Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/PJ1kYyqqCzbX3dMUrwL3skVrY7M.roa
File: PJ1kYyqqCzbX3dMUrwL3skVrY7M.roa (raw, json)
Hash identifier: PmxmmYIiG4fTjsFNgVpFp5PEWNH8itL/AjNRtPQqvH0=
Subject key identifier: 3C:9D:64:63:2A:AA:0B:36:D7:DD:D3:14:AF:02:F7:B2:45:6B:63:B3
Certificate issuer: /CN=f53fd9e69d7d1f2ddc267091626190ceaa85cfc2
Certificate serial: 01954E74EA7C17E996F83DCCFA7AC0FD4900
Authority key identifier: F5:3F:D9:E6:9D:7D:1F:2D:DC:26:70:91:62:61:90:CE:AA:85:CF:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/PJ1kYyqqCzbX3dMUrwL3skVrY7M.roa
Signing time: Fri 28 Feb 2025 21:27:19 +0000
ROA not before: Fri 28 Feb 2025 21:27:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212150
IP address blocks: 185.115.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Mar 2025 15:52:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4e:74:ea:7c:17:e9:96:f8:3d:cc:fa:7a:c0:fd:49:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f53fd9e69d7d1f2ddc267091626190ceaa85cfc2
Validity
Not Before: Feb 28 21:27:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c9d64632aaa0b36d7ddd314af02f7b2456b63b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d6:3e:fd:12:58:02:75:a2:5c:3f:58:4a:76:
40:e4:6c:31:9c:fd:54:9a:64:55:43:6b:c5:c3:4e:
0d:6b:8a:02:7b:34:51:22:83:44:f6:2e:bd:ba:2a:
ea:d8:d2:28:b2:00:97:f9:f7:43:38:3e:fa:21:f6:
fa:1b:50:12:ac:09:2c:c6:00:2a:4c:4b:dc:c8:11:
44:18:ea:b0:0f:cd:b3:e7:f8:cd:53:33:63:b0:d8:
52:ad:2b:6a:4d:6d:5f:69:e2:12:49:17:34:62:82:
08:a3:fd:0b:05:a8:f0:da:4b:88:56:dd:73:b3:9b:
54:c8:09:f1:cc:57:1b:4c:71:e5:09:c3:04:7a:35:
b9:1b:03:98:ea:40:36:34:fb:05:92:86:19:6b:49:
27:31:07:a1:c4:56:00:75:15:94:82:81:f2:86:ee:
f5:06:ea:1c:c0:8a:58:03:52:1e:8e:05:cc:16:bf:
fd:0e:20:49:84:ca:bd:5d:3d:e2:7a:44:08:35:3f:
e1:55:b4:85:7e:3c:43:0d:3f:47:85:44:81:57:e3:
77:64:6a:e4:69:e5:1a:76:40:99:79:e1:8a:7f:c2:
fa:44:aa:5b:65:4c:9e:d5:bc:75:c0:59:af:3e:2f:
7c:11:2e:97:7c:3c:a5:5f:b9:4f:2f:6a:78:f3:ea:
31:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9D:64:63:2A:AA:0B:36:D7:DD:D3:14:AF:02:F7:B2:45:6B:63:B3
X509v3 Authority Key Identifier:
keyid:F5:3F:D9:E6:9D:7D:1F:2D:DC:26:70:91:62:61:90:CE:AA:85:CF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/PJ1kYyqqCzbX3dMUrwL3skVrY7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.162.0/24
Signature Algorithm: sha256WithRSAEncryption
55:ea:a0:89:79:be:c0:50:07:23:03:e2:28:5a:3e:f2:fe:39:
24:69:3c:84:21:4c:a6:76:71:e8:33:93:a1:23:99:c5:12:de:
cd:d5:06:79:d9:ac:7a:69:1d:6b:90:88:4b:87:b5:2b:b4:f6:
82:87:8a:3a:8f:c5:f1:59:85:4c:a2:89:7e:6a:1d:29:fe:4b:
19:0f:6c:d4:8e:5a:1c:c6:ed:27:ea:ec:6a:f3:43:e0:c0:6c:
d5:4e:28:ca:5e:16:0a:5a:fc:ef:25:83:4c:fd:8a:55:16:6b:
c7:09:23:55:46:94:26:f3:4e:fa:23:39:c6:20:3d:83:64:a4:
19:12:df:2a:31:8f:dd:92:d6:98:4a:d3:46:5c:6f:bb:eb:39:
fd:53:3c:23:ea:63:2c:dd:46:fe:32:3d:14:32:75:ae:23:52:
22:b6:d7:03:d7:c9:75:4d:5e:db:4c:ea:43:a7:04:cd:82:3a:
17:33:7b:b9:c0:3c:cb:f8:25:8b:ce:4e:61:aa:ce:83:96:5b:
8a:79:09:6c:78:98:3e:62:88:38:df:00:5d:86:49:73:fe:a7:
06:15:35:17:5a:68:55:01:5d:7a:ef:55:95:d6:db:07:c4:f1:
8c:c7:92:a0:60:00:80:30:6f:7c:46:cf:0f:0b:62:de:73:4d:
42:be:ae:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZVOdOp8F+mW+D3M+nrA/UkAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1M2ZkOWU2OWQ3ZDFmMmRkYzI2NzA5MTYyNjE5MGNlYWE4
NWNmYzIwHhcNMjUwMjI4MjEyNzE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzlkNjQ2MzJhYWEwYjM2ZDdkZGQzMTRhZjAyZjdiMjQ1NmI2M2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9Y+/RJYAnWiXD9YSnZA5GwxnP1U
mmRVQ2vFw04Na4oCezRRIoNE9i69uirq2NIosgCX+fdDOD76Ifb6G1ASrAksxgAq
TEvcyBFEGOqwD82z5/jNUzNjsNhSrStqTW1faeISSRc0YoIIo/0LBajw2kuIVt1z
s5tUyAnxzFcbTHHlCcMEejW5GwOY6kA2NPsFkoYZa0knMQehxFYAdRWUgoHyhu71
BuocwIpYA1IejgXMFr/9DiBJhMq9XT3iekQINT/hVbSFfjxDDT9HhUSBV+N3ZGrk
aeUadkCZeeGKf8L6RKpbZUye1bx1wFmvPi98ES6XfDylX7lPL2p48+oxAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDydZGMqqgs2193TFK8C97JFa2OzMB8GA1UdIwQY
MBaAFPU/2eadfR8t3CZwkWJhkM6qhc/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVRfWjVwMTlIeTNjSm5DUlltR1F6cXFGejhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9hN2RiNGMtYzlmNi00ZTBjLWFhOTct
NGM4OTgwYjU4MTI2LzEvUEoxa1l5cXFDemJYM2RNVXJ3TDNza1ZyWTdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9hN2RiNGMtYzlmNi00ZTBjLWFhOTctNGM4OTgwYjU4MTI2
LzEvOVRfWjVwMTlIeTNjSm5DUlltR1F6cXFGejhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXOiMA0G
CSqGSIb3DQEBCwUAA4IBAQBV6qCJeb7AUAcjA+IoWj7y/jkkaTyEIUymdnHoM5Oh
I5nFEt7N1QZ52ax6aR1rkIhLh7UrtPaCh4o6j8XxWYVMool+ah0p/ksZD2zUjloc
xu0n6uxq80PgwGzVTijKXhYKWvzvJYNM/YpVFmvHCSNVRpQm8076IznGID2DZKQZ
Et8qMY/dktaYStNGXG+76zn9Uzwj6mMs3Ub+Mj0UMnWuI1IittcD18l1TV7bTOpD
pwTNgjoXM3u5wDzL+CWLzk5hqs6DlluKeQlseJg+Yog43wBdhklz/qcGFTUXWmhV
AV1671WV1tsHxPGMx5KgYACAMG98Rs8PC2Lec01Cvq4R
-----END CERTIFICATE-----
Generated at Wed Apr 30 05:34:22 2025 by rpki-client