Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/q8M-3H6OVUVUn0YqzRiI0Q19ug8.roa
File: q8M-3H6OVUVUn0YqzRiI0Q19ug8.roa (raw, json)
Hash identifier: Q+O8sJG70iEmUv3N4ZQyhgP/0dxD8doXw0L8mjUAc5c=
Subject key identifier: AB:C3:3E:DC:7E:8E:55:45:54:9F:46:2A:CD:18:88:D1:0D:7D:BA:0F
Certificate issuer: /CN=bbffd123cb93e24e025f952842108402958d4a4c
Certificate serial: 0197781E3FCB76F3DB4876153AC91003409A
Authority key identifier: BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/q8M-3H6OVUVUn0YqzRiI0Q19ug8.roa
Signing time: Mon 16 Jun 2025 09:42:17 +0000
ROA not before: Mon 16 Jun 2025 09:42:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 86.109.0.0/24 maxlen: 24
86.109.2.0/23 maxlen: 23
93.187.218.0/23 maxlen: 23
136.144.50.0/23 maxlen: 23
136.144.58.0/23 maxlen: 23
136.144.62.0/23 maxlen: 23
139.178.64.0/22 maxlen: 22
145.40.64.0/23 maxlen: 23
145.40.74.0/23 maxlen: 23
145.40.78.0/24 maxlen: 24
145.40.88.0/24 maxlen: 24
145.40.101.0/24 maxlen: 24
145.40.108.0/22 maxlen: 22
145.40.120.0/22 maxlen: 22
147.28.131.0/24 maxlen: 24
147.28.136.0/23 maxlen: 23
147.28.138.0/23 maxlen: 23
147.28.164.0/23 maxlen: 23
147.28.166.0/23 maxlen: 23
147.28.176.0/23 maxlen: 23
147.28.189.0/24 maxlen: 24
147.28.194.0/24 maxlen: 24
147.28.202.0/24 maxlen: 24
147.28.204.0/23 maxlen: 23
147.28.210.0/23 maxlen: 23
147.28.214.0/23 maxlen: 23
147.28.222.0/23 maxlen: 23
147.28.241.0/24 maxlen: 24
147.75.36.0/22 maxlen: 22
147.75.40.0/23 maxlen: 23
147.75.44.0/24 maxlen: 24
147.75.48.0/24 maxlen: 24
147.75.59.0/24 maxlen: 24
147.75.64.0/22 maxlen: 22
147.75.72.0/21 maxlen: 21
147.75.96.0/22 maxlen: 22
147.75.104.0/22 maxlen: 22
147.75.192.0/21 maxlen: 21
147.75.206.0/24 maxlen: 24
147.75.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Jun 2025 06:53:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:1e:3f:cb:76:f3:db:48:76:15:3a:c9:10:03:40:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbffd123cb93e24e025f952842108402958d4a4c
Validity
Not Before: Jun 16 09:42:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abc33edc7e8e5545549f462acd1888d10d7dba0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cb:aa:fe:91:ee:bc:47:82:54:f6:18:77:c4:
bc:a4:6e:62:9d:98:12:e0:fd:cd:b5:09:33:9e:ca:
80:45:fe:4a:fa:cb:6e:23:fd:bc:2e:ad:1d:09:dd:
04:e6:19:98:b0:70:36:cf:67:73:03:56:58:b5:27:
de:aa:d2:ac:79:e2:ae:b1:4a:04:6d:74:20:d8:27:
83:a9:10:d6:22:a9:8f:95:2c:e5:dd:db:b6:c2:ca:
44:20:48:35:92:8e:31:87:38:b3:e2:f2:72:9d:00:
25:06:00:e3:e1:a5:7c:c4:c7:c5:cc:44:8b:f0:11:
a8:0e:59:0f:0c:4b:7c:c0:7e:3b:45:60:17:56:55:
53:c3:78:ab:86:5a:eb:07:32:66:14:7d:7f:70:74:
81:02:04:69:4d:f5:15:b5:5e:a8:30:86:d3:05:70:
0f:8b:01:2d:fa:ac:92:f8:da:58:07:c0:aa:21:fe:
8f:d9:e2:4b:6b:e4:d8:c8:35:a5:e3:4e:13:86:3d:
7f:1e:80:e8:b9:98:02:e2:eb:59:cd:7a:a6:b8:b4:
b9:d0:0a:ce:09:5e:da:a0:f7:35:fb:36:68:f4:34:
96:eb:1c:f3:55:e5:0e:c1:23:eb:69:25:55:b2:12:
73:67:00:a1:db:cc:98:49:f6:c5:74:b7:c2:4d:ed:
bb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C3:3E:DC:7E:8E:55:45:54:9F:46:2A:CD:18:88:D1:0D:7D:BA:0F
X509v3 Authority Key Identifier:
keyid:BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/q8M-3H6OVUVUn0YqzRiI0Q19ug8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.109.0.0/24
86.109.2.0/23
93.187.218.0/23
136.144.50.0/23
136.144.58.0/23
136.144.62.0/23
139.178.64.0/22
145.40.64.0/23
145.40.74.0/23
145.40.78.0/24
145.40.88.0/24
145.40.101.0/24
145.40.108.0/22
145.40.120.0/22
147.28.131.0/24
147.28.136.0/22
147.28.164.0/22
147.28.176.0/23
147.28.189.0/24
147.28.194.0/24
147.28.202.0/24
147.28.204.0/23
147.28.210.0/23
147.28.214.0/23
147.28.222.0/23
147.28.241.0/24
147.75.36.0-147.75.41.255
147.75.44.0/24
147.75.48.0/24
147.75.59.0/24
147.75.64.0/22
147.75.72.0/21
147.75.96.0/22
147.75.104.0/22
147.75.192.0/21
147.75.206.0/23
Signature Algorithm: sha256WithRSAEncryption
62:51:4e:d2:c2:cd:34:60:51:ea:a1:4a:55:5c:47:89:2d:98:
72:82:1f:00:61:35:7d:d9:2e:d2:c5:c2:6d:df:72:6e:e5:21:
7e:8e:40:2f:cb:ce:a3:30:a2:aa:81:75:6d:d0:84:f6:50:8e:
de:e0:c0:05:47:bd:7e:25:1f:ef:0b:d3:c9:4c:32:bc:6a:c3:
75:e9:9e:73:d9:9e:0c:9f:56:e9:b7:36:ad:03:fd:2f:26:1d:
7b:8f:c3:c4:99:e3:11:1c:7a:cf:d5:a6:46:87:f8:e2:6f:64:
a1:13:c2:76:1e:4e:85:19:c2:6b:e2:4a:5b:13:b4:dc:1d:51:
58:9b:ae:26:6e:47:12:a5:d7:91:2d:35:89:ee:54:ea:a2:95:
5e:ee:0f:44:04:e3:0f:87:5f:b2:fc:b4:a4:ee:4c:af:56:b6:
3e:cb:ea:5e:53:5a:d2:84:42:87:3b:d4:b0:a4:30:cd:4b:b5:
e8:00:c4:5d:50:85:45:4c:be:07:22:e6:48:80:b2:82:83:75:
15:a8:89:7e:34:06:2e:ad:05:dd:fe:18:73:92:e5:bf:2a:a1:
18:05:0d:2d:65:ad:4e:99:07:2a:66:de:d0:8c:8f:b0:fd:55:
c7:27:32:47:f4:47:81:bb:a9:fb:fe:da:bc:4a:da:7b:4d:e4:
31:46:01:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 08:59:57 2025 by rpki-client