Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/_n0odBWE77iNB7dB7bER5FkSUxo.roa
File: _n0odBWE77iNB7dB7bER5FkSUxo.roa (raw, json)
Hash identifier: KfYYYkrolFspZE2pJlSf4IRttitODtd50iinzlLOlak=
Subject key identifier: FE:7D:28:74:15:84:EF:B8:8D:07:B7:41:ED:B1:11:E4:59:12:53:1A
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01942746A9292F9CDE292BD282EC956734BF
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/_n0odBWE77iNB7dB7bER5FkSUxo.roa
Signing time: Thu 02 Jan 2025 13:48:49 +0000
ROA not before: Thu 02 Jan 2025 13:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203576
IP address blocks: 78.135.89.0/24 maxlen: 24
78.135.110.0/24 maxlen: 24
188.132.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 Jan 2025 21:51:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:a9:29:2f:9c:de:29:2b:d2:82:ec:95:67:34:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 13:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe7d28741584efb88d07b741edb111e45912531a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:75:4c:2b:18:a3:9f:db:d2:0a:18:08:d4:91:
14:da:bb:8b:46:30:b1:4c:1c:63:dc:2e:0d:25:f5:
0b:ff:94:e9:f4:3b:c0:d4:6c:b7:d3:54:bc:b7:70:
ed:c1:f4:91:c1:53:c9:be:af:b1:6d:d6:ba:60:07:
c5:7e:ca:7d:41:44:04:9c:7f:f5:94:f2:74:a2:e4:
ba:22:7a:0d:13:f9:f4:7b:f2:c8:4a:3a:94:fc:fc:
db:59:da:5c:d5:94:65:bf:5f:53:48:6c:96:4e:48:
2c:5c:86:ff:61:97:0d:d6:97:c2:5b:aa:6a:30:67:
17:e0:cb:21:fa:e4:5d:af:1f:28:4c:88:99:12:9f:
7c:70:17:0e:1e:b3:6d:e4:60:98:d9:c0:58:63:c5:
ac:a9:b3:5d:97:f2:69:d1:b7:0b:70:dd:b2:0b:49:
1d:ef:a0:9d:d8:ab:66:9a:9d:07:ae:48:25:02:bd:
99:72:1d:c0:c6:9e:cb:0e:26:87:45:18:e3:c9:6f:
c9:ae:5f:8e:7f:e4:d7:54:94:4f:6b:8c:7a:dd:0c:
66:ed:49:dd:4b:c3:31:b0:fd:13:fd:b3:cd:5f:bc:
71:63:8c:32:94:9b:6e:3d:ae:e0:d4:af:41:54:23:
e0:80:74:c8:fc:9d:a5:ca:8e:30:71:95:86:7b:c8:
54:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:7D:28:74:15:84:EF:B8:8D:07:B7:41:ED:B1:11:E4:59:12:53:1A
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/_n0odBWE77iNB7dB7bER5FkSUxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.89.0/24
78.135.110.0/24
188.132.196.0/24
Signature Algorithm: sha256WithRSAEncryption
16:fc:77:ac:d6:16:ad:86:32:6d:9e:72:37:30:29:a3:7a:12:
b9:28:9e:9a:7f:a8:81:79:9f:7f:ee:50:1a:35:c6:1d:20:b9:
40:bc:61:97:43:35:33:e1:b7:10:f1:85:73:1a:e6:c4:be:32:
78:ca:99:8f:bc:46:cd:c3:a1:0b:b0:d1:62:b9:2a:35:aa:6c:
3e:0c:15:fa:eb:33:cd:21:8f:ec:90:53:89:4f:21:aa:02:0b:
1c:7a:7f:df:03:c3:f1:d2:16:8c:a0:fb:a8:d3:04:d8:df:8e:
2e:28:36:00:c6:d4:5b:45:46:2d:d1:74:84:e2:c7:b6:7a:e6:
f5:f3:e8:74:c2:da:94:c5:d5:a5:cd:17:1c:2f:f7:ba:e3:ca:
8a:2d:94:ef:27:6d:90:35:ea:ca:3c:97:31:0b:63:36:02:f3:
8b:db:11:4a:4b:12:b0:15:e0:8b:ad:25:12:36:b4:74:f3:77:
80:04:06:95:e0:05:b3:40:93:3e:fc:d9:1d:64:57:ce:c3:1a:
13:c3:2d:6e:3b:e7:70:ee:1a:b7:04:e4:f8:aa:1d:ae:ce:8f:
68:5f:3d:9c:9b:71:71:a3:f9:57:b9:b6:ed:9f:99:90:d3:78:
79:4f:d1:09:3b:ec:27:07:fb:08:dd:d1:c8:c1:21:5b:0e:47:
eb:9b:19:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:09:02 2025 by rpki-client