Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/I68WZ-i4pcoRrKkge0vM1pUjB1c.roa
File: I68WZ-i4pcoRrKkge0vM1pUjB1c.roa (raw, json)
Hash identifier: Uw3xl4XaYSzu+nqttud0x51/m/Q41I4VTs+Ch6J4rgo=
Subject key identifier: 23:AF:16:67:E8:B8:A5:CA:11:AC:A9:20:7B:4B:CC:D6:95:23:07:57
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 019759497DA4BADE23E05F1241527C735140
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/I68WZ-i4pcoRrKkge0vM1pUjB1c.roa
Signing time: Tue 10 Jun 2025 10:01:17 +0000
ROA not before: Tue 10 Jun 2025 10:01:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 79.132.180.0/24 maxlen: 24
79.132.183.0/24 maxlen: 24
79.132.188.0/24 maxlen: 24
79.132.190.0/24 maxlen: 24
88.223.154.0/23 maxlen: 24
88.223.176.0/20 maxlen: 24
88.223.180.0/24 maxlen: 24
88.223.183.0/24 maxlen: 24
88.223.189.0/24 maxlen: 24
88.223.190.0/24 maxlen: 24
88.223.191.0/24 maxlen: 24
88.223.208.0/24 maxlen: 24
88.223.218.0/24 maxlen: 24
88.223.224.0/19 maxlen: 24
95.173.40.0/21 maxlen: 21
213.164.96.0/20 maxlen: 24
213.164.98.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Jun 2025 12:29:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:49:7d:a4:ba:de:23:e0:5f:12:41:52:7c:73:51:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Jun 10 10:01:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23af1667e8b8a5ca11aca9207b4bccd695230757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:db:db:f8:29:4a:80:e3:9d:8e:cd:d0:0a:2a:
43:c0:64:57:b7:b0:bf:6f:75:2a:c4:7a:c9:c0:bb:
6d:a7:ef:7d:17:c4:f9:66:8f:7f:2f:e8:0e:22:21:
21:69:9a:67:e3:ca:25:f1:0f:8c:c7:d1:36:39:c5:
0d:54:14:9b:0c:1b:72:ea:3a:25:c2:dc:53:94:c0:
99:3a:7b:58:2f:28:32:b5:d0:7d:b3:71:5d:47:23:
e3:a9:aa:81:f3:f1:1a:c3:8e:e4:d8:c2:b6:95:b1:
d2:a6:1c:6c:9b:2c:86:5a:a3:ba:70:ad:05:c3:36:
1b:5e:f2:ad:3c:5f:05:92:85:94:12:5c:54:a9:76:
82:0c:aa:4c:00:4c:b8:52:64:bc:d8:f9:88:f8:a5:
8f:1f:a8:1d:d9:d8:29:75:87:fa:b1:3a:06:6d:1d:
80:f5:59:b3:eb:b7:a5:37:8f:9e:b6:2b:6d:96:98:
1d:3c:59:e0:47:79:5c:94:4f:5c:6a:14:cf:65:d9:
74:1e:49:db:3e:78:9c:f6:6f:73:93:d8:a2:d1:d1:
b3:c3:bd:95:b1:34:b8:e0:dc:ce:32:9b:ef:09:74:
46:14:d5:9b:8b:4d:3c:9e:70:48:3e:36:38:98:a0:
25:f5:f8:58:2d:f7:a6:ce:e9:87:32:ec:bb:f2:c3:
c7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AF:16:67:E8:B8:A5:CA:11:AC:A9:20:7B:4B:CC:D6:95:23:07:57
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/I68WZ-i4pcoRrKkge0vM1pUjB1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.180.0/24
79.132.183.0/24
79.132.188.0/24
79.132.190.0/24
88.223.154.0/23
88.223.176.0/20
88.223.208.0/24
88.223.218.0/24
88.223.224.0/19
95.173.40.0/21
213.164.96.0/20
Signature Algorithm: sha256WithRSAEncryption
2e:0f:7b:bb:6f:22:7f:cc:95:06:c7:55:46:de:08:af:7d:71:
2f:58:f8:3e:c9:46:55:a6:db:5f:b7:3b:95:84:77:3c:14:62:
f9:e6:0b:5f:06:24:59:6f:c9:27:03:7d:0f:4b:8e:bf:46:a2:
fe:12:86:2c:31:5c:09:02:b0:c1:b4:63:c8:0a:08:91:4b:2d:
0a:fe:5d:0d:15:a0:3a:4f:74:eb:16:61:2f:a1:ff:8a:7b:f2:
05:1f:62:02:4d:31:14:cc:20:8c:7f:32:33:57:61:ba:b1:90:
18:44:54:fe:3a:03:12:55:27:86:d4:94:4e:e8:18:99:f2:52:
a1:9b:e5:47:1d:ed:66:71:bf:0b:ac:c5:7f:32:d5:53:bf:65:
93:4c:5b:84:19:5f:22:c6:e3:44:bf:4f:21:03:0d:ef:28:55:
bc:12:43:de:33:49:9c:30:fc:6c:53:f2:97:ed:28:fd:8a:d6:
c0:39:77:c1:5b:7b:eb:c6:b6:61:52:fe:1d:28:db:b2:9d:bd:
bb:9c:70:9c:24:17:f2:d1:93:fa:b4:1f:45:58:56:c9:13:0a:
be:cf:21:b3:1f:e0:41:5c:6f:7c:b7:65:62:12:9c:b7:56:8c:
18:e4:b1:77:01:d5:91:50:3a:bc:b5:80:57:c3:70:77:0d:2c:
22:1e:54:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:18:52 2025 by rpki-client