Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/PdlK3T05YTcM94-M_g9AoE9Qs6s.roa
File: PdlK3T05YTcM94-M_g9AoE9Qs6s.roa (raw, json)
Hash identifier: SnrszGgXQVixlKfSrMRDJenWO1yuDcd09x2BMveSzZ4=
Subject key identifier: 3D:D9:4A:DD:3D:39:61:37:0C:F7:8F:8C:FE:0F:40:A0:4F:50:B3:AB
Certificate issuer: /CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Certificate serial: 019609A413505A08192D4C358ABC67CF2A6E
Authority key identifier: 8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/PdlK3T05YTcM94-M_g9AoE9Qs6s.roa
Signing time: Sun 06 Apr 2025 05:47:49 +0000
ROA not before: Sun 06 Apr 2025 05:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31673
IP address blocks: 185.121.92.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 06 Apr 2025 07:41:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:09:a4:13:50:5a:08:19:2d:4c:35:8a:bc:67:cf:2a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Validity
Not Before: Apr 6 05:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3dd94add3d3961370cf78f8cfe0f40a04f50b3ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cc:9c:35:75:07:1f:e0:97:cd:15:28:bb:1d:
5b:e6:57:81:e2:e8:f5:80:ad:e7:fe:a3:7e:db:28:
48:af:97:a6:d3:e5:e5:69:0d:1c:7b:75:97:b2:8f:
5c:86:5f:1a:6a:98:f6:2f:9e:27:5d:5e:d6:40:dd:
dc:30:a5:2e:e0:14:6b:d6:a1:24:45:61:c1:94:7d:
be:04:23:79:f8:18:5c:e6:44:73:96:53:b2:88:88:
ef:71:ff:b6:f9:4b:24:1e:a1:55:3b:d0:82:72:d7:
e6:08:a1:2c:98:85:19:40:2b:72:d0:f9:29:12:b4:
49:5c:23:3a:78:63:36:94:ad:fd:57:60:a4:69:3e:
4c:d8:d8:78:ae:28:f1:84:d2:2d:87:ae:1a:51:d2:
e8:85:dc:ac:3f:d4:67:49:d4:9f:38:c5:44:d3:ad:
82:16:b9:04:96:f9:21:5f:69:c4:f2:40:18:ac:bc:
2b:84:fd:bc:08:c4:dc:ab:6b:9d:4c:38:c3:d0:34:
d9:6f:0d:b2:73:14:f9:8d:2c:18:ef:77:ea:28:bc:
5b:f5:33:c0:ca:05:bd:2e:50:a5:8d:fa:53:29:11:
61:2a:d6:52:6a:00:dd:9a:5c:69:10:a9:3d:d1:f2:
3c:08:fd:1f:ce:75:0c:a2:81:4c:dc:72:78:fb:f8:
d3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D9:4A:DD:3D:39:61:37:0C:F7:8F:8C:FE:0F:40:A0:4F:50:B3:AB
X509v3 Authority Key Identifier:
keyid:8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/PdlK3T05YTcM94-M_g9AoE9Qs6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.92.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:a2:50:97:17:aa:6a:24:ac:aa:8d:67:05:46:d8:fa:56:0a:
b3:aa:12:db:3f:b5:c8:6f:83:15:ec:7b:0b:fa:9e:9c:18:88:
50:7b:b5:82:1a:fe:26:3f:92:f5:06:9d:0e:76:9e:7a:6e:0e:
ac:17:8c:f6:b9:e6:c3:a5:3e:9f:e6:06:d5:b0:67:9e:79:7e:
5d:b9:b5:48:82:f8:4e:14:51:77:4b:4d:b7:f1:53:b3:ae:8b:
89:3e:dc:89:a3:43:af:df:38:2b:a6:3d:3b:bc:52:f4:b2:c5:
24:ce:08:87:b5:a0:3e:e7:90:b7:b4:40:0e:f3:d6:c2:8c:65:
dd:e7:35:c9:73:8a:e3:eb:e8:74:66:3e:bf:79:85:a9:76:b6:
37:43:2d:38:b4:0f:07:bc:20:c6:ea:13:0f:26:68:fa:3c:d6:
04:ad:06:5a:a3:df:54:f1:f2:ca:5e:7b:b7:64:f0:e7:c6:de:
b5:04:80:20:4c:d4:71:34:fe:b2:6f:d3:67:74:a3:7d:d3:63:
93:fb:5a:0e:00:bc:c1:fb:7d:11:46:60:98:7d:c2:40:3b:e9:
88:46:ee:5f:88:13:61:c0:36:99:d3:74:11:85:ce:36:87:e7:
d7:f8:ca:55:aa:2e:a6:0d:7b:ad:3d:13:b5:cc:9f:e2:00:fb:
5b:8f:63:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:25:21 2025 by rpki-client