Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/jOi83mpzwRLTIr_Zpa-RKUbt_3M.roa
File: jOi83mpzwRLTIr_Zpa-RKUbt_3M.roa (raw, json)
Hash identifier: JDCsK6fOv2mUpn7CDseYXXXqcA/WbXGqjOPKpNkvA5o=
Subject key identifier: 8C:E8:BC:DE:6A:73:C1:12:D3:22:BF:D9:A5:AF:91:29:46:ED:FF:73
Certificate issuer: /CN=fe076c4eb82198289b13ff528593907d3214d648
Certificate serial: 0193FF41720E285F94917AE5625D8B0E4083
Authority key identifier: FE:07:6C:4E:B8:21:98:28:9B:13:FF:52:85:93:90:7D:32:14:D6:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/jOi83mpzwRLTIr_Zpa-RKUbt_3M.roa
Signing time: Wed 25 Dec 2024 19:18:19 +0000
ROA not before: Wed 25 Dec 2024 19:18:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211871
IP address blocks: 78.111.111.0/24 maxlen: 24
185.139.5.0/24 maxlen: 24
217.195.202.0/24 maxlen: 24
217.195.207.0/24 maxlen: 24
2a12:94c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:51:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ff:41:72:0e:28:5f:94:91:7a:e5:62:5d:8b:0e:40:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe076c4eb82198289b13ff528593907d3214d648
Validity
Not Before: Dec 25 19:18:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ce8bcde6a73c112d322bfd9a5af912946edff73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:13:20:d3:7c:2e:67:33:dd:1d:9f:a7:15:1f:
e0:f7:68:98:85:db:69:89:2f:98:2b:b3:60:52:dd:
69:5e:84:58:e1:66:ac:3a:e6:63:1d:e1:83:ba:5d:
f4:f1:b9:50:f6:ed:c3:6b:57:83:55:61:7d:64:db:
3f:92:4a:a7:d5:ef:47:4a:fe:0c:d9:8c:f6:10:ab:
65:13:a8:2d:15:54:25:84:14:26:23:d1:33:80:f7:
5e:5c:b6:98:ec:d4:a8:b0:6f:c7:71:ee:83:8b:86:
55:0b:39:20:43:8a:d1:31:58:8c:f6:5e:1e:c6:8c:
29:a2:c3:05:5c:c8:3c:00:d1:39:27:91:28:b4:4b:
7c:60:58:15:55:37:0f:4d:2c:c8:97:3b:ef:d0:10:
42:eb:54:c3:77:a4:14:f7:95:34:d0:7e:16:9d:fc:
d8:4d:2b:94:cf:c4:bb:e1:56:33:1c:e7:26:58:26:
55:b3:50:04:41:e3:21:bc:1f:5f:e1:cf:f7:e2:8e:
6d:11:b4:dc:ac:17:60:51:92:fb:ec:78:f5:d7:99:
ce:fb:72:82:54:a2:da:b5:73:d6:a4:24:c7:1f:0c:
6d:bf:0c:2c:19:3a:76:d6:18:81:59:17:61:51:aa:
9f:cd:ac:00:ae:3d:b7:0f:1a:e6:c1:56:7f:0f:d7:
21:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E8:BC:DE:6A:73:C1:12:D3:22:BF:D9:A5:AF:91:29:46:ED:FF:73
X509v3 Authority Key Identifier:
keyid:FE:07:6C:4E:B8:21:98:28:9B:13:FF:52:85:93:90:7D:32:14:D6:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/jOi83mpzwRLTIr_Zpa-RKUbt_3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.111.111.0/24
185.139.5.0/24
217.195.202.0/24
217.195.207.0/24
IPv6:
2a12:94c0::/29
Signature Algorithm: sha256WithRSAEncryption
40:30:7a:96:61:06:ee:35:79:83:2f:46:d1:09:cb:21:a1:b0:
58:d3:da:48:30:3e:ed:57:26:01:81:9f:80:ac:de:ad:17:de:
cb:d2:aa:3b:ed:1e:c6:63:f0:ea:b8:b0:14:dc:e6:2d:3a:53:
fe:bc:50:1f:9b:6b:60:30:21:2a:09:55:62:b1:71:ec:ab:81:
fe:db:2b:0a:c3:14:cb:37:08:70:00:4e:b0:95:85:85:5d:cb:
be:5e:51:dc:87:ca:fb:37:84:37:1c:62:7e:43:3d:cd:e2:fc:
89:50:cd:0a:d6:51:66:f2:d9:15:64:2f:0f:ef:d4:8d:10:58:
5b:9d:8f:6f:42:3a:65:5c:41:76:0f:fe:f5:d0:85:55:b6:bc:
e2:5d:6c:65:3b:e5:b5:f9:8f:b7:ee:34:c6:60:a8:10:81:21:
82:2e:07:ad:d7:9d:3f:e5:4c:07:2f:5a:95:87:31:c0:c0:eb:
57:57:60:02:14:6a:38:b0:9c:66:d4:98:88:b2:33:ff:77:50:
fd:7d:9d:6f:89:4e:46:71:d2:b6:5a:fd:ea:1f:f1:33:a0:e7:
25:9c:d0:74:bc:62:f7:1b:c1:fa:96:98:34:30:f4:20:23:81:
ee:79:f5:fb:14:54:a6:41:4b:b8:28:41:e9:d2:56:4f:3a:4e:
6f:76:07:06
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZP/QXIOKF+UkXrlYl2LDkCDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMDc2YzRlYjgyMTk4Mjg5YjEzZmY1Mjg1OTM5MDdkMzIx
NGQ2NDgwHhcNMjQxMjI1MTkxODE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2U4YmNkZTZhNzNjMTEyZDMyMmJmZDlhNWFmOTEyOTQ2ZWRmZjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxMg03wuZzPdHZ+nFR/g92iYhdtp
iS+YK7NgUt1pXoRY4WasOuZjHeGDul308blQ9u3Da1eDVWF9ZNs/kkqn1e9HSv4M
2Yz2EKtlE6gtFVQlhBQmI9EzgPdeXLaY7NSosG/Hce6Di4ZVCzkgQ4rRMViM9l4e
xowposMFXMg8ANE5J5EotEt8YFgVVTcPTSzIlzvv0BBC61TDd6QU95U00H4WnfzY
TSuUz8S74VYzHOcmWCZVs1AEQeMhvB9f4c/34o5tEbTcrBdgUZL77Hj115nO+3KC
VKLatXPWpCTHHwxtvwwsGTp21hiBWRdhUaqfzawArj23DxrmwVZ/D9chywIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFIzovN5qc8ES0yK/2aWvkSlG7f9zMB8GA1UdIwQY
MBaAFP4HbE64IZgomxP/UoWTkH0yFNZIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2dkc1RyZ2htQ2liRV85U2haT1FmVElVMWtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lNDdiN2QtMzYwYS00YTQxLWI3NmIt
MzY3YTQxMWY5ZWM2LzEvak9pODNtcHp3UkxUSXJfWnBhLVJLVWJ0XzNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9lNDdiN2QtMzYwYS00YTQxLWI3NmItMzY3YTQxMWY5ZWM2
LzEvX2dkc1RyZ2htQ2liRV85U2haT1FmVElVMWtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQATm9vAwQA
uYsFAwQA2cPKAwQA2cPPMA0EAgACMAcDBQMqEpTAMA0GCSqGSIb3DQEBCwUAA4IB
AQBAMHqWYQbuNXmDL0bRCcshobBY09pIMD7tVyYBgZ+ArN6tF97L0qo77R7GY/Dq
uLAU3OYtOlP+vFAfm2tgMCEqCVVisXHsq4H+2ysKwxTLNwhwAE6wlYWFXcu+XlHc
h8r7N4Q3HGJ+Qz3N4vyJUM0K1lFm8tkVZC8P79SNEFhbnY9vQjplXEF2D/710IVV
trziXWxlO+W1+Y+37jTGYKgQgSGCLget150/5UwHL1qVhzHAwOtXV2ACFGo4sJxm
1JiIsjP/d1D9fZ1viU5GcdK2Wv3qH/EzoOclnNB0vGL3G8H6lpg0MPQgI4HuefX7
FFSmQUu4KEHp0lZPOk5vdgcG
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:38:29 2025 by rpki-client