Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/pcMp-pJB1IMGHADGMpHDexSJd9g.roa
File: pcMp-pJB1IMGHADGMpHDexSJd9g.roa (raw, json)
Hash identifier: phtHtUrEIaeSLNrHkyRFZ6x9CNdkoYX6Z8F8ZHkg3Sk=
Subject key identifier: A5:C3:29:FA:92:41:D4:83:06:1C:00:C6:32:91:C3:7B:14:89:77:D8
Certificate issuer: /CN=748e99a31f3582400ab5dfa777c60d16acaeddb3
Certificate serial: 01975DE94428886B51B2EE23019F267D6771
Authority key identifier: 74:8E:99:A3:1F:35:82:40:0A:B5:DF:A7:77:C6:0D:16:AC:AE:DD:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dI6Zox81gkAKtd-nd8YNFqyu3bM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/pcMp-pJB1IMGHADGMpHDexSJd9g.roa
Signing time: Wed 11 Jun 2025 07:34:17 +0000
ROA not before: Wed 11 Jun 2025 07:34:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41174
IP address blocks: 185.84.54.0/24 maxlen: 24
185.84.55.0/24 maxlen: 24
2a05:a140::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 11 Jun 2025 07:55:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:e9:44:28:88:6b:51:b2:ee:23:01:9f:26:7d:67:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=748e99a31f3582400ab5dfa777c60d16acaeddb3
Validity
Not Before: Jun 11 07:34:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5c329fa9241d483061c00c63291c37b148977d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8d:be:d6:97:84:4e:ef:93:43:03:09:21:15:
d0:89:bc:4c:d8:20:73:56:02:70:ff:c8:e0:44:97:
8b:bc:fb:ff:5a:d4:45:45:71:88:82:15:dd:45:19:
cc:ae:20:b0:a8:a9:62:56:2f:0d:74:bb:74:77:e2:
cc:b7:c5:ad:66:e1:8b:d0:4c:9f:b9:39:db:c6:24:
b1:11:ef:28:f9:d5:61:97:a7:c3:bf:9a:fd:9e:ba:
3f:ea:17:1a:77:ac:94:8b:65:57:7e:21:58:1d:85:
ad:08:50:78:dc:01:69:2c:16:34:96:62:d2:56:82:
3a:23:4f:87:d3:8b:13:a6:9f:e1:dc:69:34:ed:70:
2c:d2:d8:8a:7f:5f:05:5d:e7:42:cc:05:77:c5:8e:
78:b7:b5:d7:46:64:d6:da:2d:c7:5a:88:c3:1f:25:
b4:46:c7:90:e2:09:c2:b2:cb:ed:9e:38:72:3f:16:
69:1b:e3:60:62:80:7b:87:2a:ea:c5:6d:eb:5f:77:
50:d4:ce:be:8d:a5:0d:00:e9:69:58:01:cc:4c:85:
2e:94:db:7d:58:80:54:fe:98:14:bd:f9:25:7c:68:
0e:ac:56:1a:77:5a:c5:32:06:74:a9:1b:7f:9a:b6:
2d:35:dd:5d:32:09:ea:bb:75:b2:32:c9:c9:2a:2f:
01:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C3:29:FA:92:41:D4:83:06:1C:00:C6:32:91:C3:7B:14:89:77:D8
X509v3 Authority Key Identifier:
keyid:74:8E:99:A3:1F:35:82:40:0A:B5:DF:A7:77:C6:0D:16:AC:AE:DD:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dI6Zox81gkAKtd-nd8YNFqyu3bM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/pcMp-pJB1IMGHADGMpHDexSJd9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.54.0/23
IPv6:
2a05:a140::/29
Signature Algorithm: sha256WithRSAEncryption
06:ea:83:38:3f:61:f5:36:98:ea:d1:66:0f:7a:67:06:8e:4b:
a8:c0:af:c7:61:88:63:9d:71:70:c0:ac:d9:ae:a4:cb:7f:42:
4b:32:13:87:88:94:e4:14:2d:b3:60:86:60:07:cf:14:a5:f4:
eb:6e:59:8f:10:7d:bf:a1:ad:d2:b8:88:98:bf:b9:4e:c4:d9:
ff:45:ae:8c:80:91:34:5b:cb:5a:a3:63:a2:03:32:6c:38:a6:
bf:6b:a6:62:1e:33:9c:59:2e:e6:f3:bb:19:d9:f1:5b:2c:46:
4b:1c:0b:2c:c1:a8:06:39:1b:71:16:5d:67:4e:60:6d:53:00:
a8:5d:3a:ee:15:c5:bd:39:4a:de:8d:da:fb:5b:73:e3:f5:b4:
93:10:38:e4:19:e6:7f:6b:79:c9:1b:53:ed:59:ad:29:f5:53:
68:c7:c2:9d:c2:4f:63:53:51:4b:25:d1:19:0f:80:ae:ad:9d:
ce:51:61:d9:6d:ad:72:b6:ed:f8:95:ef:fc:f0:82:47:f1:e2:
a9:77:f8:fb:d8:df:08:b1:b0:31:14:d7:3f:91:a7:d2:02:10:
1b:b4:a3:0c:95:2b:8d:9d:23:2d:80:57:f6:82:80:9f:af:2f:
d4:f1:ab:53:55:43:89:c7:ed:6d:ea:84:53:cf:21:2c:f9:9b:
72:04:73:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:03:20 2025 by rpki-client