Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/Q8JJhPAiroFDqKS1CDtgkKLLzrM.roa
File: Q8JJhPAiroFDqKS1CDtgkKLLzrM.roa (raw, json)
Hash identifier: lBunlJYCds/W0FA4kDprOZMFG3rc3nt4ZOSwxczNvdg=
Subject key identifier: 43:C2:49:84:F0:22:AE:81:43:A8:A4:B5:08:3B:60:90:A2:CB:CE:B3
Certificate issuer: /CN=89edfa414944d010ac69ee5bfb22773b24b27efb
Certificate serial: 01980D9A3DA779E0183C4521F1373689F8C5
Authority key identifier: 89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/Q8JJhPAiroFDqKS1CDtgkKLLzrM.roa
Signing time: Tue 15 Jul 2025 10:21:08 +0000
ROA not before: Tue 15 Jul 2025 10:21:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39533
IP address blocks: 185.36.145.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Jul 2025 13:11:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0d:9a:3d:a7:79:e0:18:3c:45:21:f1:37:36:89:f8:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89edfa414944d010ac69ee5bfb22773b24b27efb
Validity
Not Before: Jul 15 10:21:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43c24984f022ae8143a8a4b5083b6090a2cbceb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1f:ed:18:8c:f4:bf:39:46:82:48:0d:a3:14:
b0:fa:b3:d6:15:a9:8e:af:3f:31:ff:06:a0:70:1e:
36:fd:ec:ba:4f:13:66:6e:92:89:47:a2:a4:01:22:
33:be:1f:dc:e8:da:00:2e:25:56:ed:57:01:dd:25:
81:98:82:cc:8a:23:71:25:73:b9:06:94:f4:55:b3:
f8:9f:9d:58:bd:39:f9:a2:12:d8:c7:66:42:3b:31:
c3:b5:e0:f1:47:5d:d0:f1:9d:12:c7:82:d7:ec:59:
35:17:1a:ed:d2:6b:16:4b:60:f9:e6:d4:95:39:4d:
fb:28:ec:ae:8f:47:9b:05:85:99:d8:c6:b3:81:01:
92:29:b2:bc:89:b3:a6:e6:5b:af:c6:55:17:7e:9e:
5d:7f:ad:c0:49:d8:5d:12:15:fc:13:17:fa:6e:29:
bf:6c:a2:cd:b9:f1:c1:b1:86:ca:6d:82:71:cc:9a:
0a:8c:a8:69:ca:cb:cd:52:32:bf:32:89:ba:df:49:
84:b3:93:c8:f0:38:7f:cf:65:f9:8a:8a:8c:1e:b0:
66:0d:58:4d:ec:9b:9c:fd:9e:95:db:e9:5b:09:05:
c1:37:50:5e:86:26:21:79:dd:ec:91:79:d9:91:4f:
04:df:7e:7f:81:67:9f:23:b4:9c:98:be:de:3f:7c:
56:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C2:49:84:F0:22:AE:81:43:A8:A4:B5:08:3B:60:90:A2:CB:CE:B3
X509v3 Authority Key Identifier:
keyid:89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/Q8JJhPAiroFDqKS1CDtgkKLLzrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.145.0/24
Signature Algorithm: sha256WithRSAEncryption
57:ab:09:ca:b7:80:57:d4:85:75:4f:1d:43:49:1d:72:db:c6:
62:7a:fa:be:0b:b9:46:71:1e:d4:3e:23:0f:40:e9:22:07:8a:
6c:58:95:a4:ad:33:f3:7a:c9:fb:8b:bc:1d:f4:5b:19:4b:56:
74:c3:c3:12:46:7a:28:47:72:0b:7c:4d:f6:d7:4b:14:50:71:
f0:72:e2:bc:db:80:78:c1:ec:bb:d5:85:41:fb:33:dc:ba:88:
54:b8:0c:6d:a2:5e:5e:99:2d:43:1c:0f:6a:69:a0:9b:ea:6a:
ec:bd:fb:f3:e7:c4:91:95:e7:4c:d0:f6:e1:6d:a6:32:83:fd:
8d:1b:81:6b:8b:40:ba:39:3a:e6:8d:cc:94:43:88:b8:52:44:
32:ba:79:b5:2c:c0:03:21:c2:6f:e9:eb:67:d8:c6:e6:5e:73:
40:a1:4f:c1:f2:c2:40:0f:f5:a2:2b:fa:2e:e2:d5:ee:9e:6f:
4b:28:3e:78:30:27:c9:55:c0:0d:e7:f5:4a:5b:ce:fd:93:82:
6f:e1:1b:ee:9a:b3:f3:ea:ed:7d:e7:3f:8e:5b:ff:98:26:3c:
67:4a:7d:c1:fc:83:14:07:2b:18:63:b1:4a:b7:9d:98:ed:01:
81:80:18:88:d6:29:37:af:c4:57:dd:28:e0:0a:20:a0:47:e1:
97:fa:17:6f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZgNmj2neeAYPEUh8Tc2ifjFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZWRmYTQxNDk0NGQwMTBhYzY5ZWU1YmZiMjI3NzNiMjRi
MjdlZmIwHhcNMjUwNzE1MTAyMTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0M2MyNDk4NGYwMjJhZTgxNDNhOGE0YjUwODNiNjA5MGEyY2JjZWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApR/tGIz0vzlGgkgNoxSw+rPWFamO
rz8x/wagcB42/ey6TxNmbpKJR6KkASIzvh/c6NoALiVW7VcB3SWBmILMiiNxJXO5
BpT0VbP4n51YvTn5ohLYx2ZCOzHDteDxR13Q8Z0Sx4LX7Fk1Fxrt0msWS2D55tSV
OU37KOyuj0ebBYWZ2MazgQGSKbK8ibOm5luvxlUXfp5df63ASdhdEhX8Exf6bim/
bKLNufHBsYbKbYJxzJoKjKhpysvNUjK/Mom630mEs5PI8Dh/z2X5ioqMHrBmDVhN
7Juc/Z6V2+lbCQXBN1BehiYhed3skXnZkU8E335/gWefI7ScmL7eP3xWSQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEPCSYTwIq6BQ6iktQg7YJCiy86zMB8GA1UdIwQY
MBaAFInt+kFJRNAQrGnuW/sidzsksn77MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWUzNlFVbEUwQkNzYWU1Yi15SjNPeVN5ZnZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC85MzZjYmItYmFjNC00ZmRlLThkZWYt
ZmViYzFlZDNjZWJhLzEvUThKSmhQQWlyb0ZEcUtTMUNEdGdrS0xMenJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC85MzZjYmItYmFjNC00ZmRlLThkZWYtZmViYzFlZDNjZWJh
LzEvaWUzNlFVbEUwQkNzYWU1Yi15SjNPeVN5ZnZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSSRMA0G
CSqGSIb3DQEBCwUAA4IBAQBXqwnKt4BX1IV1Tx1DSR1y28Zievq+C7lGcR7UPiMP
QOkiB4psWJWkrTPzesn7i7wd9FsZS1Z0w8MSRnooR3ILfE3210sUUHHwcuK824B4
wey71YVB+zPcuohUuAxtol5emS1DHA9qaaCb6mrsvfvz58SRledM0PbhbaYyg/2N
G4Fri0C6OTrmjcyUQ4i4UkQyunm1LMADIcJv6etn2MbmXnNAoU/B8sJAD/WiK/ou
4tXunm9LKD54MCfJVcAN5/VKW879k4Jv4RvumrPz6u195z+OW/+YJjxnSn3B/IMU
BysYY7FKt52Y7QGBgBiI1ik3r8RX3SjgCiCgR+GX+hdv
-----END CERTIFICATE-----
Generated at Fri Jul 25 12:54:57 2025 by rpki-client