Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/hTJlngM7Nzf0xZ5zkLCLz7C0cbM.roa
File: hTJlngM7Nzf0xZ5zkLCLz7C0cbM.roa (raw, json)
Hash identifier: kiCVDCYEmduonKqtJ3i2WzkqIW+GldLRAxsYiaWQ18k=
Subject key identifier: 85:32:65:9E:03:3B:37:37:F4:C5:9E:73:90:B0:8B:CF:B0:B4:71:B3
Certificate issuer: /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Certificate serial: 0196CE6A886B210E0CC18223B3751C7956B8
Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/hTJlngM7Nzf0xZ5zkLCLz7C0cbM.roa
Signing time: Wed 14 May 2025 10:50:10 +0000
ROA not before: Wed 14 May 2025 10:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 91.246.55.0/24 maxlen: 24
185.9.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 25 May 2025 08:51:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:6a:88:6b:21:0e:0c:c1:82:23:b3:75:1c:79:56:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Validity
Not Before: May 14 10:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8532659e033b3737f4c59e7390b08bcfb0b471b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:77:3f:52:17:74:20:f7:19:22:f3:f1:99:c7:
8d:00:c2:ea:7a:d7:c3:7c:86:8f:d8:7e:4e:e5:ca:
c2:3f:1a:7f:f0:58:4c:7c:5b:01:03:06:cd:5b:2e:
dd:bd:a1:f0:72:b8:8c:00:b2:9e:a0:d8:ef:4d:9d:
ee:e6:1d:25:c0:a6:75:f5:13:6c:7c:eb:5d:b8:a2:
9e:e9:85:98:c4:be:eb:d7:d2:5b:50:9e:9f:a6:ef:
83:3e:46:2a:15:b1:f7:82:c7:c3:05:d4:e8:44:ba:
ce:30:96:60:25:aa:07:8a:e8:0e:7d:8c:8a:b8:4d:
65:3f:86:40:d0:7c:7d:f2:44:ae:5c:c5:ff:1c:03:
6e:04:a9:27:b0:b6:d0:4c:c3:8f:26:4d:3e:b5:a3:
a4:c9:ba:7c:c8:d0:bf:c2:1b:ac:4d:1e:12:e8:12:
43:dc:00:04:88:15:b4:98:0f:6e:15:9e:ff:3c:97:
f8:46:74:bc:91:74:96:c2:46:1c:3e:53:b1:bf:f7:
97:31:75:e4:97:ee:be:a3:9f:2a:6a:e7:9a:fb:f7:
05:cf:63:7d:f3:22:18:5a:b0:4b:ec:ee:44:ee:f0:
e3:c0:df:5b:8e:bb:c9:e7:58:09:9b:b1:c0:3c:c0:
3b:6b:1c:e3:11:df:8f:ef:bd:54:3f:f6:39:43:71:
58:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:32:65:9E:03:3B:37:37:F4:C5:9E:73:90:B0:8B:CF:B0:B4:71:B3
X509v3 Authority Key Identifier:
keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/hTJlngM7Nzf0xZ5zkLCLz7C0cbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.55.0/24
185.9.1.0/24
Signature Algorithm: sha256WithRSAEncryption
38:53:4b:c0:f8:57:8c:2b:a0:ee:22:6f:24:a5:f4:0e:60:7b:
1e:36:a3:a0:5e:5c:72:d5:9e:ce:79:bc:1c:ef:b7:b8:93:92:
d0:0e:74:9c:de:a9:43:2f:f4:91:bc:6f:cc:63:ef:37:33:33:
e6:16:15:17:5b:d3:62:bb:22:1f:2a:e1:70:b6:7a:8d:24:b2:
ed:6b:a8:a8:e6:ce:39:5e:c9:3f:74:2b:a6:2a:14:6c:98:ad:
c9:94:24:58:8c:ba:01:c1:1a:6b:c6:df:20:a3:00:9b:a1:cb:
2f:9c:8a:5f:80:15:c8:da:d6:90:35:06:1d:b0:98:a6:b3:b8:
fe:b2:08:f5:10:15:8c:32:c9:09:b9:ff:46:85:9c:40:da:6c:
3a:dd:c9:d2:62:26:8d:29:d0:d0:56:88:38:ad:51:9f:f4:3b:
3b:fe:dc:c4:49:d9:37:57:1f:8d:be:91:14:4a:6e:52:f8:5c:
a7:7f:4f:73:9d:33:2f:ff:6a:c7:5d:f9:af:d8:47:ff:83:38:
38:c3:42:09:d5:f5:09:cd:ba:2b:a5:f9:f8:78:7c:fa:bd:eb:
e2:9a:8f:c9:19:fe:27:28:b9:15:ac:69:c8:46:dd:d1:4b:4d:
09:87:8c:22:99:ed:91:29:b0:8c:40:a1:43:68:18:af:96:96:
d8:2c:d0:f3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZbOaohrIQ4MwYIjs3UceVa4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYzM1YmM5YjdmODU1MGJlM2U0NjdjNTRhOWQzYTY2ZTI0
NDNiZDQwHhcNMjUwNTE0MTA1MDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTMyNjU5ZTAzM2IzNzM3ZjRjNTllNzM5MGIwOGJjZmIwYjQ3MWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHc/Uhd0IPcZIvPxmceNAMLqetfD
fIaP2H5O5crCPxp/8FhMfFsBAwbNWy7dvaHwcriMALKeoNjvTZ3u5h0lwKZ19RNs
fOtduKKe6YWYxL7r19JbUJ6fpu+DPkYqFbH3gsfDBdToRLrOMJZgJaoHiugOfYyK
uE1lP4ZA0Hx98kSuXMX/HANuBKknsLbQTMOPJk0+taOkybp8yNC/whusTR4S6BJD
3AAEiBW0mA9uFZ7/PJf4RnS8kXSWwkYcPlOxv/eXMXXkl+6+o58qauea+/cFz2N9
8yIYWrBL7O5E7vDjwN9bjrvJ51gJm7HAPMA7axzjEd+P771UP/Y5Q3FYHQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIUyZZ4DOzc39MWec5Cwi8+wtHGzMB8GA1UdIwQY
MBaAFNPDW8m3+FUL4+RnxUqdOmbiRDvUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDhOYnliZjRWUXZqNUdmRlNwMDZadUpFTzlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84YmE4YmItYzFjMC00ZDM1LTkwYTct
Y2RhNWMzNzY2ZjAzLzEvaFRKbG5nTTdOemYweFo1emtMQ0x6N0MwY2JNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy84YmE4YmItYzFjMC00ZDM1LTkwYTctY2RhNWMzNzY2ZjAz
LzEvMDhOYnliZjRWUXZqNUdmRlNwMDZadUpFTzlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW/Y3AwQA
uQkBMA0GCSqGSIb3DQEBCwUAA4IBAQA4U0vA+FeMK6DuIm8kpfQOYHseNqOgXlxy
1Z7Oebwc77e4k5LQDnSc3qlDL/SRvG/MY+83MzPmFhUXW9NiuyIfKuFwtnqNJLLt
a6io5s45Xsk/dCumKhRsmK3JlCRYjLoBwRprxt8gowCbocsvnIpfgBXI2taQNQYd
sJims7j+sgj1EBWMMskJuf9GhZxA2mw63cnSYiaNKdDQVog4rVGf9Ds7/tzESdk3
Vx+NvpEUSm5S+Fynf09znTMv/2rHXfmv2Ef/gzg4w0IJ1fUJzborpfn4eHz6vevi
mo/JGf4nKLkVrGnIRt3RS00Jh4wime2RKbCMQKFDaBivlpbYLNDz
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:06:33 2025 by rpki-client