Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/0f_TJdnQ2rMma2eKl1yJ69n3GEM.roa
File: 0f_TJdnQ2rMma2eKl1yJ69n3GEM.roa (raw, json)
Hash identifier: nhrKMtUrUtneUeb9nKw60gv/jTNcuKZNxKTb63pip/0=
Subject key identifier: D1:FF:D3:25:D9:D0:DA:B3:26:6B:67:8A:97:5C:89:EB:D9:F7:18:43
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 0195AF79CC68549C630456713F85CD63BBA2
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/0f_TJdnQ2rMma2eKl1yJ69n3GEM.roa
Signing time: Wed 19 Mar 2025 17:35:49 +0000
ROA not before: Wed 19 Mar 2025 17:35:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401152
IP address blocks: 64.188.100.0/22 maxlen: 24
64.188.120.0/22 maxlen: 24
64.188.124.0/24 maxlen: 24
64.188.125.0/24 maxlen: 24
64.188.126.0/24 maxlen: 24
64.188.127.0/24 maxlen: 24
185.216.104.0/22 maxlen: 24
193.23.192.0/22 maxlen: 24
193.23.196.0/23 maxlen: 24
193.23.198.0/24 maxlen: 24
193.23.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 23 Mar 2025 18:58:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:af:79:cc:68:54:9c:63:04:56:71:3f:85:cd:63:bb:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Mar 19 17:35:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1ffd325d9d0dab3266b678a975c89ebd9f71843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:64:88:9a:a8:1d:cd:d6:b4:20:69:a7:aa:03:
79:df:ff:fa:26:bf:79:47:34:f3:6c:64:57:c6:67:
c7:69:ee:82:f5:03:75:c8:04:0e:ad:a0:8a:61:a3:
b4:ea:8c:9e:dc:ab:32:c0:d3:3a:23:44:d2:17:b6:
73:27:bf:99:a0:ac:21:f5:64:f5:96:ad:e0:c5:60:
1a:f0:13:02:3d:f2:40:d4:eb:3d:9c:7f:af:7b:ef:
4d:55:62:cd:8d:4e:91:88:f2:ee:4c:39:60:01:1f:
21:c9:1d:c8:4d:00:87:71:7f:b2:7c:3d:1e:d5:db:
54:f2:3f:56:95:ab:4f:4e:d5:98:75:e0:0f:8d:bd:
44:23:c1:69:08:8d:3a:88:33:7e:0b:c0:d8:58:49:
9a:e8:8e:cb:ed:29:f3:3f:62:29:df:36:11:b5:86:
61:3c:e6:11:42:65:51:c7:e8:ee:31:c5:e8:c1:24:
8f:64:5b:3e:15:5f:64:c1:77:87:76:c8:4c:91:20:
69:dd:41:3c:30:92:62:cf:be:80:1b:42:34:9e:13:
ac:cd:85:f1:be:eb:41:74:30:f3:33:d5:23:73:f6:
b2:9f:be:57:dd:8d:05:65:39:56:de:bc:ab:1d:54:
89:c2:a6:76:f7:8f:b8:15:c8:bc:35:9b:92:f2:b8:
79:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FF:D3:25:D9:D0:DA:B3:26:6B:67:8A:97:5C:89:EB:D9:F7:18:43
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/0f_TJdnQ2rMma2eKl1yJ69n3GEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.188.100.0/22
64.188.120.0/21
185.216.104.0/22
193.23.192.0/21
Signature Algorithm: sha256WithRSAEncryption
0d:30:8e:7e:b4:6d:75:02:3f:78:89:15:59:90:c3:43:55:04:
ba:72:9e:12:8f:4f:0d:5c:a7:fa:b5:cf:a1:7c:f0:e2:2b:e5:
09:7d:f8:e8:9a:98:19:e1:e0:54:0a:a6:18:2f:b7:b3:47:60:
b3:c0:fa:7c:14:b8:67:ad:bb:17:f1:a6:6b:04:bc:7a:68:27:
3b:1a:e2:8b:8f:49:80:8e:4f:54:96:ef:40:5b:13:df:72:00:
46:c1:05:cb:2e:b3:9e:bb:94:54:cf:43:29:b4:75:d0:df:29:
00:c0:33:11:e1:ee:fa:14:d1:4a:7a:1a:14:1a:ee:30:e4:ed:
f5:4a:c5:1a:8b:64:b2:eb:3f:1b:33:80:39:28:ca:01:82:80:
f8:5f:ce:f1:04:53:0e:c4:14:52:9a:8d:a8:c1:ec:3f:ef:87:
15:34:a1:b6:3b:6c:f5:52:bf:ed:74:ff:d0:e4:e4:e9:53:b5:
33:e3:0b:cc:c1:a9:09:01:13:ed:4c:30:a3:5f:89:98:f1:54:
07:ab:b0:77:97:02:95:03:1e:ce:a2:6f:91:1a:29:09:e2:40:
1a:af:ad:12:3b:a6:ea:6f:79:df:7d:17:0e:91:05:00:02:8c:
f6:2d:5b:a4:69:e9:ef:58:b2:ef:00:c4:63:6e:52:38:7e:73:
b3:ed:c5:06
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZWvecxoVJxjBFZxP4XNY7uiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjUwMzE5MTczNTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMWZmZDMyNWQ5ZDBkYWIzMjY2YjY3OGE5NzVjODllYmQ5ZjcxODQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2SImqgdzda0IGmnqgN53//6Jr95
RzTzbGRXxmfHae6C9QN1yAQOraCKYaO06oye3KsywNM6I0TSF7ZzJ7+ZoKwh9WT1
lq3gxWAa8BMCPfJA1Os9nH+ve+9NVWLNjU6RiPLuTDlgAR8hyR3ITQCHcX+yfD0e
1dtU8j9WlatPTtWYdeAPjb1EI8FpCI06iDN+C8DYWEma6I7L7SnzP2Ip3zYRtYZh
POYRQmVRx+juMcXowSSPZFs+FV9kwXeHdshMkSBp3UE8MJJiz76AG0I0nhOszYXx
vutBdDDzM9Ujc/ayn75X3Y0FZTlW3ryrHVSJwqZ294+4Fci8NZuS8rh5sQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFNH/0yXZ0NqzJmtnipdcievZ9xhDMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvMGZfVEpkblEyck1tYTJlS2wxeUo2OW4zR0VNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCQLxkAwQD
QLx4AwQCudhoAwQDwRfAMA0GCSqGSIb3DQEBCwUAA4IBAQANMI5+tG11Aj94iRVZ
kMNDVQS6cp4Sj08NXKf6tc+hfPDiK+UJffjompgZ4eBUCqYYL7ezR2CzwPp8FLhn
rbsX8aZrBLx6aCc7GuKLj0mAjk9Ulu9AWxPfcgBGwQXLLrOeu5RUz0MptHXQ3ykA
wDMR4e76FNFKehoUGu4w5O31SsUai2Sy6z8bM4A5KMoBgoD4X87xBFMOxBRSmo2o
wew/74cVNKG2O2z1Ur/tdP/Q5OTpU7Uz4wvMwakJARPtTDCjX4mY8VQHq7B3lwKV
Ax7Oom+RGikJ4kAar60SO6bqb3nffRcOkQUAAoz2LVukaenvWLLvAMRjblI4fnOz
7cUG
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:51:51 2025 by rpki-client