Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/8G82L6IEo9vgXX-cjT0PSxkfS8I.roa
File: 8G82L6IEo9vgXX-cjT0PSxkfS8I.roa (raw, json)
Hash identifier: oAcXkBJ5ihmOnL6mvkLHHHRNnovfDoC5UFxvj99CVGE=
Subject key identifier: F0:6F:36:2F:A2:04:A3:DB:E0:5D:7F:9C:8D:3D:0F:4B:19:1F:4B:C2
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0195021352780F22A3F692715F9E12715EA7
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/8G82L6IEo9vgXX-cjT0PSxkfS8I.roa
Signing time: Fri 14 Feb 2025 01:29:35 +0000
ROA not before: Fri 14 Feb 2025 01:29:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61135
IP address blocks: 78.135.73.0/24 maxlen: 24
185.17.136.0/24 maxlen: 24
188.132.229.0/24 maxlen: 24
212.68.35.0/24 maxlen: 24
212.68.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Mar 2025 21:38:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:02:13:52:78:0f:22:a3:f6:92:71:5f:9e:12:71:5e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Feb 14 01:29:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f06f362fa204a3dbe05d7f9c8d3d0f4b191f4bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6c:b9:38:f4:76:18:4e:80:3e:aa:db:41:58:
ba:01:7f:23:78:1b:3c:b5:ab:36:88:d5:f5:5c:fb:
4b:7f:c0:58:c9:1c:d3:96:1c:3e:12:96:d9:ae:f4:
46:ec:27:75:bd:18:74:1e:90:48:f5:66:b4:f1:2b:
5f:82:78:51:26:6d:d9:e6:3d:ec:96:75:5e:b1:d5:
70:cd:59:17:6d:ff:8f:c5:5f:73:54:2a:1f:62:e2:
70:53:c6:ad:f3:56:9a:b1:15:60:31:16:06:0a:10:
cd:b1:c5:81:e0:6c:0f:ce:5f:b0:54:f0:b6:03:c0:
a3:d1:ca:b4:85:0f:a3:a2:b6:b4:e7:62:64:ce:74:
03:b1:e9:e7:c4:0b:a0:0a:2f:bd:1e:30:74:59:df:
47:98:65:5f:a3:3d:54:4b:d3:b0:70:c5:41:b5:2c:
79:82:a6:12:f2:b9:b0:d5:1a:26:09:f5:11:dd:74:
cb:0d:01:d2:f0:37:ef:cf:bc:08:81:24:64:ae:c2:
2b:4f:fe:40:4c:42:99:4e:28:30:2c:34:3a:a0:dd:
4d:b1:19:e4:94:d3:66:27:f5:ee:05:a7:67:bd:4b:
3f:0d:43:0a:d2:bb:e7:e3:84:0b:6a:aa:5e:64:9d:
69:0a:7c:37:6c:b8:7b:db:7b:be:cf:b7:08:28:56:
34:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:6F:36:2F:A2:04:A3:DB:E0:5D:7F:9C:8D:3D:0F:4B:19:1F:4B:C2
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/8G82L6IEo9vgXX-cjT0PSxkfS8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.73.0/24
185.17.136.0/24
188.132.229.0/24
212.68.35.0/24
212.68.55.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:f0:93:2e:ba:9b:aa:74:6c:da:d6:c6:66:ea:04:a0:54:1b:
22:2a:37:ab:3b:40:23:43:f3:85:85:d0:15:f5:f2:fb:c5:0b:
eb:c6:8c:bd:be:ff:ce:21:d5:d5:f1:bf:98:13:e4:0b:fa:8d:
f4:58:3f:3d:14:35:f1:01:b0:9f:b7:50:93:de:26:38:16:74:
07:49:e2:8f:56:b2:0f:fb:22:6f:69:d9:b1:9b:c1:a2:3c:0c:
7a:da:a5:fb:a1:ae:6a:11:6f:55:a2:b5:e5:46:a3:c1:28:3a:
8a:82:85:a5:41:53:1b:f4:5f:83:c9:25:da:a4:76:ca:25:78:
d0:f1:2e:c8:14:de:8d:f3:35:64:50:73:76:20:83:60:72:d6:
73:db:c1:da:bd:0d:94:f7:5e:88:46:76:ac:99:3f:d4:04:b0:
e7:d2:39:2d:e6:b5:51:fe:13:8e:72:01:3f:cc:d0:d7:5c:d6:
3c:06:fe:50:2a:dc:75:08:9d:ad:ab:ed:5e:46:12:11:64:ac:
dc:bf:00:b2:10:3f:21:f9:b9:9d:35:bf:b0:48:8a:d9:e8:76:
ad:e2:a9:cc:30:37:65:d0:bd:d7:3e:f5:01:67:84:67:3c:94:
8c:a9:55:6b:66:63:5d:dc:b9:dc:fd:18:2e:42:41:17:c9:23:
bd:08:ac:08
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZUCE1J4DyKj9pJxX54ScV6nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjUwMjE0MDEyOTM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDZmMzYyZmEyMDRhM2RiZTA1ZDdmOWM4ZDNkMGY0YjE5MWY0YmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2y5OPR2GE6APqrbQVi6AX8jeBs8
tas2iNX1XPtLf8BYyRzTlhw+EpbZrvRG7Cd1vRh0HpBI9Wa08StfgnhRJm3Z5j3s
lnVesdVwzVkXbf+PxV9zVCofYuJwU8at81aasRVgMRYGChDNscWB4GwPzl+wVPC2
A8Cj0cq0hQ+jora052JkznQDsennxAugCi+9HjB0Wd9HmGVfoz1US9OwcMVBtSx5
gqYS8rmw1RomCfUR3XTLDQHS8Dfvz7wIgSRkrsIrT/5ATEKZTigwLDQ6oN1NsRnk
lNNmJ/XuBadnvUs/DUMK0rvn44QLaqpeZJ1pCnw3bLh723u+z7cIKFY0twIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFPBvNi+iBKPb4F1/nI09D0sZH0vCMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvOEc4Mkw2SUVvOXZnWFgtY2pUMFBTeGtmUzhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQATodJAwQA
uRGIAwQAvITlAwQA1EQjAwQA1EQ3MA0GCSqGSIb3DQEBCwUAA4IBAQCO8JMuupuq
dGza1sZm6gSgVBsiKjerO0AjQ/OFhdAV9fL7xQvrxoy9vv/OIdXV8b+YE+QL+o30
WD89FDXxAbCft1CT3iY4FnQHSeKPVrIP+yJvadmxm8GiPAx62qX7oa5qEW9VorXl
RqPBKDqKgoWlQVMb9F+DySXapHbKJXjQ8S7IFN6N8zVkUHN2IINgctZz28HavQ2U
916IRnasmT/UBLDn0jkt5rVR/hOOcgE/zNDXXNY8Bv5QKtx1CJ2tq+1eRhIRZKzc
vwCyED8h+bmdNb+wSIrZ6Hat4qnMMDdl0L3XPvUBZ4RnPJSMqVVrZmNd3Lnc/Rgu
QkEXySO9CKwI
-----END CERTIFICATE-----
Generated at Thu Apr 17 07:26:48 2025 by rpki-client