Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/9_YEvmPVVb9GHHRiAsDj4T67sPU.roa
File: 9_YEvmPVVb9GHHRiAsDj4T67sPU.roa (raw, json)
Hash identifier: 3kuJjpdPcagr/s/t9V3LIz8lnH2P6l31bBeLZYLdW/A=
Subject key identifier: F7:F6:04:BE:63:D5:55:BF:46:1C:74:62:02:C0:E3:E1:3E:BB:B0:F5
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019686DCA9DFB394F404B5C4057E2A54B380
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/9_YEvmPVVb9GHHRiAsDj4T67sPU.roa
Signing time: Wed 30 Apr 2025 13:22:10 +0000
ROA not before: Wed 30 Apr 2025 13:22:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 147.45.101.0/24 maxlen: 24
147.45.102.0/24 maxlen: 24
147.45.103.0/24 maxlen: 24
147.45.104.0/24 maxlen: 24
147.45.105.0/24 maxlen: 24
147.45.106.0/24 maxlen: 24
147.45.107.0/24 maxlen: 24
147.45.108.0/24 maxlen: 24
147.45.109.0/24 maxlen: 24
147.45.110.0/24 maxlen: 24
147.45.111.0/24 maxlen: 24
147.45.132.0/24 maxlen: 24
147.45.133.0/24 maxlen: 24
147.45.134.0/24 maxlen: 24
147.45.135.0/24 maxlen: 24
147.45.136.0/24 maxlen: 24
147.45.137.0/24 maxlen: 24
147.45.138.0/24 maxlen: 24
147.45.139.0/24 maxlen: 24
147.45.140.0/24 maxlen: 24
147.45.141.0/24 maxlen: 24
147.45.142.0/24 maxlen: 24
147.45.143.0/24 maxlen: 24
147.45.144.0/20 maxlen: 24
147.45.160.0/20 maxlen: 24
147.45.180.0/24 maxlen: 24
147.45.181.0/24 maxlen: 24
147.45.182.0/24 maxlen: 24
147.45.183.0/24 maxlen: 24
147.45.184.0/24 maxlen: 24
147.45.185.0/24 maxlen: 24
147.45.186.0/24 maxlen: 24
147.45.187.0/24 maxlen: 24
147.45.189.0/24 maxlen: 24
147.45.190.0/24 maxlen: 24
147.45.191.0/24 maxlen: 24
147.45.224.0/19 maxlen: 24
193.233.102.0/24 maxlen: 24
193.233.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 May 2025 19:43:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:dc:a9:df:b3:94:f4:04:b5:c4:05:7e:2a:54:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Apr 30 13:22:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7f604be63d555bf461c746202c0e3e13ebbb0f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8b:dc:49:6d:28:7b:23:1d:4f:b0:c1:01:39:
46:dc:7e:d8:b5:d6:cb:ce:66:ef:ca:b1:70:89:0b:
71:66:54:ad:97:0b:c6:88:5c:07:0c:91:81:35:0a:
7d:07:14:8d:e2:14:fa:93:81:aa:b4:a1:c2:4c:af:
46:d7:cc:7f:f9:5d:84:8c:96:29:e7:6e:a0:59:7d:
e6:9f:f1:7a:8e:16:c5:e4:25:10:22:33:a7:1c:d2:
59:89:2e:47:82:16:82:98:0d:f1:69:f8:ee:48:44:
4a:80:09:ef:de:82:5d:2e:1b:ae:1d:78:4b:9c:fb:
2c:e5:1a:5d:64:5e:4f:63:54:a5:ee:a2:d7:5e:a2:
13:1c:57:88:fe:8a:88:0a:a9:47:7a:a7:34:be:e2:
c7:3b:c1:83:87:26:57:65:3f:3e:6d:93:37:69:28:
74:8d:ac:a8:b5:b9:b4:3c:41:50:60:e6:29:61:23:
b4:33:22:c9:ec:42:08:bf:b5:92:ae:03:f4:b1:96:
68:4a:47:a0:b0:60:30:3a:0e:c9:0d:fa:8a:b1:cb:
40:eb:92:ec:dc:30:3b:ab:ee:be:16:5b:72:5b:5e:
9d:a8:95:93:f9:2a:ac:88:5b:da:b3:3a:dd:eb:1e:
bd:55:f8:88:86:18:d0:d0:ee:1f:cc:f1:84:f6:69:
98:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F6:04:BE:63:D5:55:BF:46:1C:74:62:02:C0:E3:E1:3E:BB:B0:F5
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/9_YEvmPVVb9GHHRiAsDj4T67sPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.101.0-147.45.111.255
147.45.132.0-147.45.175.255
147.45.180.0-147.45.187.255
147.45.189.0-147.45.191.255
147.45.224.0/19
193.233.102.0/23
Signature Algorithm: sha256WithRSAEncryption
88:41:1f:12:76:0d:2f:51:7b:65:a1:b4:62:1e:9c:bd:18:50:
98:e6:bb:45:17:43:b7:7e:34:ba:f7:04:e1:47:19:ee:e7:0d:
6c:aa:2c:a5:31:3c:e3:aa:30:7a:ef:73:45:7f:8b:dc:a5:cd:
c3:ab:3c:0d:2c:3e:33:b2:b1:9e:11:9b:32:e4:80:76:86:78:
07:4a:03:1b:f1:26:8e:7a:8e:00:39:df:55:66:73:7d:fc:d0:
8b:15:d9:61:79:1d:11:94:f1:a1:ae:cb:c3:e6:87:fc:88:18:
72:bf:ec:d4:5d:e1:b3:07:3d:98:74:0b:ff:4e:eb:1e:e3:b9:
99:fe:07:fd:3c:ba:88:15:11:03:92:c0:42:81:96:d1:7e:10:
af:f3:ca:27:a5:79:49:2d:0f:67:4a:18:70:50:6a:4e:91:74:
25:f9:f9:e1:8c:aa:20:1d:d0:30:78:4a:3d:7d:66:9c:7d:d6:
07:4d:e5:dd:1b:8c:28:54:74:db:a5:1b:8a:f0:f4:e0:d9:2e:
18:78:b0:cf:6b:34:92:2c:9b:6b:c6:47:9a:80:d8:00:dd:1a:
a4:47:d3:60:d5:d7:f4:48:a5:f2:80:89:15:e4:40:16:00:89:
13:a0:75:af:a2:3c:32:62:7c:0d:22:99:b5:de:43:c1:c0:31:
03:23:1c:eb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:42:38 2025 by rpki-client