0:e5:08:16:b1:67:57:23:c3:7c:98:82:ca:bb:8f:47:
11:55:7c:52:e0:33:d7:a5:30:d4:2f:2f:05:c7:c0:95:61:0e:
4c:0e:e1:78:f7:c9:28:3e:5c:9e:d8:f3:18:ce:3b:1c:f5:90:
9b:c1:28:c8:22:49:24:fa:48:47:d9:f9:58:58:49:4f:91:9b:
89:da:2f:14:a6:ba:41:1a:f9:81:f5:a1:8e:67:da:cb:11:58:
f0:8e:6c:29:52:04:49:ba:41:5f:0c:4d:00:a8:52:36:f2:62:
d1:46:87:48:e9:90:e6:76:e0:c5:24:1b:31:84:e8:01:f7:ee:
02:f3:79:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 12:11:34 2025 by rpki-client