Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/1M4vYsE6xXCnqMTDhdcvo1kD6Cw.roa
File: 1M4vYsE6xXCnqMTDhdcvo1kD6Cw.roa (raw, json)
Hash identifier: K8zjRV1Qxq+Lm9PWBevEWK53Wj8SE2dM2MxDDcEtQDA=
Subject key identifier: D4:CE:2F:62:C1:3A:C5:70:A7:A8:C4:C3:85:D7:2F:A3:59:03:E8:2C
Certificate issuer: /CN=f0c113413d0df5b8fa069011eeb109f067b5579a
Certificate serial: 01959482B8FECAD85013BB57D86E07CA3AAD
Authority key identifier: F0:C1:13:41:3D:0D:F5:B8:FA:06:90:11:EE:B1:09:F0:67:B5:57:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/1M4vYsE6xXCnqMTDhdcvo1kD6Cw.roa
Signing time: Fri 14 Mar 2025 11:55:49 +0000
ROA not before: Fri 14 Mar 2025 11:55:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58172
IP address blocks: 85.116.178.0/24 maxlen: 24
85.116.183.0/24 maxlen: 24
85.116.186.0/23 maxlen: 23
85.116.188.0/23 maxlen: 23
91.132.148.0/24 maxlen: 24
91.132.149.0/24 maxlen: 24
91.132.150.0/24 maxlen: 24
91.132.151.0/24 maxlen: 24
91.212.93.0/24 maxlen: 24
91.239.101.0/24 maxlen: 24
128.127.96.0/24 maxlen: 24
128.127.97.0/24 maxlen: 24
128.127.98.0/24 maxlen: 24
128.127.99.0/24 maxlen: 24
128.127.100.0/24 maxlen: 24
128.127.101.0/24 maxlen: 24
128.127.102.0/24 maxlen: 24
128.127.103.0/24 maxlen: 24
178.20.176.0/24 maxlen: 24
178.20.177.0/24 maxlen: 24
178.20.178.0/24 maxlen: 24
178.20.179.0/24 maxlen: 24
178.20.180.0/24 maxlen: 24
178.20.181.0/24 maxlen: 24
178.20.182.0/24 maxlen: 24
178.20.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Mar 2025 12:04:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:94:82:b8:fe:ca:d8:50:13:bb:57:d8:6e:07:ca:3a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c113413d0df5b8fa069011eeb109f067b5579a
Validity
Not Before: Mar 14 11:55:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4ce2f62c13ac570a7a8c4c385d72fa35903e82c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:52:57:aa:26:f9:4b:25:72:91:16:9d:d2:b9:
56:f3:53:06:db:8e:c9:5f:1e:85:73:5b:a8:bf:6a:
76:96:56:c9:d7:33:d1:1b:25:b0:20:14:33:3b:f6:
ce:9d:35:48:04:3f:75:01:11:87:d9:63:0e:e2:a3:
c8:36:6f:6c:60:55:10:94:61:c3:9f:a9:05:be:b4:
1f:48:02:e6:f0:b4:0c:af:92:ec:9f:63:1f:ac:59:
b3:c9:30:5f:dc:e2:0e:4c:6b:fa:b9:57:a3:bb:78:
e1:e0:00:c9:88:11:82:5b:49:90:66:8d:d9:1d:9d:
fd:ff:37:93:ad:59:b8:b4:9d:0e:04:3f:2e:0d:17:
62:7a:e9:25:c3:66:2b:ba:48:f1:24:9d:0b:36:49:
0d:97:46:7a:79:98:9a:dd:59:dc:f0:ca:1e:03:db:
bc:57:89:9b:e1:eb:5b:49:06:6b:15:64:09:be:14:
31:31:66:a8:cd:d1:aa:fa:24:b5:91:8b:cf:af:61:
3c:f6:fb:2f:e4:45:94:5d:dd:1f:81:86:b1:3c:31:
89:30:b2:96:e9:90:89:98:0c:f8:de:98:e5:d0:7e:
6e:bb:a0:9c:27:64:46:aa:d1:d9:e9:31:e7:41:3f:
a5:df:5c:13:b8:70:7e:b8:2b:b3:1b:bb:aa:67:9b:
7d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CE:2F:62:C1:3A:C5:70:A7:A8:C4:C3:85:D7:2F:A3:59:03:E8:2C
X509v3 Authority Key Identifier:
keyid:F0:C1:13:41:3D:0D:F5:B8:FA:06:90:11:EE:B1:09:F0:67:B5:57:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/1M4vYsE6xXCnqMTDhdcvo1kD6Cw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.116.178.0/24
85.116.183.0/24
85.116.186.0-85.116.189.255
91.132.148.0/22
91.212.93.0/24
91.239.101.0/24
128.127.96.0/21
178.20.176.0/21
Signature Algorithm: sha256WithRSAEncryption
1b:5c:3a:52:df:aa:f4:a5:91:09:38:fe:33:5e:d2:b9:1c:9b:
b9:0e:eb:15:ff:cd:af:56:38:29:83:33:6f:4e:f3:09:29:0d:
d1:ea:e7:16:a7:b7:ca:f4:4b:f1:1f:e3:45:8a:04:63:ba:97:
af:06:e2:56:f1:65:36:73:5d:d6:dc:52:88:0f:d5:8d:de:5e:
49:67:0c:16:df:02:bc:1c:02:27:5c:01:3e:2e:89:6a:e7:c6:
e3:cf:17:23:e9:03:20:77:85:2d:46:cf:f0:a7:f9:3a:42:a8:
f5:1b:bf:22:5d:99:65:41:f4:90:08:fa:8a:0f:d3:1c:f3:e2:
9b:a6:b6:fe:e7:1f:c3:79:b3:bf:23:f4:ab:e8:65:b9:4b:09:
d8:c8:0e:82:d2:9d:75:3a:8b:1a:8c:83:bb:b2:49:1e:47:91:
31:ee:08:6e:93:99:29:ef:fe:07:40:28:4d:1a:17:73:f8:aa:
4b:de:52:03:fb:94:54:27:94:f0:6f:9e:ee:11:38:8b:5b:ba:
dd:5d:01:ea:c0:ec:f9:3a:e8:49:31:d1:21:b4:19:4a:0d:f5:
d8:8e:aa:d1:bd:a2:dc:29:1c:fa:23:c4:21:ba:7b:94:3a:7f:
68:bc:7d:c4:0f:3b:d6:d9:52:e0:de:0b:88:b3:44:54:46:2f:
72:c6:b3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 09:38:42 2025 by rpki-client