Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PToJQJ3NK_lnwPB1zYxFqRWYkP0.roa
File: PToJQJ3NK_lnwPB1zYxFqRWYkP0.roa (raw, json)
Hash identifier: 8YKjypqZ78g7uchb38U49v1PFYC9WE0NrvDB6W9T2sg=
Subject key identifier: 3D:3A:09:40:9D:CD:2B:F9:67:C0:F0:75:CD:8C:45:A9:15:98:90:FD
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019804611905674A60AC3A92740BD987C455
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PToJQJ3NK_lnwPB1zYxFqRWYkP0.roa
Signing time: Sun 13 Jul 2025 15:22:08 +0000
ROA not before: Sun 13 Jul 2025 15:22:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63023
IP address blocks: 94.183.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Jul 2025 09:19:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:04:61:19:05:67:4a:60:ac:3a:92:74:0b:d9:87:c4:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 13 15:22:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d3a09409dcd2bf967c0f075cd8c45a9159890fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e2:83:16:85:d8:29:9b:e9:c9:a8:28:1e:16:
b5:80:c6:5e:24:54:44:c2:e9:84:b7:04:16:d1:f6:
c4:de:da:48:45:f9:77:a6:38:1f:4f:02:57:3a:cf:
4e:eb:d3:a8:67:13:b5:cb:ca:d5:09:25:d1:63:8c:
fa:0f:60:10:0e:78:6e:43:99:04:90:6c:7e:03:9d:
51:83:14:b2:fc:56:11:8b:2f:a2:d7:c7:2c:75:26:
c9:09:b9:e8:d5:1d:2e:05:78:b0:b5:b5:f8:4b:b9:
00:59:b0:03:0f:68:a6:ed:ff:2c:0c:1c:da:30:d4:
58:9c:72:9d:1b:aa:af:3c:7a:3e:dd:50:fb:3e:a3:
2b:e0:4c:0f:1a:38:ee:67:73:1d:aa:2e:95:66:63:
0d:12:bf:99:b1:f5:2a:c6:f4:a7:15:fc:d6:3c:fc:
32:41:4c:02:ae:cb:ac:05:58:fe:72:fb:4a:c4:33:
97:43:36:d7:25:42:d3:00:6b:b4:2e:00:51:a3:e6:
5e:f6:c6:45:3b:8d:98:27:a3:0b:6d:7b:7d:44:a2:
e6:f2:d4:d1:8a:3d:c7:e5:c6:bf:7b:e4:db:9d:21:
9f:18:ca:0f:25:a2:b2:95:b8:3c:42:d9:85:3c:c3:
d0:9d:d1:7c:86:14:89:c1:8b:0c:89:bf:d0:68:09:
21:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3A:09:40:9D:CD:2B:F9:67:C0:F0:75:CD:8C:45:A9:15:98:90:FD
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PToJQJ3NK_lnwPB1zYxFqRWYkP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.167.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:0c:ca:4c:1c:1b:33:f7:bf:96:a4:5d:46:da:d7:33:e8:40:
be:71:76:7e:0d:4c:59:31:9b:c8:78:f1:82:71:4a:b2:8c:a9:
df:cb:79:a8:13:80:31:4b:a8:13:1c:df:0d:0a:77:5a:22:36:
db:16:ae:e0:ff:67:8e:b2:33:d0:cc:6a:7b:ca:99:26:d9:bf:
87:d9:13:76:13:71:1b:70:7c:70:b3:84:fc:e9:31:ef:1a:69:
7b:82:b9:5b:eb:27:aa:3e:c8:cb:40:0c:82:4d:dd:6c:e3:55:
0f:7c:c3:ef:84:ab:dd:36:d8:72:2c:f2:7b:1d:bc:e0:27:4f:
61:0e:18:23:21:8a:4e:6c:17:68:91:c1:15:1b:c4:28:47:a7:
18:f0:a6:ac:fe:22:1b:69:e4:c4:80:39:2a:27:ab:d3:27:09:
41:78:8b:f9:5c:93:a4:33:32:57:57:e2:25:86:fd:b6:e6:a6:
9e:e2:5c:2d:f2:ec:de:b3:18:7f:2f:a1:db:f1:df:9b:5e:89:
fd:94:f0:11:f7:fa:53:86:9e:59:da:16:8a:33:2b:72:30:fd:
d0:9b:c8:a0:e8:e0:80:82:f1:63:82:0c:f9:6f:03:09:c6:4f:
fc:ad:1d:18:da:11:f1:6a:da:da:d1:31:16:10:73:09:5a:fd:
fa:b0:22:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:31:15 2025 by rpki-client