Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/1-9Qv2FH0v3iPRMD90TVpLoByfjA.roa
File: 1-9Qv2FH0v3iPRMD90TVpLoByfjA.roa (raw, json)
Hash identifier: Ukvf/47gJngPCJd/s1n72v33gWeH81qkCwoSz7zuFXI=
Subject key identifier: FB:D4:2F:D8:51:F4:BF:78:8F:44:C0:FD:D1:35:69:2E:80:72:7E:30
Certificate issuer: /CN=a608db43964b6986ec740f0b5e33f627589ac560
Certificate serial: 0196CE6B72C3EEA325B81707047DD18632C8
Authority key identifier: A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/1-9Qv2FH0v3iPRMD90TVpLoByfjA.roa
Signing time: Wed 14 May 2025 10:51:10 +0000
ROA not before: Wed 14 May 2025 10:51:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60042
IP address blocks: 79.133.178.0/24 maxlen: 24
176.118.208.0/22 maxlen: 22
176.118.209.0/24 maxlen: 24
176.118.213.0/24 maxlen: 24
176.118.214.0/23 maxlen: 23
176.118.216.0/22 maxlen: 22
176.118.220.0/22 maxlen: 22
176.118.222.0/24 maxlen: 24
185.42.228.0/22 maxlen: 22
185.42.229.0/24 maxlen: 24
185.42.230.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 28 May 2025 13:48:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:6b:72:c3:ee:a3:25:b8:17:07:04:7d:d1:86:32:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a608db43964b6986ec740f0b5e33f627589ac560
Validity
Not Before: May 14 10:51:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbd42fd851f4bf788f44c0fdd135692e80727e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:17:83:1e:63:4c:a5:d4:7a:49:db:2e:3b:1c:
76:50:9b:a2:c5:54:13:35:4d:a3:ed:2a:12:dd:40:
e4:47:a4:a8:3a:12:58:6b:7b:77:ec:ee:6f:a4:0a:
2f:6c:c0:78:32:9a:d4:23:24:d4:83:d8:de:5c:0b:
ab:05:6e:25:d3:70:ee:34:d0:4d:b8:c1:2e:24:66:
a8:ee:61:86:a5:37:b5:09:ae:79:cb:f6:be:45:45:
08:90:8b:a4:91:c7:84:2b:03:4d:50:02:76:d3:90:
0c:b3:fb:fc:54:c8:dc:5d:d3:de:3a:8a:4b:7e:54:
82:16:0f:e5:b0:7e:94:74:b7:88:18:4a:4f:28:fb:
44:1f:ff:e2:34:2f:f7:01:df:90:82:d4:6d:c6:0c:
95:b4:d6:d5:55:40:c4:7d:fa:59:b8:1a:fc:52:d5:
f4:c0:8a:bc:c4:9b:02:41:3a:65:41:c3:60:bf:6e:
9b:a5:2b:21:6b:da:ea:76:29:77:0b:f8:82:fa:13:
a4:2c:ae:20:ea:98:0f:c5:8f:c7:a8:a4:fe:60:ea:
e1:88:8d:e2:3a:6f:61:41:bd:5f:a8:54:04:ee:d0:
81:2a:11:8c:84:c8:3f:95:51:43:c2:a9:88:9f:11:
05:96:da:8d:73:c7:4e:11:e9:af:2e:85:19:7b:59:
94:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D4:2F:D8:51:F4:BF:78:8F:44:C0:FD:D1:35:69:2E:80:72:7E:30
X509v3 Authority Key Identifier:
keyid:A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/1-9Qv2FH0v3iPRMD90TVpLoByfjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.133.178.0/24
176.118.208.0/22
176.118.213.0-176.118.223.255
185.42.228.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:ee:50:eb:ef:8c:4b:c2:c2:77:02:0a:7e:ea:d7:17:46:21:
49:f8:46:8b:44:3c:98:70:f3:41:af:60:a9:3d:d8:a0:76:03:
2d:2b:2d:3f:fc:f0:06:0b:88:9f:af:6e:30:5e:04:a2:f7:eb:
fa:ff:4d:c5:df:5d:db:92:1e:11:30:9a:8e:99:b2:69:d6:64:
c6:fd:7f:ec:1d:9a:9b:91:f8:7f:aa:43:83:1e:3c:1a:36:7c:
ec:88:34:bb:5a:59:3c:a7:30:2c:0e:77:e9:20:50:2f:30:c0:
c8:aa:ab:96:8b:ed:ef:cc:97:d8:d3:92:c4:3e:91:10:a6:f8:
fd:e0:32:f4:20:96:79:79:c1:1d:46:d4:70:e3:ef:e9:af:30:
64:d3:d2:27:08:16:02:ea:49:ca:e6:c6:91:c3:ed:39:85:f6:
db:d3:27:f2:cf:7d:3f:56:8d:af:31:7f:72:df:fd:5f:4c:2b:
6a:c8:67:73:54:5a:c7:1e:6c:04:e0:e1:cb:22:c2:b6:90:b3:
34:5a:d2:6d:fb:8f:27:b6:2b:fa:4e:bd:6b:71:ff:57:cd:70:
35:3a:e2:b7:e6:9b:7e:1d:1e:49:dc:80:0c:cf:a1:5b:0b:5d:
9d:4c:21:86:f6:53:7e:61:b6:94:48:e6:d8:02:30:b7:52:8e:
ed:af:60:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 08:44:06 2025 by rpki-client