Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/qJf502MDdojOMHsTRNwAHwwv8ow.roa
File: qJf502MDdojOMHsTRNwAHwwv8ow.roa (raw, json)
Hash identifier: O9czHXKudZT15xEEHIxP7R4k3pB5j//nrjI3ZPIcTk4=
Subject key identifier: A8:97:F9:D3:63:03:76:88:CE:30:7B:13:44:DC:00:1F:0C:2F:F2:8C
Certificate issuer: /CN=c39bc30a748960b227a1bf26216067edd05c1a7d
Certificate serial: 01942B990FB3B57276B1306126758305056C
Authority key identifier: C3:9B:C3:0A:74:89:60:B2:27:A1:BF:26:21:60:67:ED:D0:5C:1A:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5vDCnSJYLInob8mIWBn7dBcGn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/qJf502MDdojOMHsTRNwAHwwv8ow.roa
Signing time: Fri 03 Jan 2025 09:57:18 +0000
ROA not before: Fri 03 Jan 2025 09:57:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25145
IP address blocks: 185.115.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 Jan 2025 10:54:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2b:99:0f:b3:b5:72:76:b1:30:61:26:75:83:05:05:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c39bc30a748960b227a1bf26216067edd05c1a7d
Validity
Not Before: Jan 3 09:57:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a897f9d363037688ce307b1344dc001f0c2ff28c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ad:9e:01:70:43:57:dc:dc:53:ef:31:5e:98:
3c:4b:df:73:74:97:0c:99:6a:db:03:6c:2f:b1:e6:
eb:91:e9:91:64:f7:a8:33:d7:62:7c:9e:2f:03:c1:
58:63:04:a7:d8:82:07:62:3f:bf:c1:a3:85:b3:bc:
91:9f:a3:dd:19:f0:20:bd:27:ae:40:da:c7:26:ee:
95:2f:45:4d:71:d2:e1:1d:1f:03:82:fe:e9:35:50:
f6:8f:4c:a3:59:0d:2b:f1:12:6b:91:f0:03:6c:46:
40:0e:5e:71:88:4e:c4:d3:9c:87:60:ff:14:f3:23:
4c:02:f0:b2:b5:b8:d1:7b:b5:e9:cc:b0:f2:60:2e:
bf:bc:ff:6d:a6:91:d5:8d:f5:44:71:87:13:89:43:
e7:59:c8:79:9a:30:ef:cc:5d:b8:8b:42:df:70:d5:
0a:c7:ce:ba:e2:53:40:61:ce:2d:8a:f0:d6:36:d4:
57:42:3f:fb:32:e7:0d:de:74:9a:83:ee:10:6e:eb:
8f:74:16:e7:7e:ad:e3:25:be:19:5c:5c:c6:10:fe:
8c:df:67:4c:4a:dc:6a:f1:6c:e5:91:da:83:f6:53:
89:e8:c9:aa:c7:48:80:1e:28:1c:d5:d6:ec:e7:58:
2e:87:3d:6b:9d:8c:af:c3:f0:42:2b:60:2f:1f:6a:
53:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:97:F9:D3:63:03:76:88:CE:30:7B:13:44:DC:00:1F:0C:2F:F2:8C
X509v3 Authority Key Identifier:
keyid:C3:9B:C3:0A:74:89:60:B2:27:A1:BF:26:21:60:67:ED:D0:5C:1A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5vDCnSJYLInob8mIWBn7dBcGn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/qJf502MDdojOMHsTRNwAHwwv8ow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.209.0/24
Signature Algorithm: sha256WithRSAEncryption
89:7c:cb:a9:df:87:ba:5d:ca:d9:38:d3:8f:d4:01:08:6c:5a:
b6:a8:4b:c6:23:5d:8a:fb:19:f6:37:d7:9e:6d:b7:ec:b4:eb:
68:43:97:bc:d6:ba:70:4b:05:ce:63:5a:92:84:8f:88:9a:f7:
61:31:37:cd:5f:78:bb:ca:50:6e:73:0b:7b:f6:19:49:13:bb:
15:33:ce:20:55:2a:01:c0:69:80:66:14:b9:2a:33:26:ad:2e:
8e:57:9d:35:a6:06:14:92:2d:66:e4:fd:6f:d3:55:fa:fa:b7:
d8:2a:28:91:82:07:cb:b1:cf:38:ad:aa:e5:94:41:d1:74:17:
af:f0:61:80:b5:8d:e8:2f:f8:da:77:29:6e:8c:b5:b0:c5:d5:
fe:61:50:99:51:1c:1e:ae:9d:33:f1:4b:7d:8f:9a:90:3d:77:
c0:bf:e9:00:bc:4e:58:1d:f5:fa:0e:97:26:9b:55:45:c8:14:
21:a1:d0:47:a1:e2:86:6f:a4:01:11:a8:17:21:46:25:59:bd:
6c:d1:23:6c:00:d3:e8:87:51:0b:bc:a3:5c:99:b0:dc:14:56:
61:47:09:39:85:18:be:0e:63:81:d1:fa:0b:10:f8:70:9a:9a:
57:38:00:2b:11:ff:95:d5:1e:b7:19:9a:04:0f:01:7a:19:1e:
8b:28:e9:2e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQrmQ+ztXJ2sTBhJnWDBQVsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzOWJjMzBhNzQ4OTYwYjIyN2ExYmYyNjIxNjA2N2VkZDA1
YzFhN2QwHhcNMjUwMTAzMDk1NzE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODk3ZjlkMzYzMDM3Njg4Y2UzMDdiMTM0NGRjMDAxZjBjMmZmMjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwa2eAXBDV9zcU+8xXpg8S99zdJcM
mWrbA2wvsebrkemRZPeoM9difJ4vA8FYYwSn2IIHYj+/waOFs7yRn6PdGfAgvSeu
QNrHJu6VL0VNcdLhHR8Dgv7pNVD2j0yjWQ0r8RJrkfADbEZADl5xiE7E05yHYP8U
8yNMAvCytbjRe7XpzLDyYC6/vP9tppHVjfVEcYcTiUPnWch5mjDvzF24i0LfcNUK
x8664lNAYc4tivDWNtRXQj/7MucN3nSag+4QbuuPdBbnfq3jJb4ZXFzGEP6M32dM
Stxq8WzlkdqD9lOJ6Mmqx0iAHigc1dbs51guhz1rnYyvw/BCK2AvH2pTSQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKiX+dNjA3aIzjB7E0TcAB8ML/KMMB8GA1UdIwQY
MBaAFMObwwp0iWCyJ6G/JiFgZ+3QXBp9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzV2RENuU0pZTElub2I4bUlXQm43ZEJjR24wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC80OTljNDEtOTQ1ZS00ZGEzLWE0OTgt
OTIwOWY3YjdlZjgxLzEvcUpmNTAyTURkb2pPTUhzVFJOd0FId3d2OG93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC80OTljNDEtOTQ1ZS00ZGEzLWE0OTgtOTIwOWY3YjdlZjgx
LzEvdzV2RENuU0pZTElub2I4bUlXQm43ZEJjR24wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXPRMA0G
CSqGSIb3DQEBCwUAA4IBAQCJfMup34e6XcrZONOP1AEIbFq2qEvGI12K+xn2N9ee
bbfstOtoQ5e81rpwSwXOY1qShI+ImvdhMTfNX3i7ylBucwt79hlJE7sVM84gVSoB
wGmAZhS5KjMmrS6OV501pgYUki1m5P1v01X6+rfYKiiRggfLsc84rarllEHRdBev
8GGAtY3oL/jadylujLWwxdX+YVCZURwerp0z8Ut9j5qQPXfAv+kAvE5YHfX6Dpcm
m1VFyBQhodBHoeKGb6QBEagXIUYlWb1s0SNsANPoh1ELvKNcmbDcFFZhRwk5hRi+
DmOB0foLEPhwmppXOAArEf+V1R63GZoEDwF6GR6LKOku
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:14:43 2025 by rpki-client