
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Z0mVIzzwihiMrChjaUfgLAAcrzk.roa
File: Z0mVIzzwihiMrChjaUfgLAAcrzk.roa (raw, json)
Hash identifier: T5T6lkDC3yCNJIhSu0bJj6TNlxuLUdjE+FT03IFD5Mo=
Subject key identifier: 67:49:95:23:3C:F0:8A:18:8C:AC:28:63:69:47:E0:2C:00:1C:AF:39
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01985C130E5601E5D81C259745C9F9C6757E
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Z0mVIzzwihiMrChjaUfgLAAcrzk.roa
Signing time: Wed 30 Jul 2025 16:03:29 +0000
ROA not before: Wed 30 Jul 2025 16:03:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3319
IP address blocks: 77.47.142.0/24 maxlen: 24
185.143.56.0/22 maxlen: 24
195.178.132.0/24 maxlen: 24
195.178.133.0/24 maxlen: 24
195.178.134.0/24 maxlen: 24
195.178.135.0/24 maxlen: 24
195.178.144.0/23 maxlen: 23
195.178.147.0/24 maxlen: 24
195.178.152.0/22 maxlen: 22
212.111.207.0/24 maxlen: 24
212.111.216.0/24 maxlen: 24
212.111.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Aug 2025 17:32:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5c:13:0e:56:01:e5:d8:1c:25:97:45:c9:f9:c6:75:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jul 30 16:03:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=674995233cf08a188cac28636947e02c001caf39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a0:23:9a:05:8a:6c:62:8e:ea:9d:e3:4d:61:
2a:c1:76:05:80:18:ac:90:55:8f:3f:22:c9:53:b6:
96:eb:a3:f5:f2:d9:cb:c6:a6:a7:b3:56:3d:e7:3a:
67:b0:8b:5f:f2:68:32:92:27:2d:e8:50:5d:4f:82:
ec:bb:14:41:79:7e:ab:5f:aa:40:21:11:58:c4:5f:
c9:30:9d:83:84:30:e6:54:96:44:d1:ae:51:da:ce:
55:da:80:2a:d1:1d:6e:34:f3:8c:b2:26:d1:62:ec:
36:f1:35:98:21:1b:4d:fc:62:68:34:86:e4:35:06:
b1:6a:06:e1:e6:7e:02:4a:09:f2:a6:75:fa:09:e8:
e4:b5:46:dc:b4:8b:42:f2:9b:92:27:e6:8d:24:9c:
2c:34:12:db:87:fd:b0:2c:c4:14:35:ed:49:a5:d0:
4e:27:28:34:7a:91:f0:df:29:70:c2:e2:b8:9e:b9:
6c:e8:ab:f4:9c:ae:d1:a0:30:d6:79:e6:3f:3a:da:
ab:ae:b5:dc:99:3a:35:5f:7b:61:36:d4:46:02:e2:
44:61:ca:ef:be:8b:5e:a2:ed:bb:5f:cb:c9:c2:d1:
ef:75:c2:54:db:16:8c:a4:5b:d1:2b:b3:27:c3:69:
9d:74:6e:bf:05:91:02:d6:d6:6f:a7:50:94:d6:8f:
3c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:49:95:23:3C:F0:8A:18:8C:AC:28:63:69:47:E0:2C:00:1C:AF:39
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Z0mVIzzwihiMrChjaUfgLAAcrzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.142.0/24
185.143.56.0/22
195.178.132.0/22
195.178.144.0/23
195.178.147.0/24
195.178.152.0/22
212.111.207.0/24
212.111.216.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:d2:23:f4:13:5c:4b:cb:52:de:d3:f4:a7:7b:13:fb:45:48:
31:c9:6a:64:90:fd:e2:f6:8f:0a:e0:62:5d:87:de:f7:98:5e:
fb:00:d7:5d:40:7e:92:ef:3f:7f:16:6d:d3:4c:80:95:d4:1d:
c0:b2:08:38:e3:ed:22:c1:88:e2:40:4a:ce:e7:db:51:2a:16:
72:6f:eb:a0:29:60:cc:99:50:e0:79:d6:fd:be:87:81:4f:7a:
78:e8:09:76:cc:4c:76:cb:3b:b4:71:de:4a:20:51:f1:c3:68:
f9:ac:60:af:bb:34:07:75:ac:bc:8e:91:15:87:92:96:4e:63:
2f:99:ce:45:39:0a:8f:d0:7d:7e:74:c5:0f:5d:13:00:16:d5:
df:ec:0a:d9:4f:60:c2:b2:31:ef:71:75:49:e7:60:43:ee:3a:
12:b7:27:67:8a:e3:3b:bf:a1:3b:64:96:b1:cc:10:d2:e1:99:
37:3d:0d:74:df:5f:e7:40:0c:00:8d:65:9f:3a:70:b2:1b:ef:
93:d1:53:11:c9:66:5f:5e:ad:c9:4f:4d:71:36:73:01:86:af:
12:1e:b5:ad:fc:9f:02:e6:de:5d:54:4e:34:05:07:ca:ed:ba:
6c:60:ac:9c:6c:82:ff:59:8e:dd:50:67:1b:d5:98:2f:9a:f6:
93:b1:6a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:05:36 2025 by rpki-client