Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/W-4q1NChA2cM1AfyYQ6uZVpjgE8.roa
File: W-4q1NChA2cM1AfyYQ6uZVpjgE8.roa (raw, json)
Hash identifier: CWMcWdWvoKPoJv4Et7d7oTm3GVbgTWf50aASDNvPQ/U=
Subject key identifier: 5B:EE:2A:D4:D0:A1:03:67:0C:D4:07:F2:61:0E:AE:65:5A:63:80:4F
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 019596987A89F3E6495972157D3A62C68076
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/W-4q1NChA2cM1AfyYQ6uZVpjgE8.roa
Signing time: Fri 14 Mar 2025 21:38:49 +0000
ROA not before: Fri 14 Mar 2025 21:38:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61135
IP address blocks: 78.135.73.0/24 maxlen: 24
185.17.136.0/24 maxlen: 24
188.132.229.0/24 maxlen: 24
212.68.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Mar 2025 22:13:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:96:98:7a:89:f3:e6:49:59:72:15:7d:3a:62:c6:80:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Mar 14 21:38:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5bee2ad4d0a103670cd407f2610eae655a63804f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:86:21:9f:79:de:cc:38:1e:23:b3:10:4b:d5:
f4:58:06:4c:25:42:aa:dc:a5:06:18:7a:d1:d7:7c:
87:7f:ae:ec:e8:25:11:cc:56:6b:3d:7c:19:e9:b2:
57:dc:5b:2f:36:2a:e7:c0:9b:39:d1:20:5a:9b:d0:
b7:63:c6:83:ed:b0:63:e4:67:f1:00:5f:6a:ac:d6:
53:b8:60:d5:dc:bb:bf:a4:8f:fb:01:91:8a:dc:1f:
e5:d3:93:cf:95:8a:5f:0f:ad:74:96:af:2f:f4:72:
47:f6:72:b9:89:8f:2b:2d:a8:55:b9:97:63:ae:e3:
d0:7a:86:b4:6a:39:6b:cf:6d:1c:21:a5:c9:9f:18:
cb:b9:0f:4d:c5:bd:5e:2b:6e:33:5d:38:28:9b:f8:
0c:66:b2:e8:52:49:55:cf:69:87:ab:95:4d:ee:60:
0f:8f:9d:b1:8c:bb:cb:c3:04:06:9a:c4:62:52:a1:
13:3b:61:5b:e6:e4:84:ee:16:e2:6f:9f:df:69:da:
10:b1:ce:94:79:65:c3:8a:fd:6a:16:41:00:4b:94:
9c:da:b7:6a:95:01:be:ba:81:51:11:96:b0:89:8e:
ff:6d:e8:de:4b:dc:44:f4:a3:5b:dd:85:53:b6:3c:
d0:ff:be:13:fd:35:54:3f:4d:3b:2c:42:b4:02:cc:
0c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:EE:2A:D4:D0:A1:03:67:0C:D4:07:F2:61:0E:AE:65:5A:63:80:4F
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/W-4q1NChA2cM1AfyYQ6uZVpjgE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.73.0/24
185.17.136.0/24
188.132.229.0/24
212.68.35.0/24
Signature Algorithm: sha256WithRSAEncryption
92:1c:d3:eb:b9:fc:7b:a8:ef:d9:39:5a:b4:24:58:82:de:9d:
fd:79:43:4c:37:65:f4:22:af:a8:86:68:dc:b1:65:1b:86:7d:
fc:81:08:2a:dc:4f:2c:bd:59:aa:aa:f3:62:b9:7d:df:ad:ea:
df:4b:c5:89:70:16:55:f0:84:d1:da:15:13:7d:ab:9a:04:20:
77:c1:a6:9b:08:87:74:96:14:85:0a:a9:66:cd:48:6f:88:45:
3d:b4:1b:17:34:07:1d:bd:2a:66:aa:83:df:5b:c1:74:ee:7a:
21:58:cd:a6:0c:87:bf:65:5d:2d:40:fc:b2:d7:b5:aa:44:60:
02:89:97:d4:60:3e:15:25:19:31:b0:2f:62:21:58:52:e0:a0:
51:fe:b8:f3:a7:0e:e7:5b:54:02:11:40:b0:4f:14:fd:a0:25:
21:7b:79:80:f3:8b:1e:aa:76:e4:d5:4b:68:71:39:ef:15:7f:
7b:ee:ff:64:92:d3:94:bd:58:fb:21:78:b3:a8:56:96:6f:4d:
60:07:64:db:09:ec:79:43:c3:c9:61:88:c7:18:d9:80:4f:02:
26:ab:5c:7e:fa:03:0c:7c:62:84:3b:01:6f:d0:d3:65:ec:cd:
7b:e0:68:55:59:ab:d8:0c:32:d4:bb:e0:51:f3:f4:5a:21:be:
82:c2:74:ef
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZWWmHqJ8+ZJWXIVfTpixoB2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjUwMzE0MjEzODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YmVlMmFkNGQwYTEwMzY3MGNkNDA3ZjI2MTBlYWU2NTVhNjM4MDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIYhn3nezDgeI7MQS9X0WAZMJUKq
3KUGGHrR13yHf67s6CURzFZrPXwZ6bJX3FsvNirnwJs50SBam9C3Y8aD7bBj5Gfx
AF9qrNZTuGDV3Lu/pI/7AZGK3B/l05PPlYpfD610lq8v9HJH9nK5iY8rLahVuZdj
ruPQeoa0ajlrz20cIaXJnxjLuQ9Nxb1eK24zXTgom/gMZrLoUklVz2mHq5VN7mAP
j52xjLvLwwQGmsRiUqETO2Fb5uSE7hbib5/fadoQsc6UeWXDiv1qFkEAS5Sc2rdq
lQG+uoFREZawiY7/bejeS9xE9KNb3YVTtjzQ/74T/TVUP007LEK0AswMNQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFFvuKtTQoQNnDNQH8mEOrmVaY4BPMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvVy00cTFOQ2hBMmNNMUFmeVlRNnVaVnBqZ0U4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQATodJAwQA
uRGIAwQAvITlAwQA1EQjMA0GCSqGSIb3DQEBCwUAA4IBAQCSHNPrufx7qO/ZOVq0
JFiC3p39eUNMN2X0Iq+ohmjcsWUbhn38gQgq3E8svVmqqvNiuX3frerfS8WJcBZV
8ITR2hUTfauaBCB3waabCId0lhSFCqlmzUhviEU9tBsXNAcdvSpmqoPfW8F07noh
WM2mDIe/ZV0tQPyy17WqRGACiZfUYD4VJRkxsC9iIVhS4KBR/rjzpw7nW1QCEUCw
TxT9oCUhe3mA84seqnbk1UtocTnvFX977v9kktOUvVj7IXizqFaWb01gB2TbCex5
Q8PJYYjHGNmATwImq1x++gMMfGKEOwFv0NNl7M174GhVWavYDDLUu+BR8/RaIb6C
wnTv
-----END CERTIFICATE-----
Generated at Sun Jun 8 08:20:15 2025 by rpki-client