Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/dpzhc5Z9rggV4pQrKWEfZW_f5Rc.roa
File: dpzhc5Z9rggV4pQrKWEfZW_f5Rc.roa (raw, json)
Hash identifier: 7pO59tOJYcZaJL9LdKGlX08SLnkvu5E1mONLDPbCqvU=
Subject key identifier: 76:9C:E1:73:96:7D:AE:08:15:E2:94:2B:29:61:1F:65:6F:DF:E5:17
Certificate issuer: /CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Certificate serial: 01975DD175D2FF93BB34531AA203E44E05C4
Authority key identifier: 54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/dpzhc5Z9rggV4pQrKWEfZW_f5Rc.roa
Signing time: Wed 11 Jun 2025 07:08:17 +0000
ROA not before: Wed 11 Jun 2025 07:08:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201684
IP address blocks: 87.121.168.0/24 maxlen: 24
87.121.169.0/24 maxlen: 24
87.121.170.0/24 maxlen: 24
87.121.171.0/24 maxlen: 24
87.121.172.0/24 maxlen: 24
87.121.173.0/24 maxlen: 24
87.121.174.0/24 maxlen: 24
87.121.175.0/24 maxlen: 24
185.64.24.0/24 maxlen: 24
185.64.25.0/24 maxlen: 24
185.64.26.0/24 maxlen: 24
185.64.27.0/24 maxlen: 24
193.203.254.0/24 maxlen: 24
2a03:11a0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 12 Jun 2025 06:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:d1:75:d2:ff:93:bb:34:53:1a:a2:03:e4:4e:05:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Validity
Not Before: Jun 11 07:08:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=769ce173967dae0815e2942b29611f656fdfe517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:87:f5:e1:a9:e6:38:7d:92:e8:06:59:a0:27:
bd:56:71:00:63:9d:c1:0b:b6:08:8a:8b:b0:c8:aa:
35:c1:65:a1:2a:cb:d4:61:69:e8:5f:9b:ca:b2:04:
bf:f6:24:49:1c:ee:45:56:1a:bc:0a:ff:fb:38:c9:
83:b1:e1:9e:23:a2:98:87:a2:6c:d4:9c:9a:1d:67:
f8:70:c1:7c:a1:6a:7d:23:eb:ce:ab:c5:8c:37:e4:
be:ed:14:bf:aa:cd:9a:67:06:d7:46:36:70:ab:00:
8c:8d:fc:f5:74:6b:91:1b:11:47:a4:41:dd:2e:98:
80:73:ae:4f:97:73:f3:6e:8c:94:81:cd:18:e5:2f:
13:fd:b7:9c:e6:b0:86:79:39:e6:3e:27:c4:76:53:
71:c5:85:9f:eb:f0:c2:27:a8:1e:8f:19:54:61:54:
c0:07:39:fb:b4:27:f0:ae:7b:69:4e:13:20:8c:e6:
00:e9:59:fe:e3:8c:53:93:76:2e:77:30:56:36:9c:
b1:b9:50:18:a9:bb:62:be:2b:48:a3:11:dc:56:42:
30:2b:55:34:ef:88:be:c6:a2:aa:75:5b:bf:72:c3:
08:5b:43:52:62:c6:70:b0:03:a1:be:c6:30:82:0d:
d0:26:39:71:60:fb:9d:48:b9:44:b0:0a:6b:de:6f:
5b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9C:E1:73:96:7D:AE:08:15:E2:94:2B:29:61:1F:65:6F:DF:E5:17
X509v3 Authority Key Identifier:
keyid:54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/dpzhc5Z9rggV4pQrKWEfZW_f5Rc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.168.0/21
185.64.24.0/22
193.203.254.0/24
IPv6:
2a03:11a0:1::/48
Signature Algorithm: sha256WithRSAEncryption
77:59:2d:92:fa:50:d0:b7:2a:c3:11:0d:d3:81:00:5e:9e:8c:
5c:cc:c8:b1:c9:72:9d:62:00:7d:b2:d9:87:fb:5e:0d:e3:5e:
7a:01:04:5e:17:86:27:4d:fd:bf:f6:11:55:54:25:88:82:42:
7b:aa:e2:19:1a:7e:aa:56:d6:53:8a:4e:86:29:8b:63:67:62:
89:c9:37:86:aa:bc:84:aa:ea:39:ba:5b:aa:06:66:29:85:dd:
eb:a9:ef:c4:74:5b:36:b5:9e:5c:c4:57:76:d6:c7:12:e2:9d:
a3:20:96:1e:78:41:b9:84:2d:3a:97:f6:db:df:9e:36:a3:eb:
c9:25:15:7f:31:e7:f4:09:14:3b:82:19:a6:f7:f0:41:9a:9f:
9c:76:59:19:35:ec:a1:fa:5e:b4:da:a6:d8:de:ae:5f:e5:86:
67:bd:27:a6:98:b1:54:a6:08:1a:57:5f:f3:37:1d:24:d6:ff:
0e:b8:aa:f0:bc:d9:d2:7c:23:db:5a:3b:9c:1e:30:4d:45:a5:
16:31:ca:29:f8:0b:1e:f7:ef:73:7f:86:a5:8a:63:6d:1a:9a:
81:7c:88:ba:8a:a8:ca:03:40:f4:59:25:3a:08:4f:77:93:36:
a6:e3:f4:92:b3:7e:25:f8:fb:81:87:08:45:fd:57:0c:e8:01:
e3:b2:07:e9
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAZdd0XXS/5O7NFMaogPkTgXEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YTMxYWIwMzNjZmQyZGVlNjg1MmZhOWQ4YmY1YTRhMGUz
NTI0MTQwHhcNMjUwNjExMDcwODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjljZTE3Mzk2N2RhZTA4MTVlMjk0MmIyOTYxMWY2NTZmZGZlNTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIf14anmOH2S6AZZoCe9VnEAY53B
C7YIiouwyKo1wWWhKsvUYWnoX5vKsgS/9iRJHO5FVhq8Cv/7OMmDseGeI6KYh6Js
1JyaHWf4cMF8oWp9I+vOq8WMN+S+7RS/qs2aZwbXRjZwqwCMjfz1dGuRGxFHpEHd
LpiAc65Pl3PzboyUgc0Y5S8T/bec5rCGeTnmPifEdlNxxYWf6/DCJ6gejxlUYVTA
Bzn7tCfwrntpThMgjOYA6Vn+44xTk3YudzBWNpyxuVAYqbtivitIoxHcVkIwK1U0
74i+xqKqdVu/csMIW0NSYsZwsAOhvsYwgg3QJjlxYPudSLlEsApr3m9b+QIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFHac4XOWfa4IFeKUKylhH2Vv3+UXMB8GA1UdIwQY
MBaAFFSjGrAzz9Le5oUvqdi/WkoONSQUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVktNYXNEUFAwdDdtaFMtcDJMOWFTZzQxSkJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wODAzNjEtMWJiZS00NzYzLTgwMGIt
NjE5YzI2MTk0MTY4LzEvZHB6aGM1WjlyZ2dWNHBRcktXRWZaV19mNVJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8wODAzNjEtMWJiZS00NzYzLTgwMGItNjE5YzI2MTk0MTY4
LzEvVktNYXNEUFAwdDdtaFMtcDJMOWFTZzQxSkJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQDV3moAwQC
uUAYAwQAwcv+MA8EAgACMAkDBwAqAxGgAAEwDQYJKoZIhvcNAQELBQADggEBAHdZ
LZL6UNC3KsMRDdOBAF6ejFzMyLHJcp1iAH2y2Yf7Xg3jXnoBBF4XhidN/b/2EVVU
JYiCQnuq4hkafqpW1lOKToYpi2NnYonJN4aqvISq6jm6W6oGZimF3eup78R0Wza1
nlzEV3bWxxLinaMglh54QbmELTqX9tvfnjaj68klFX8x5/QJFDuCGab38EGan5x2
WRk17KH6XrTaptjerl/lhme9J6aYsVSmCBpXX/M3HSTW/w64qvC82dJ8I9taO5we
ME1FpRYxyin4Cx7373N/hqWKY20amoF8iLqKqMoDQPRZJToIT3eTNqbj9JKzfiX4
+4GHCEX9VwzoAeOyB+k=
-----END CERTIFICATE-----
Generated at Tue Jun 17 11:44:36 2025 by rpki-client