Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/2Me1BMYQNHr3SEI40yFsJiXkRWk.roa
File: 2Me1BMYQNHr3SEI40yFsJiXkRWk.roa (raw, json)
Hash identifier: BscxK/abdfiZkEYQREeFQRbGMjHjCHE/InQptJUP+k8=
Subject key identifier: D8:C7:B5:04:C6:10:34:7A:F7:48:42:38:D3:21:6C:26:25:E4:45:69
Certificate issuer: /CN=15c181706f61c4b737cd7eb78f7230e34cdfc14c
Certificate serial: 019818A5A567851075370172A8199A0B9A24
Authority key identifier: 15:C1:81:70:6F:61:C4:B7:37:CD:7E:B7:8F:72:30:E3:4C:DF:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/2Me1BMYQNHr3SEI40yFsJiXkRWk.roa
Signing time: Thu 17 Jul 2025 13:49:25 +0000
ROA not before: Thu 17 Jul 2025 13:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33820
IP address blocks: 145.36.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Fri 18 Jul 2025 12:23:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:18:a5:a5:67:85:10:75:37:01:72:a8:19:9a:0b:9a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15c181706f61c4b737cd7eb78f7230e34cdfc14c
Validity
Not Before: Jul 17 13:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8c7b504c610347af7484238d3216c2625e44569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ac:98:af:eb:b6:3c:28:45:16:f8:f9:c6:a2:
9a:33:a1:e1:a8:f1:03:c8:de:ef:a0:f6:d7:0d:ad:
c9:78:9a:a5:d3:77:12:10:da:f4:b7:76:4c:12:d4:
b9:a5:0d:7f:38:5a:7a:0c:c3:89:b5:c1:6d:d6:a6:
50:99:60:3a:8a:da:b5:c2:14:64:a2:6e:03:23:bb:
a9:32:2b:0b:0f:74:91:fa:74:2d:29:ce:79:98:7b:
9c:6c:42:64:ea:a8:ee:a5:9b:40:93:b6:52:71:a0:
4a:b1:30:c2:01:ee:47:55:aa:c1:84:f4:e4:9a:2b:
db:ef:f3:00:b2:35:59:5e:6a:24:76:a9:09:18:6c:
ec:72:c2:75:b4:fc:1e:2a:5f:6c:88:57:05:e0:51:
f2:46:d4:92:83:f6:1e:9e:24:8e:4d:14:77:4f:fa:
a1:1d:25:ae:b6:a7:ec:29:8c:eb:ef:53:ae:d5:0d:
07:fb:fc:87:4d:65:6f:e2:3b:7b:74:74:70:62:63:
31:60:3a:13:88:8d:13:ea:4e:8e:3c:49:f2:ab:1e:
bb:66:9a:6d:95:61:49:f3:0e:97:8b:24:53:03:6f:
1a:f8:5c:5c:fa:38:93:1c:c1:fc:aa:c5:61:ad:2e:
aa:f9:90:94:8c:e7:5c:dc:9d:fe:ce:7b:1f:04:92:
f8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C7:B5:04:C6:10:34:7A:F7:48:42:38:D3:21:6C:26:25:E4:45:69
X509v3 Authority Key Identifier:
keyid:15:C1:81:70:6F:61:C4:B7:37:CD:7E:B7:8F:72:30:E3:4C:DF:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/2Me1BMYQNHr3SEI40yFsJiXkRWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.36.0.0/16
Signature Algorithm: sha256WithRSAEncryption
89:0d:2c:d1:a7:e9:f3:22:64:ad:2b:d7:df:1f:69:5d:34:b7:
cb:aa:59:ed:24:e3:01:53:ee:db:7c:81:91:17:4a:04:38:f1:
d4:ff:ae:0a:80:15:aa:a0:03:05:a0:5e:fb:59:7c:78:d8:36:
a9:44:e1:6c:cd:07:a4:e0:f0:f1:16:ee:06:7f:13:83:32:97:
64:fa:56:97:44:86:64:38:e1:cd:c7:de:c4:9b:c9:20:cc:30:
b0:02:bd:f0:0b:0a:ab:df:26:3c:e2:b4:bb:9b:6c:f6:9d:8d:
48:1b:96:96:5e:66:dc:b0:24:de:a5:97:0d:98:41:03:0a:68:
28:6d:5c:9d:1e:f3:c5:7d:12:c5:25:85:a1:bf:ac:25:5c:90:
de:fd:94:32:93:21:01:97:15:36:61:b7:e1:f9:93:76:9c:f8:
b8:1a:e8:73:63:62:e7:df:e3:81:53:af:ff:4b:48:67:45:9f:
93:1c:06:10:24:54:15:3b:84:cb:c7:4a:a3:51:8e:48:b9:53:
7d:3a:93:de:8a:78:32:e4:d9:57:ea:4e:7f:35:86:37:b8:43:
bc:a4:5f:d1:99:56:a1:e9:69:9c:25:14:d6:20:f7:5e:84:64:
05:e8:6f:35:2c:9b:64:d5:3e:ea:41:3b:f3:34:9a:cd:04:20:
c0:b1:b5:83
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAZgYpaVnhRB1NwFyqBmaC5okMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1YzE4MTcwNmY2MWM0YjczN2NkN2ViNzhmNzIzMGUzNGNk
ZmMxNGMwHhcNMjUwNzE3MTM0OTI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOGM3YjUwNGM2MTAzNDdhZjc0ODQyMzhkMzIxNmMyNjI1ZTQ0NTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKyYr+u2PChFFvj5xqKaM6HhqPED
yN7voPbXDa3JeJql03cSENr0t3ZMEtS5pQ1/OFp6DMOJtcFt1qZQmWA6itq1whRk
om4DI7upMisLD3SR+nQtKc55mHucbEJk6qjupZtAk7ZScaBKsTDCAe5HVarBhPTk
mivb7/MAsjVZXmokdqkJGGzscsJ1tPweKl9siFcF4FHyRtSSg/YeniSOTRR3T/qh
HSWutqfsKYzr71Ou1Q0H+/yHTWVv4jt7dHRwYmMxYDoTiI0T6k6OPEnyqx67Zppt
lWFJ8w6XiyRTA28a+Fxc+jiTHMH8qsVhrS6q+ZCUjOdc3J3+znsfBJL4AQIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFNjHtQTGEDR690hCONMhbCYl5EVpMB8GA1UdIwQY
MBaAFBXBgXBvYcS3N81+t49yMONM38FMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmNHQmNHOWh4TGMzelg2M2ozSXc0MHpmd1V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81MmUwZTItNDc4Yi00MDFkLTkzODUt
OGZmNmNkNzc0N2M0LzEvMk1lMUJNWVFOSHIzU0VJNDB5RnNKaVhrUldrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC81MmUwZTItNDc4Yi00MDFkLTkzODUtOGZmNmNkNzc0N2M0
LzEvRmNHQmNHOWh4TGMzelg2M2ozSXc0MHpmd1V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkSQwDQYJ
KoZIhvcNAQELBQADggEBAIkNLNGn6fMiZK0r198faV00t8uqWe0k4wFT7tt8gZEX
SgQ48dT/rgqAFaqgAwWgXvtZfHjYNqlE4WzNB6Tg8PEW7gZ/E4Myl2T6VpdEhmQ4
4c3H3sSbySDMMLACvfALCqvfJjzitLubbPadjUgblpZeZtywJN6llw2YQQMKaCht
XJ0e88V9EsUlhaG/rCVckN79lDKTIQGXFTZht+H5k3ac+Lga6HNjYuff44FTr/9L
SGdFn5McBhAkVBU7hMvHSqNRjki5U306k96KeDLk2VfqTn81hje4Q7ykX9GZVqHp
aZwlFNYg916EZAXobzUsm2TVPupBO/M0ms0EIMCxtYM=
-----END CERTIFICATE-----
Generated at Mon Jul 21 07:28:00 2025 by rpki-client