Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/miQvob9UjdXl5JRKdpkRrIOiU7A.roa
File: miQvob9UjdXl5JRKdpkRrIOiU7A.roa (raw, json)
Hash identifier: 064q5ZZDlQOz4Y6mL7CyIf1bgwp5YTGJMyLBRmmYYEs=
Subject key identifier: 9A:24:2F:A1:BF:54:8D:D5:E5:E4:94:4A:76:99:11:AC:83:A2:53:B0
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01980D785DE52F15FF93989195E4413FB19A
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/miQvob9UjdXl5JRKdpkRrIOiU7A.roa
Signing time: Tue 15 Jul 2025 09:44:08 +0000
ROA not before: Tue 15 Jul 2025 09:44:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52116
IP address blocks: 77.105.11.0/24 maxlen: 24
77.105.31.0/24 maxlen: 24
79.175.93.0/24 maxlen: 24
79.175.103.0/24 maxlen: 24
79.175.115.0/24 maxlen: 24
79.175.116.0/24 maxlen: 24
79.175.118.0/24 maxlen: 24
80.74.173.0/24 maxlen: 24
81.18.49.0/24 maxlen: 24
81.18.50.0/24 maxlen: 24
81.18.52.0/23 maxlen: 23
81.18.55.0/24 maxlen: 24
81.18.61.0/24 maxlen: 24
93.186.67.0/24 maxlen: 24
93.186.71.0/24 maxlen: 24
93.186.72.0/24 maxlen: 24
109.121.60.0/24 maxlen: 24
178.253.207.0/24 maxlen: 24
178.253.210.0/24 maxlen: 24
178.253.213.0/24 maxlen: 24
178.253.214.0/24 maxlen: 24
178.253.219.0/24 maxlen: 24
178.253.236.0/24 maxlen: 24
178.253.240.0/24 maxlen: 24
185.47.88.0/24 maxlen: 24
185.47.90.0/24 maxlen: 24
188.255.130.0/24 maxlen: 24
188.255.140.0/24 maxlen: 24
188.255.185.0/24 maxlen: 24
188.255.190.0/24 maxlen: 24
188.255.208.0/24 maxlen: 24
188.255.213.0/24 maxlen: 24
188.255.219.0/24 maxlen: 24
188.255.226.0/24 maxlen: 24
188.255.244.0/23 maxlen: 23
188.255.246.0/24 maxlen: 24
188.255.247.0/24 maxlen: 24
188.255.252.0/24 maxlen: 24
188.255.254.0/24 maxlen: 24
188.255.255.0/24 maxlen: 24
212.69.6.0/24 maxlen: 24
212.69.7.0/24 maxlen: 24
212.69.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Jul 2025 10:03:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0d:78:5d:e5:2f:15:ff:93:98:91:95:e4:41:3f:b1:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jul 15 09:44:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a242fa1bf548dd5e5e4944a769911ac83a253b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c9:58:98:21:4d:06:d2:1f:64:6c:fb:aa:94:
ff:9b:82:14:ad:6a:e5:3e:1f:06:d2:e1:68:7a:f1:
20:42:c7:b9:18:0d:a7:cd:6c:59:c8:dc:80:1c:89:
36:a5:9b:13:26:c4:e4:8f:ad:04:83:2f:83:df:83:
7c:fb:b6:9c:1d:70:c4:f0:a8:f3:89:93:75:7b:fd:
9c:ed:aa:44:7e:9b:91:37:aa:b0:33:54:f9:78:92:
a0:1e:79:bc:1b:60:92:d4:bd:fa:ed:73:30:0f:9a:
74:db:60:1b:fb:86:1c:9c:7d:81:cf:20:38:b0:fc:
20:3a:32:9e:16:bd:44:b7:99:22:f2:a4:71:14:8b:
55:ed:a6:76:77:be:96:30:01:e0:4a:14:e2:1d:4c:
cb:89:62:87:03:c4:aa:88:53:96:0a:91:9d:1f:e5:
86:ed:e9:1f:ef:ad:dc:89:42:04:9f:d2:93:bb:5f:
50:23:02:17:61:0f:bd:b1:d1:77:34:e9:42:ee:e6:
6d:b4:4a:ea:2e:50:02:f9:bb:d7:c3:70:38:d2:3b:
89:67:61:f1:81:cd:9b:8a:d8:80:5d:88:d6:27:0b:
bf:0d:8a:b2:b6:96:91:74:1b:5f:63:7c:2b:41:87:
30:65:81:9b:07:75:90:ab:4b:c9:ab:8d:6b:3a:9b:
4a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:24:2F:A1:BF:54:8D:D5:E5:E4:94:4A:76:99:11:AC:83:A2:53:B0
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/miQvob9UjdXl5JRKdpkRrIOiU7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.11.0/24
77.105.31.0/24
79.175.93.0/24
79.175.103.0/24
79.175.115.0-79.175.116.255
79.175.118.0/24
80.74.173.0/24
81.18.49.0-81.18.50.255
81.18.52.0/23
81.18.55.0/24
81.18.61.0/24
93.186.67.0/24
93.186.71.0-93.186.72.255
109.121.60.0/24
178.253.207.0/24
178.253.210.0/24
178.253.213.0-178.253.214.255
178.253.219.0/24
178.253.236.0/24
178.253.240.0/24
185.47.88.0/24
185.47.90.0/24
188.255.130.0/24
188.255.140.0/24
188.255.185.0/24
188.255.190.0/24
188.255.208.0/24
188.255.213.0/24
188.255.219.0/24
188.255.226.0/24
188.255.244.0/22
188.255.252.0/24
188.255.254.0/23
212.69.6.0/23
212.69.12.0/24
Signature Algorithm: sha256WithRSAEncryption
97:c8:d2:fa:93:d8:4b:f0:ce:3a:23:e9:98:3c:ee:1d:e6:18:
72:ff:80:a1:82:82:7a:52:59:60:5f:d0:19:a9:d7:a2:74:79:
2e:a2:bd:4d:c6:1b:af:3f:94:5c:e9:13:45:81:2b:29:8b:d5:
53:b0:16:c7:81:8b:3f:d6:56:47:1e:09:89:96:d4:49:61:ec:
3d:87:c1:99:14:82:69:de:ef:78:7f:7c:e1:ca:af:0d:00:e0:
16:5f:93:4d:73:57:06:bc:0e:46:7e:16:a8:8d:aa:02:98:7c:
bc:06:e9:1e:5b:64:19:5b:2a:bd:02:1c:00:4b:ba:a5:8e:6e:
b1:d9:66:e7:6d:c0:b0:0d:94:d9:a2:60:e1:2d:53:4b:1e:b9:
82:c6:51:56:2c:6e:02:6d:71:c6:3c:7e:42:9c:be:44:c2:37:
fb:08:6c:56:7b:fc:83:4d:7a:29:78:cd:58:11:c1:93:2f:cd:
c3:50:37:b1:b8:b0:ff:55:a6:c1:3e:79:a5:08:be:2d:4f:e9:
2e:29:f0:9d:65:f4:b4:a3:ce:a2:84:73:6e:c6:a4:ec:00:13:
36:50:5f:a5:9e:03:81:f0:a6:de:f9:63:7b:b8:bd:dd:db:21:
72:18:51:c5:00:4e:b4:63:80:37:cf:60:9c:db:d9:3d:11:ed:
e4:09:da:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:46:57 2025 by rpki-client