Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/Pmr_8UktqIjoqCnubP55h70LF9U.roa
File: Pmr_8UktqIjoqCnubP55h70LF9U.roa (raw, json)
Hash identifier: qTmM/J4g96aP+DlG5xodBWK9qTsvwFwJCxBkyRnWnTI=
Subject key identifier: 3E:6A:FF:F1:49:2D:A8:88:E8:A8:29:EE:6C:FE:79:87:BD:0B:17:D5
Certificate issuer: /CN=e6006f1abb75727e7bc30c179e6974d2d18f8f38
Certificate serial: 018CC86F657FFEA8E27D862F00EA99E6B26D
Authority key identifier: E6:00:6F:1A:BB:75:72:7E:7B:C3:0C:17:9E:69:74:D2:D1:8F:8F:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/Pmr_8UktqIjoqCnubP55h70LF9U.roa
Signing time: Tue 02 Jan 2024 04:29:52 +0000
ROA not before: Tue 02 Jan 2024 04:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61239
IP address blocks: 185.12.101.0/24 maxlen: 24
185.12.100.0/22 maxlen: 22
185.12.100.0/24 maxlen: 24
185.12.103.0/24 maxlen: 24
185.12.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:65:7f:fe:a8:e2:7d:86:2f:00:ea:99:e6:b2:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6006f1abb75727e7bc30c179e6974d2d18f8f38
Validity
Not Before: Jan 2 04:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e6afff1492da888e8a829ee6cfe7987bd0b17d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e1:69:46:33:cd:04:82:ff:c4:f5:93:d6:10:
7c:32:db:dc:c8:9d:36:cb:62:02:56:57:48:f8:b9:
bc:a7:60:a6:19:56:02:2c:e0:df:8c:84:96:c4:0f:
11:08:f1:00:3f:03:2d:1d:62:53:eb:1b:9f:7a:eb:
fd:87:46:10:64:69:1e:ab:1e:40:fd:a2:3b:32:f6:
39:dc:a4:cd:74:ce:be:fd:80:41:11:25:42:fb:16:
c3:13:83:21:c5:b8:9f:04:cf:8f:fa:9d:1b:d9:93:
d9:c1:b8:74:ab:1b:21:13:34:50:3b:e8:ea:19:6a:
97:2b:b3:50:65:18:d2:10:14:22:2c:83:7c:e0:fb:
05:98:ba:01:c3:b2:25:09:96:f3:65:64:39:99:68:
37:1d:cd:98:0c:49:d7:2a:78:95:5f:2b:15:bd:6b:
cd:98:c8:61:8f:c3:46:7a:dc:84:f2:d5:66:df:46:
56:c0:e2:ae:e5:58:29:1c:94:b5:ef:9a:b5:3e:2a:
50:fb:be:45:df:d9:31:43:81:04:8a:3b:c5:6c:f7:
7b:b7:e6:cb:76:13:ee:e7:0b:17:b7:a4:f1:0c:04:
58:2b:ea:e2:8c:5f:be:74:72:73:b0:00:24:b5:51:
f4:78:45:7c:c5:f4:11:e5:61:b8:85:a3:67:51:49:
19:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:6A:FF:F1:49:2D:A8:88:E8:A8:29:EE:6C:FE:79:87:BD:0B:17:D5
X509v3 Authority Key Identifier:
keyid:E6:00:6F:1A:BB:75:72:7E:7B:C3:0C:17:9E:69:74:D2:D1:8F:8F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/Pmr_8UktqIjoqCnubP55h70LF9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.12.100.0/22
Signature Algorithm: sha256WithRSAEncryption
03:72:4b:33:d9:41:87:eb:67:d0:fc:fa:e4:9a:31:69:6c:06:
f9:c5:ce:d4:e9:85:14:f9:c1:bb:77:16:14:c6:3c:56:e6:8a:
7d:a1:1f:0f:ad:15:4e:cc:14:28:8d:24:c0:67:2d:9a:9f:af:
83:10:1f:f8:21:da:68:af:69:66:ae:9c:ff:08:5d:00:56:62:
26:38:ea:e5:d0:a1:a1:50:47:91:ae:69:ee:ee:05:fc:a3:ef:
78:f6:56:cb:14:c3:87:7d:4d:e3:1a:3f:e6:c6:18:00:79:1b:
dd:8a:e9:10:23:6c:94:1b:f8:96:85:32:28:a6:db:27:eb:14:
ef:0f:eb:e6:ea:95:b6:0d:c2:18:0d:ed:2d:b4:26:7c:7c:d3:
fb:dc:c0:23:a4:95:72:66:65:06:5e:e2:08:ce:f0:7b:b0:86:
76:f5:28:63:2f:a0:34:7a:5f:a0:db:0f:ea:1d:13:27:5c:7f:
d4:19:f4:dc:df:19:89:d2:eb:d5:78:db:a4:5c:63:1b:ab:d3:
4b:ff:fd:e5:de:11:53:44:0f:10:2e:b6:9b:8d:98:c5:ba:83:
fb:71:17:c4:17:03:71:6c:7e:36:b7:33:23:ce:d2:ca:46:20:
5c:ad:79:eb:bc:4b:08:f4:3a:35:6f:da:ec:2e:9b:a9:1a:26:
26:bb:0b:b6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIb2V//qjifYYvAOqZ5rJtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MDA2ZjFhYmI3NTcyN2U3YmMzMGMxNzllNjk3NGQyZDE4
ZjhmMzgwHhcNMjQwMTAyMDQyOTUyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTZhZmZmMTQ5MmRhODg4ZThhODI5ZWU2Y2ZlNzk4N2JkMGIxN2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguFpRjPNBIL/xPWT1hB8MtvcyJ02
y2ICVldI+Lm8p2CmGVYCLODfjISWxA8RCPEAPwMtHWJT6xufeuv9h0YQZGkeqx5A
/aI7MvY53KTNdM6+/YBBESVC+xbDE4MhxbifBM+P+p0b2ZPZwbh0qxshEzRQO+jq
GWqXK7NQZRjSEBQiLIN84PsFmLoBw7IlCZbzZWQ5mWg3Hc2YDEnXKniVXysVvWvN
mMhhj8NGetyE8tVm30ZWwOKu5VgpHJS175q1PipQ+75F39kxQ4EEijvFbPd7t+bL
dhPu5wsXt6TxDARYK+rijF++dHJzsAAktVH0eEV8xfQR5WG4haNnUUkZ0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD5q//FJLaiI6Kgp7mz+eYe9CxfVMB8GA1UdIwQY
MBaAFOYAbxq7dXJ+e8MMF55pdNLRj484MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWdCdkdydDFjbjU3d3d3WG5tbDAwdEdQanpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9hMjdhMTktOTBiNS00NjcxLWJiYzEt
NDcyZDg4MmU5ZDcyLzEvUG1yXzhVa3RxSWpvcUNudWJQNTVoNzBMRjlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9hMjdhMTktOTBiNS00NjcxLWJiYzEtNDcyZDg4MmU5ZDcy
LzEvNWdCdkdydDFjbjU3d3d3WG5tbDAwdEdQanpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuQxkMA0G
CSqGSIb3DQEBCwUAA4IBAQADcksz2UGH62fQ/PrkmjFpbAb5xc7U6YUU+cG7dxYU
xjxW5op9oR8PrRVOzBQojSTAZy2an6+DEB/4Idpor2lmrpz/CF0AVmImOOrl0KGh
UEeRrmnu7gX8o+949lbLFMOHfU3jGj/mxhgAeRvdiukQI2yUG/iWhTIoptsn6xTv
D+vm6pW2DcIYDe0ttCZ8fNP73MAjpJVyZmUGXuIIzvB7sIZ29ShjL6A0el+g2w/q
HRMnXH/UGfTc3xmJ0uvVeNukXGMbq9NL//3l3hFTRA8QLrabjZjFuoP7cRfEFwNx
bH42tzMjztLKRiBcrXnrvEsI9Do1b9rsLpupGiYmuwu2
-----END CERTIFICATE-----
Generated at Sat May 3 19:48:55 2025 by rpki-client