Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/PTEMe91JXv_0WEsOSb8UrnBdNRs.roa
File: PTEMe91JXv_0WEsOSb8UrnBdNRs.roa (raw, json)
Hash identifier: /QWQgWIQn52N0cHoQGwDMsrbSHfWO/6eUKPwsbhniHw=
Subject key identifier: 3D:31:0C:7B:DD:49:5E:FF:F4:58:4B:0E:49:BF:14:AE:70:5D:35:1B
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 0197A4B1BB0DF0D42AA1FB3103AD1C478686
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/PTEMe91JXv_0WEsOSb8UrnBdNRs.roa
Signing time: Wed 25 Jun 2025 01:26:40 +0000
ROA not before: Wed 25 Jun 2025 01:26:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210705
IP address blocks: 45.94.214.0/24 maxlen: 24
188.212.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Jun 2025 10:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a4:b1:bb:0d:f0:d4:2a:a1:fb:31:03:ad:1c:47:86:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jun 25 01:26:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d310c7bdd495efff4584b0e49bf14ae705d351b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e3:34:ed:dc:24:ee:0f:0b:6d:69:01:ad:c5:
b7:07:b6:ce:32:e0:13:1b:4d:e6:6c:9c:da:76:3d:
f8:94:60:63:eb:03:e3:77:05:5a:80:5f:aa:49:bc:
21:fc:36:7d:69:ba:3f:a3:4c:64:3e:61:8a:1d:f9:
37:a7:de:a8:b0:6d:49:9d:7a:73:fb:4a:b8:90:9c:
21:ff:57:63:e0:02:91:cc:85:e1:66:4c:06:84:8d:
a3:3c:f6:7f:e6:32:12:4b:2e:7f:b4:d0:19:4f:5f:
55:ec:1e:a5:dd:57:3b:5c:81:5b:fd:6e:d5:0d:2a:
b6:8a:f6:27:88:fa:6b:74:91:82:fc:bb:e9:32:99:
4e:7a:31:17:ae:bc:7e:18:8e:2f:07:02:09:16:f9:
6e:63:cf:3b:33:1c:fa:b8:43:2a:1b:63:1f:94:29:
02:5c:a4:3b:99:99:74:f9:19:26:c2:ca:d6:29:23:
1d:00:60:46:69:91:14:26:e4:50:53:eb:8b:02:05:
df:78:03:30:79:de:fb:1f:c0:da:e2:52:44:7e:15:
4d:11:1f:ac:b4:c2:89:b8:ba:a5:9d:cf:e9:e2:97:
75:12:5e:cd:5f:0f:94:92:89:43:85:42:d2:8f:ad:
b0:fb:1a:b4:25:44:b3:5d:91:9d:3d:13:3b:2b:45:
a4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:31:0C:7B:DD:49:5E:FF:F4:58:4B:0E:49:BF:14:AE:70:5D:35:1B
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/PTEMe91JXv_0WEsOSb8UrnBdNRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.214.0/24
188.212.97.0/24
Signature Algorithm: sha256WithRSAEncryption
42:83:b4:74:14:3d:cb:33:bc:45:8f:f8:d5:82:28:17:cc:7b:
03:13:2b:13:c1:ef:99:85:c6:36:f4:6c:7a:be:8f:f3:dc:66:
31:c9:90:60:e5:06:d7:b8:ff:b9:a5:9c:ab:49:c8:63:cc:9f:
63:ef:73:bd:92:e4:82:28:27:99:d8:18:f5:da:40:ed:5a:b6:
1e:61:eb:34:11:26:01:dc:81:7b:7b:4e:e1:ee:e5:dd:85:d8:
62:c1:44:a9:8b:1d:f0:a7:2c:fb:af:f8:40:43:1a:64:85:7a:
21:18:8f:e6:b5:d1:33:c1:4a:d2:8d:1f:72:08:b3:b5:46:9f:
31:11:b7:36:d8:db:47:88:22:3c:f7:0d:b4:33:bf:9c:27:44:
d9:6f:a0:37:8d:4b:29:a6:66:5c:c4:1c:66:86:d9:89:5e:f6:
40:0d:51:f2:6a:1b:e4:c9:fe:26:17:b3:20:a9:7c:04:72:52:
13:6a:28:7d:83:00:2c:54:88:77:2d:04:23:5b:12:49:6c:f4:
63:f3:c8:e5:a5:88:b5:d7:69:84:b3:b1:73:0e:2f:fc:4e:f9:
16:16:79:3a:a2:52:a3:8a:18:9b:ef:ea:f6:6f:0a:ad:55:a1:
3d:42:15:4e:60:f5:90:54:6e:05:2c:6c:61:22:7a:50:83:06:
8b:8f:c0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:24:55 2025 by rpki-client