Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/ZHJh-l1lC-e0Eul1sPKGlLMHsQg.roa
File: ZHJh-l1lC-e0Eul1sPKGlLMHsQg.roa (raw, json)
Hash identifier: qIiwxVpwQncJWcbaxjzbFkDWQk5rimTsnHjQMDvY/us=
Subject key identifier: 64:72:61:FA:5D:65:0B:E7:B4:12:E9:75:B0:F2:86:94:B3:07:B1:08
Certificate issuer: /CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98
Certificate serial: 018DC16ADA93F75252426F09D1AB125ED2B5
Authority key identifier: 50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/ZHJh-l1lC-e0Eul1sPKGlLMHsQg.roa
Signing time: Mon 19 Feb 2024 12:50:21 +0000
ROA not before: Mon 19 Feb 2024 12:50:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51862
IP address blocks: 185.122.180.0/22 maxlen: 22
185.122.180.0/24 maxlen: 24
185.122.181.0/24 maxlen: 24
185.122.182.0/24 maxlen: 24
2a03:9160:40::/42 maxlen: 48
Validation: Failed, certificate revoked on Mon 19 Feb 2024 13:06:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c1:6a:da:93:f7:52:52:42:6f:09:d1:ab:12:5e:d2:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98
Validity
Not Before: Feb 19 12:50:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=647261fa5d650be7b412e975b0f28694b307b108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c4:38:34:61:e6:19:64:73:56:5f:5e:22:65:
58:8f:e2:3e:4d:90:73:86:1f:a9:e8:a2:ed:21:7b:
dc:23:94:a4:38:c0:ee:75:96:22:58:46:a4:3c:b5:
7e:18:56:ea:cd:44:d6:66:ec:a2:8c:44:29:c4:84:
ba:cb:9a:21:bb:c5:df:34:43:4c:48:56:fd:27:54:
32:dd:3b:24:fb:64:b8:b3:27:c3:4a:59:0c:79:46:
93:f3:72:6a:f4:ee:24:75:10:70:72:3b:03:7b:be:
3b:c5:0a:1b:02:ed:5f:a4:f7:f3:3f:fa:aa:c9:f9:
29:c5:ef:fd:56:55:ea:62:5e:05:1a:6b:db:a6:3e:
58:56:be:cf:2e:cc:8a:03:d2:7c:0a:71:fe:21:ce:
53:b4:09:2f:49:0b:fd:df:d1:57:df:85:53:93:d4:
55:29:c3:fe:2c:85:9a:58:f0:ee:af:33:02:07:7c:
41:fc:ab:bb:c5:4d:c5:78:7b:a8:0d:c1:e6:06:87:
51:63:20:b0:8e:1f:62:9c:37:3a:27:fa:ac:97:94:
42:4a:0d:84:f9:5b:09:58:d0:91:48:0d:d0:fd:f4:
a9:b4:dc:a0:fb:7f:5e:82:3f:ed:54:64:7f:46:dd:
23:78:ff:12:5f:a1:00:7a:11:95:15:3c:b1:70:29:
04:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:72:61:FA:5D:65:0B:E7:B4:12:E9:75:B0:F2:86:94:B3:07:B1:08
X509v3 Authority Key Identifier:
keyid:50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/ZHJh-l1lC-e0Eul1sPKGlLMHsQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.180.0/22
IPv6:
2a03:9160:40::/42
Signature Algorithm: sha256WithRSAEncryption
5f:c3:3e:ba:eb:13:7f:b1:01:e6:67:c1:15:a3:c3:f8:31:d2:
f8:37:e5:c4:fd:de:63:15:ac:57:4a:12:9a:38:01:90:7a:a7:
44:c6:45:eb:10:e9:4e:55:cc:3d:e1:17:45:d8:3f:d7:f5:c3:
f4:1f:9e:87:71:8e:24:8d:bd:a4:8c:1e:2d:1d:7c:24:21:45:
16:35:c1:2c:c7:e7:e0:22:8d:d9:a4:fa:38:cf:29:60:ca:16:
b7:dc:57:99:76:02:35:10:87:00:ee:7f:95:26:5c:95:db:5d:
21:dc:45:27:1f:c7:ed:d7:01:71:eb:db:88:4b:2c:2e:52:20:
24:ce:49:6f:aa:e7:76:d9:b3:f9:c9:1b:dd:6d:cc:da:4b:8d:
3c:48:90:3a:d0:34:a7:fe:4c:b0:24:ee:34:91:84:a1:ce:5e:
57:90:7c:dc:1a:38:f6:0e:22:40:35:d0:73:a4:f6:e5:70:6c:
07:32:41:1c:a8:49:63:b6:16:04:d8:a1:ac:97:86:7e:7e:48:
27:6a:b3:8d:25:36:a4:f3:03:e8:df:ee:9b:a9:b8:c1:35:ca:
b6:94:99:ef:88:8c:96:fe:79:c1:7e:88:cf:61:c2:13:c8:8a:
92:65:91:dd:f1:eb:55:80:cc:d6:b8:5f:80:ba:21:96:97:35:
34:9e:65:5d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY3BatqT91JSQm8J0asSXtK1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwOWM2M2M2ZDc1NmJiMmFjZDNmMWFkOTJhYzQxNWRhODU3
ZTZjOTgwHhcNMjQwMjE5MTI1MDIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDcyNjFmYTVkNjUwYmU3YjQxMmU5NzViMGYyODY5NGIzMDdiMTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8Q4NGHmGWRzVl9eImVYj+I+TZBz
hh+p6KLtIXvcI5SkOMDudZYiWEakPLV+GFbqzUTWZuyijEQpxIS6y5ohu8XfNENM
SFb9J1Qy3Tsk+2S4syfDSlkMeUaT83Jq9O4kdRBwcjsDe747xQobAu1fpPfzP/qq
yfkpxe/9VlXqYl4FGmvbpj5YVr7PLsyKA9J8CnH+Ic5TtAkvSQv939FX34VTk9RV
KcP+LIWaWPDurzMCB3xB/Ku7xU3FeHuoDcHmBodRYyCwjh9inDc6J/qsl5RCSg2E
+VsJWNCRSA3Q/fSptNyg+39egj/tVGR/Rt0jeP8SX6EAehGVFTyxcCkE3wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGRyYfpdZQvntBLpdbDyhpSzB7EIMB8GA1UdIwQY
MBaAFFCcY8bXVrsqzT8a2SrEFdqFfmyYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUp4anh0ZFd1eXJOUHhyWktzUVYyb1YtYkpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi84NDU0OGQtM2YzYi00NmI5LTgzNmMt
MzhhMzkyNDc3NmU5LzEvWkhKaC1sMWxDLWUwRXVsMXNQS0dsTE1Ic1FnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi84NDU0OGQtM2YzYi00NmI5LTgzNmMtMzhhMzkyNDc3NmU5
LzEvVUp4anh0ZFd1eXJOUHhyWktzUVYyb1YtYkpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCuXq0MA8E
AgACMAkDBwYqA5FgAEAwDQYJKoZIhvcNAQELBQADggEBAF/DPrrrE3+xAeZnwRWj
w/gx0vg35cT93mMVrFdKEpo4AZB6p0TGResQ6U5VzD3hF0XYP9f1w/QfnodxjiSN
vaSMHi0dfCQhRRY1wSzH5+Aijdmk+jjPKWDKFrfcV5l2AjUQhwDuf5UmXJXbXSHc
RScfx+3XAXHr24hLLC5SICTOSW+q53bZs/nJG91tzNpLjTxIkDrQNKf+TLAk7jSR
hKHOXleQfNwaOPYOIkA10HOk9uVwbAcyQRyoSWO2FgTYoayXhn5+SCdqs40lNqTz
A+jf7pupuME1yraUme+IjJb+ecF+iM9hwhPIipJlkd3x61WAzNa4X4C6IZaXNTSe
ZV0=
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:20:28 2025 by rpki-client