Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/yS78_3-SC-m-0iZG4pkV_IOBKn8.roa
File: yS78_3-SC-m-0iZG4pkV_IOBKn8.roa (raw, json)
Hash identifier: HdazGfhP7gR/exr8pKR5Z/1HYWzVyxxGoQingeOxoes=
Subject key identifier: C9:2E:FC:FF:7F:92:0B:E9:BE:D2:26:46:E2:99:15:FC:83:81:2A:7F
Certificate issuer: /CN=40d933e82474650c6aa3e9cbf0574d27286592e7
Certificate serial: 0195EC10A9D44D73F3BFF9D3085934CC695E
Authority key identifier: 40:D9:33:E8:24:74:65:0C:6A:A3:E9:CB:F0:57:4D:27:28:65:92:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/yS78_3-SC-m-0iZG4pkV_IOBKn8.roa
Signing time: Mon 31 Mar 2025 11:57:49 +0000
ROA not before: Mon 31 Mar 2025 11:57:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207044
IP address blocks: 87.120.240.0/22 maxlen: 24
87.120.248.0/22 maxlen: 24
87.121.252.0/22 maxlen: 24
88.151.24.0/21 maxlen: 24
89.184.36.0/22 maxlen: 24
89.184.60.0/22 maxlen: 24
91.92.28.0/22 maxlen: 24
185.167.196.0/22 maxlen: 24
213.133.64.0/21 maxlen: 24
2a0b:ae00::/29 maxlen: 29
2a0b:ae00:1000::/38 maxlen: 38
2a0b:ae00:1400::/38 maxlen: 38
2a0b:ae00:1800::/38 maxlen: 38
2a0b:ae00:2800::/38 maxlen: 38
Validation: Failed, certificate revoked on Mon 31 Mar 2025 12:18:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ec:10:a9:d4:4d:73:f3:bf:f9:d3:08:59:34:cc:69:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d933e82474650c6aa3e9cbf0574d27286592e7
Validity
Not Before: Mar 31 11:57:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c92efcff7f920be9bed22646e29915fc83812a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0a:4c:69:dd:a8:33:a3:2e:c3:84:ab:03:71:
91:fe:30:e7:42:12:a5:a1:87:cc:c6:a6:fe:2f:8f:
97:a6:ba:4e:20:70:0f:e6:52:9f:31:be:8f:40:4a:
73:73:c7:6c:c6:50:91:f7:d0:8a:4e:1e:fa:ae:5a:
87:c6:08:5a:cf:7e:cd:4d:d0:af:c3:b3:84:9f:87:
77:2f:67:dd:42:02:21:af:66:14:b9:7f:76:72:ac:
d7:55:8e:20:9f:8f:71:3b:d0:a9:5e:c3:87:53:89:
7e:71:ab:74:75:51:7a:c3:97:df:8c:46:72:57:e0:
ea:1c:bf:59:38:96:8f:fa:5a:c8:a6:b2:25:af:89:
fb:08:78:dc:54:8b:42:1d:e3:66:35:3f:6e:ef:eb:
d4:2b:5c:e9:9a:3f:bb:76:30:f4:12:14:ca:09:44:
af:a9:d9:95:ba:ac:56:e7:52:5d:f7:d7:8c:09:1f:
18:0d:22:79:c8:80:5b:e9:e0:df:8b:bf:5b:77:8f:
5f:b8:42:33:88:65:6f:79:e0:db:73:76:14:06:6d:
e9:4a:1d:ab:61:54:73:0b:94:5e:67:22:d3:6d:9a:
b6:56:b2:bd:42:26:ba:72:51:b7:83:cb:28:56:68:
30:21:5d:bb:00:45:ab:d8:a2:6f:00:aa:f2:22:4e:
8d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2E:FC:FF:7F:92:0B:E9:BE:D2:26:46:E2:99:15:FC:83:81:2A:7F
X509v3 Authority Key Identifier:
keyid:40:D9:33:E8:24:74:65:0C:6A:A3:E9:CB:F0:57:4D:27:28:65:92:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/yS78_3-SC-m-0iZG4pkV_IOBKn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.240.0/22
87.120.248.0/22
87.121.252.0/22
88.151.24.0/21
89.184.36.0/22
89.184.60.0/22
91.92.28.0/22
185.167.196.0/22
213.133.64.0/21
IPv6:
2a0b:ae00::/29
Signature Algorithm: sha256WithRSAEncryption
86:14:f9:90:d5:dd:07:47:0d:5e:d8:2b:de:58:c1:1c:88:b0:
f9:7d:b4:4e:c1:6a:5b:79:88:4c:00:53:75:30:c3:e1:4c:87:
b0:d4:c2:33:fe:80:73:4f:d3:d4:63:12:53:20:ef:17:39:db:
35:0e:df:cb:d7:02:08:65:c2:92:7e:f5:d8:6c:6f:49:3e:d2:
c3:8b:48:8f:2b:21:7f:7b:5a:6e:d8:98:05:66:47:80:8a:20:
fe:6c:33:09:58:b6:df:68:9b:6e:93:28:4f:c2:8c:02:b5:fd:
a8:fc:31:c6:8a:0e:ba:58:0d:cc:66:68:fb:f5:ff:92:7b:eb:
15:3b:47:51:fa:6a:43:b2:cf:5f:ac:f3:56:d4:f2:92:d7:0a:
77:49:fd:20:a5:75:08:7d:c1:0e:b3:ef:03:08:55:d7:e3:ea:
98:f0:5c:69:c8:da:62:ab:db:d6:53:8f:06:9b:1e:70:5d:58:
17:a3:12:05:d3:90:d5:4c:60:6b:03:a3:b1:79:4a:1a:66:40:
53:f2:48:00:a3:64:cb:9f:94:60:aa:65:8f:ae:e1:8a:fa:7a:
08:48:a6:81:6f:5a:86:f6:bf:d1:fc:fd:11:a9:7b:b1:79:9d:
1a:8c:50:1f:51:66:47:82:d2:e2:25:f3:cf:ae:9a:dc:a1:bc:
b7:57:cc:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:10:47 2025 by rpki-client