Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/w9TjPKswPgqr1i-A7_2wC-Zylcs.roa
File: w9TjPKswPgqr1i-A7_2wC-Zylcs.roa (raw, json)
Hash identifier: hJ8ZJkbVrTddToXPGsePm79pqHrUvpuWPka4FM7UUI4=
Subject key identifier: C3:D4:E3:3C:AB:30:3E:0A:AB:D6:2F:80:EF:FD:B0:0B:E6:72:95:CB
Certificate issuer: /CN=d03c73b60f2103ee3b2a2c3cbe920e212a92ee65
Certificate serial: 019703337B62682FC505882395B562A78873
Authority key identifier: D0:3C:73:B6:0F:21:03:EE:3B:2A:2C:3C:BE:92:0E:21:2A:92:EE:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/w9TjPKswPgqr1i-A7_2wC-Zylcs.roa
Signing time: Sat 24 May 2025 16:49:54 +0000
ROA not before: Sat 24 May 2025 16:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211507
IP address blocks: 193.200.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Jun 2025 13:25:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:03:33:7b:62:68:2f:c5:05:88:23:95:b5:62:a7:88:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d03c73b60f2103ee3b2a2c3cbe920e212a92ee65
Validity
Not Before: May 24 16:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3d4e33cab303e0aabd62f80effdb00be67295cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:34:5b:71:c4:b7:86:4c:72:c4:20:8b:0c:fc:
a3:41:53:55:ba:dd:4b:c0:2c:15:2b:b2:1e:55:0a:
12:e6:fb:e4:bc:7b:7f:1e:44:79:02:07:69:62:54:
60:92:7d:b9:b5:44:ad:3e:b9:cc:28:6c:6a:ac:b5:
f1:b5:e0:fd:35:c5:04:35:d9:7b:d8:a7:07:31:26:
63:41:99:1d:9e:50:d4:9c:56:9d:8c:3a:ef:f3:a0:
6f:69:21:11:de:54:dc:aa:c5:a3:ed:47:37:46:f6:
af:c6:a4:b4:46:1c:4c:63:b4:43:a6:3f:0a:82:35:
ad:e5:d5:f2:53:0b:55:76:a2:21:e2:5c:b2:a9:48:
0a:83:71:df:18:b3:ef:60:0d:31:e2:6d:66:ae:5f:
ef:89:31:b9:5f:ba:11:77:44:ea:55:ba:aa:a6:d9:
18:2b:94:27:4e:e3:f4:a3:9d:84:af:0c:fc:18:03:
54:7b:49:4b:1f:f8:17:d1:92:a7:c6:1d:ae:1b:fc:
52:78:b8:5b:16:e9:76:c2:f9:67:6f:f4:11:2c:96:
ee:e1:30:8e:f9:cc:3c:40:0d:51:d0:53:57:10:cd:
f3:62:c2:cb:2e:8a:07:3e:7c:ae:a5:e4:ab:66:ef:
69:53:8c:8b:f6:3b:c4:9a:8f:3b:24:68:79:22:58:
43:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D4:E3:3C:AB:30:3E:0A:AB:D6:2F:80:EF:FD:B0:0B:E6:72:95:CB
X509v3 Authority Key Identifier:
keyid:D0:3C:73:B6:0F:21:03:EE:3B:2A:2C:3C:BE:92:0E:21:2A:92:EE:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/w9TjPKswPgqr1i-A7_2wC-Zylcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.78.0/24
Signature Algorithm: sha256WithRSAEncryption
76:19:a4:52:e8:62:75:d2:64:b9:ff:cb:c1:3c:2b:09:70:7d:
ee:05:a6:bd:6d:bf:66:63:14:63:29:48:2d:c0:d4:38:d0:48:
65:2b:3a:e9:fd:fd:95:61:81:ee:42:7c:09:1d:e9:6c:2a:35:
fe:c2:6e:de:4d:7e:67:d1:20:63:86:a7:aa:d9:6f:73:10:2f:
2c:9a:2a:ca:31:78:9f:31:4e:01:de:7d:fe:fa:f6:ca:f1:4e:
a7:5c:1f:37:be:d1:3a:d3:13:56:58:38:c3:22:5e:77:d5:d4:
77:ca:51:bf:7b:27:dd:15:77:fc:c2:9a:a7:17:8d:b0:8d:05:
4c:57:da:dd:66:00:5b:37:d7:7c:b7:e1:1d:0e:f5:36:3c:e0:
8f:be:49:b4:73:0e:79:2b:0d:39:50:50:9f:f2:c9:a7:b4:c9:
6b:5e:79:98:af:c8:0f:d7:71:9e:11:c3:81:1c:ab:17:0c:4f:
82:f9:ca:cf:d7:16:db:36:50:f2:10:ec:23:31:2c:9d:88:2b:
e7:01:8c:2e:3f:46:f5:6b:c3:2c:8b:01:ba:d9:66:9f:a7:cb:
69:de:bb:c1:1f:94:2e:4d:1f:28:bd:8f:64:d8:a0:f3:ec:4b:
06:3b:1f:a6:46:40:5b:36:4a:4e:48:72:7a:cd:01:50:91:07:
77:66:11:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:45:00 2025 by rpki-client