Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/rmTiiYGqIEI1hHhpgay2kHsPkFQ.roa
File: rmTiiYGqIEI1hHhpgay2kHsPkFQ.roa (raw, json)
Hash identifier: DlV/FHoA7MoAnanD4W9U9mlL2gItyNLucUU+IQ6rEAU=
Subject key identifier: AE:64:E2:89:81:AA:20:42:35:84:78:69:81:AC:B6:90:7B:0F:90:54
Certificate issuer: /CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Certificate serial: 0196A59335D8C76AFA2C72DE094C7419FDD4
Authority key identifier: 58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/rmTiiYGqIEI1hHhpgay2kHsPkFQ.roa
Signing time: Tue 06 May 2025 12:30:10 +0000
ROA not before: Tue 06 May 2025 12:30:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15576
IP address blocks: 77.95.120.0/21 maxlen: 21
85.118.216.0/21 maxlen: 21
185.63.150.0/23 maxlen: 23
212.103.64.0/19 maxlen: 19
212.103.64.0/24 maxlen: 24
212.103.65.0/24 maxlen: 24
217.11.208.0/20 maxlen: 20
217.146.160.0/20 maxlen: 20
217.146.165.0/24 maxlen: 24
2a00:c38::/32 maxlen: 32
2a00:c38:1a5::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 May 2025 14:15:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:93:35:d8:c7:6a:fa:2c:72:de:09:4c:74:19:fd:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Validity
Not Before: May 6 12:30:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae64e28981aa20423584786981acb6907b0f9054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:98:f9:87:f0:ce:e2:03:87:62:2f:f9:da:6a:
88:6a:b2:86:d6:f7:dd:95:d4:a2:7a:42:fd:e8:97:
9c:39:6d:97:14:69:22:e3:79:33:56:c7:19:50:8f:
50:73:69:69:a4:0d:2a:0c:23:ac:df:22:76:90:95:
cb:16:6a:2a:21:e8:eb:61:2f:05:10:7f:0c:a1:0e:
d0:78:73:4a:f7:aa:fd:59:73:51:a5:23:b7:38:94:
00:c4:c1:ce:ed:77:e3:6e:7a:82:b0:0b:c2:ae:2e:
71:c3:99:21:c8:89:c0:ff:33:48:d9:7b:3d:dd:be:
4a:23:b5:33:49:05:85:32:45:d7:99:a9:f7:77:b0:
a9:6a:6b:e6:3d:25:f6:6a:14:bd:9e:b6:f4:71:3c:
6d:5f:c5:fa:c7:7b:1e:f2:28:e9:de:e6:b0:e2:5e:
b3:81:22:c9:3c:cc:27:f2:72:c2:6e:e8:1b:9b:6d:
84:84:bb:b0:4a:c3:3d:bd:06:13:39:cc:79:b9:e5:
ef:1b:c4:02:1d:b9:28:7a:7f:8b:7e:82:50:95:8e:
3c:e5:4d:18:7f:bd:80:c8:27:01:c4:bb:73:d2:13:
55:f5:61:1d:06:c7:68:81:de:aa:2e:9c:54:11:ee:
b5:3a:f4:47:a1:9a:02:07:e5:b0:d7:3e:00:6c:14:
e2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:64:E2:89:81:AA:20:42:35:84:78:69:81:AC:B6:90:7B:0F:90:54
X509v3 Authority Key Identifier:
keyid:58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/rmTiiYGqIEI1hHhpgay2kHsPkFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.120.0/21
85.118.216.0/21
185.63.150.0/23
212.103.64.0/19
217.11.208.0/20
217.146.160.0/20
IPv6:
2a00:c38::/32
Signature Algorithm: sha256WithRSAEncryption
29:50:df:44:a2:6b:b8:a9:35:cc:88:ee:8d:58:93:74:23:c5:
a3:f1:b2:0e:7f:66:0a:7a:ec:09:42:02:b2:70:e5:27:15:f7:
41:0a:61:3a:b9:6b:13:96:30:c9:b3:68:8f:8a:4b:78:4c:d4:
2e:ae:6e:79:63:70:02:a9:cb:7b:aa:16:5a:bc:46:3c:71:97:
3b:42:fc:ca:be:f4:90:7b:54:71:6e:0a:e0:49:93:60:ef:e0:
57:28:a5:de:4f:a4:c4:a1:76:eb:ed:87:ff:2a:fb:a1:dc:a6:
40:5f:ac:64:a5:53:6a:7f:08:32:06:a8:27:a2:c6:d5:1f:92:
6e:7d:3a:73:dc:ba:07:15:ef:61:ed:dc:ca:fd:40:ee:3c:e4:
8f:9a:b1:1f:ba:2d:4e:7a:0a:5e:6a:5b:e9:38:26:1a:79:5b:
78:bf:64:dc:52:d4:cb:a4:90:6c:45:e6:30:a0:9b:e0:59:c9:
78:4d:a8:62:a3:b1:47:19:55:71:ae:88:e3:e4:46:16:3d:0b:
11:8a:fb:26:6d:16:57:ef:28:8c:b3:91:8e:6f:27:dd:1a:79:
cc:81:d9:3c:08:46:fb:61:97:43:54:9d:d5:a9:d5:4a:b1:fc:
fa:c3:d6:90:b9:e9:1a:cf:47:9d:85:68:24:53:77:0a:91:4d:
84:ba:04:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:26:11 2025 by rpki-client