Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/AcWfJ_cUCsuZk7l9aZ6bYu79TJU.roa
File: AcWfJ_cUCsuZk7l9aZ6bYu79TJU.roa (raw, json)
Hash identifier: 2wadTNhG8vTjO7fqYLiso0YxEyHl9QMJQSiJIlJrrio=
Subject key identifier: 01:C5:9F:27:F7:14:0A:CB:99:93:B9:7D:69:9E:9B:62:EE:FD:4C:95
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01942746A026C2CB0863C7D0D4B0320E2444
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/AcWfJ_cUCsuZk7l9aZ6bYu79TJU.roa
Signing time: Thu 02 Jan 2025 13:48:47 +0000
ROA not before: Thu 02 Jan 2025 13:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61135
IP address blocks: 78.135.73.0/24 maxlen: 24
78.135.97.0/24 maxlen: 24
78.135.104.0/24 maxlen: 24
185.17.136.0/24 maxlen: 24
188.132.229.0/24 maxlen: 24
188.132.236.0/24 maxlen: 24
188.132.249.0/24 maxlen: 24
212.68.35.0/24 maxlen: 24
212.68.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Feb 2025 00:53:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:a0:26:c2:cb:08:63:c7:d0:d4:b0:32:0e:24:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 13:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01c59f27f7140acb9993b97d699e9b62eefd4c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:36:52:73:2b:50:89:66:36:cd:49:e9:0f:63:
06:39:30:44:7f:82:c6:f5:de:a9:b8:b9:80:e6:aa:
c5:e1:32:d2:2c:06:de:88:53:a0:10:79:9b:7f:47:
8a:f7:f9:53:22:9c:3b:c0:86:68:3a:92:8b:4b:90:
93:e5:29:f1:8d:68:32:98:49:d3:48:8e:a7:d4:6d:
5c:81:b2:2e:75:44:b4:00:55:92:65:44:d7:f5:2e:
ca:82:50:58:cb:29:79:42:0e:e4:19:ab:ae:45:55:
02:64:34:22:9c:bd:1b:d4:ee:31:9e:67:50:b9:e7:
a1:dd:17:fd:b2:b9:f9:15:11:da:74:1c:1a:f8:81:
d9:f1:ed:d6:ba:2f:b2:54:73:11:fc:0e:b2:e7:b6:
2e:56:18:44:71:06:2f:f6:6f:d7:59:63:af:b1:e4:
6b:ee:24:c6:6f:9b:cb:ff:d6:2d:40:cb:4e:e8:cc:
a7:bf:e0:ea:cf:5a:e0:e1:10:70:0a:ef:25:57:c4:
69:9a:66:15:60:6b:76:f0:ed:5e:a2:6e:50:1a:4d:
09:ff:78:54:27:24:43:76:30:30:e7:47:5f:bc:a6:
bc:51:a5:c0:9b:43:bc:f8:ce:1e:b7:6a:2c:8b:57:
a6:87:f9:64:af:13:37:35:07:15:00:07:66:95:ab:
8a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C5:9F:27:F7:14:0A:CB:99:93:B9:7D:69:9E:9B:62:EE:FD:4C:95
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/AcWfJ_cUCsuZk7l9aZ6bYu79TJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.73.0/24
78.135.97.0/24
78.135.104.0/24
185.17.136.0/24
188.132.229.0/24
188.132.236.0/24
188.132.249.0/24
212.68.35.0/24
212.68.55.0/24
Signature Algorithm: sha256WithRSAEncryption
71:62:cb:4f:e0:83:42:6b:b4:2f:f7:dd:38:c4:65:f2:ae:53:
a6:14:f4:40:11:0e:9f:c6:2b:be:31:4b:8e:06:e8:0b:9d:b3:
9c:3b:0a:0e:d5:68:ea:3c:20:41:5f:b4:1c:b3:e8:9d:2b:98:
15:b1:96:29:e7:ce:41:6d:73:cc:da:e8:fd:55:1e:01:2a:8d:
63:98:be:16:89:92:bf:28:fb:03:74:7d:dc:40:af:b7:7b:26:
16:58:10:50:88:2a:a4:d4:2d:6d:9d:65:8c:92:26:da:2c:43:
e6:d6:6d:ec:26:8a:17:ed:07:a2:cf:9d:25:0d:6b:3e:c1:46:
e5:41:85:b5:fa:d0:8e:8d:cd:ef:46:97:44:d3:45:47:87:5a:
d6:7d:15:a5:72:99:3f:85:0c:9c:23:9b:99:74:c1:7e:c3:ff:
bb:83:c5:cc:8e:53:18:23:2a:aa:03:85:a7:a7:6e:13:e6:b0:
8a:f2:cb:06:b3:96:5d:c9:fe:e1:47:31:c9:3c:90:a9:e9:df:
46:87:16:9d:14:fb:df:d5:ac:81:cb:1f:e6:88:75:f9:df:c1:
e7:9e:aa:10:55:15:f0:1a:8f:81:b1:6f:2a:d1:41:b8:ab:68:
55:4e:ad:56:6e:ee:43:51:dd:34:4f:5d:63:7f:80:5c:5b:f0:
94:f1:e6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:09:05 2025 by rpki-client