Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/PSrmJkohi4CtwrRnGMLX3xLIJdw.roa
File: PSrmJkohi4CtwrRnGMLX3xLIJdw.roa (raw, json)
Hash identifier: UYn/XBUJotWf4xKqpUjgjEAZgoCngBXCD1dhyzIUrFY=
Subject key identifier: 3D:2A:E6:26:4A:21:8B:80:AD:C2:B4:67:18:C2:D7:DF:12:C8:25:DC
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0196AA2715FD3C1B72179B4DC9FCBFB2CBD4
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/PSrmJkohi4CtwrRnGMLX3xLIJdw.roa
Signing time: Wed 07 May 2025 09:50:10 +0000
ROA not before: Wed 07 May 2025 09:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209192
IP address blocks: 109.236.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 30 May 2025 11:33:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:27:15:fd:3c:1b:72:17:9b:4d:c9:fc:bf:b2:cb:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: May 7 09:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d2ae6264a218b80adc2b46718c2d7df12c825dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7f:1c:e4:bc:96:95:b4:21:a2:d2:bb:8b:03:
c2:fb:2f:45:08:cf:d6:b2:b0:b9:c9:7b:93:1a:71:
b0:03:15:b2:6e:5b:c7:ea:70:9c:97:b0:99:76:8f:
d0:8f:a0:25:28:27:4d:4f:25:20:60:8a:24:ea:b1:
0c:09:f5:6a:38:e1:f9:eb:26:02:da:89:0b:4e:7b:
4c:d0:80:9c:fa:d7:a1:f3:74:31:1b:d2:f9:4c:33:
c1:dc:82:01:8d:f6:0c:cd:a6:e4:f5:7e:5d:8b:18:
ce:b0:92:27:77:5a:b0:22:29:ff:38:72:86:c9:fa:
b4:9a:49:d8:83:69:0a:fa:6a:df:d8:db:91:d7:ea:
d3:9d:65:2c:ba:a0:6c:08:06:03:15:57:77:5f:c2:
7c:37:f8:d4:58:72:94:13:f4:bd:40:ed:98:09:2e:
39:c2:40:12:3f:2d:cd:a0:a8:fa:39:3b:27:c4:a9:
66:1b:67:08:e1:ad:72:bd:65:c2:5e:e6:71:4f:9b:
85:10:ba:fe:b8:14:af:e8:2d:9b:91:b8:42:7c:23:
d4:35:21:1e:eb:b4:2e:de:2d:1a:f4:8d:4e:3b:17:
7a:8a:0d:d3:4d:c6:b3:47:7f:85:c6:54:a6:17:ac:
13:c9:61:96:71:58:b0:9d:a1:eb:b6:9d:0f:63:f1:
50:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:2A:E6:26:4A:21:8B:80:AD:C2:B4:67:18:C2:D7:DF:12:C8:25:DC
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/PSrmJkohi4CtwrRnGMLX3xLIJdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.50.0/24
Signature Algorithm: sha256WithRSAEncryption
19:5b:bd:55:63:ae:3e:97:e3:50:dc:42:50:77:b8:5e:0a:34:
78:37:25:17:a8:ed:1e:c1:90:1d:bc:3c:5c:5c:8d:06:18:ac:
60:0c:cb:1e:58:fa:fa:cf:46:f3:47:69:23:cb:d7:42:02:76:
6d:41:91:b7:63:fc:5d:4a:d1:97:bd:01:18:7f:c7:fc:48:e4:
b2:c2:8c:17:f3:ec:63:4d:68:d1:8a:de:4f:65:df:48:88:46:
cc:8e:90:83:7a:c0:1f:5c:42:41:40:55:78:1e:c7:58:7d:b8:
e3:25:9f:40:a8:35:99:fc:04:95:4f:b7:2f:b4:d1:6e:7f:59:
52:77:07:60:11:91:b8:6c:4d:53:c8:80:f0:63:29:fd:c4:f0:
ab:13:81:44:5d:01:8b:49:63:ed:bb:90:f7:3a:21:30:e4:96:
16:ff:8a:6d:cd:dd:13:cb:c7:af:c6:98:de:f1:d1:58:30:80:
ba:4b:a2:75:12:dc:42:40:8d:05:95:8e:d0:e3:08:59:1d:1f:
0a:50:23:b3:9b:e4:81:22:9b:ff:56:5c:86:8e:d7:c4:f9:61:
35:e6:c8:eb:e9:a5:2c:04:43:c0:c4:79:14:3a:1c:41:46:f1:
26:2a:90:44:f2:f7:40:7d:53:a5:b9:42:5c:a0:34:a2:e7:45:
b2:3b:ad:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:50:23 2025 by rpki-client