Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/PHDZXKdfATGhePGJ83jp1CWAIl0.roa
File: PHDZXKdfATGhePGJ83jp1CWAIl0.roa (raw, json)
Hash identifier: Z9w6W4TNXNcR6xzJiViRm98dWRY4NPPs63mJnyCmPsA=
Subject key identifier: 3C:70:D9:5C:A7:5F:01:31:A1:78:F1:89:F3:78:E9:D4:25:80:22:5D
Certificate issuer: /CN=c7e9c7aa534b1300bf724fff0f0c1b0519d505bb
Certificate serial: 0196200D696AA83744E56223A8BB4FEAA9F0
Authority key identifier: C7:E9:C7:AA:53:4B:13:00:BF:72:4F:FF:0F:0C:1B:05:19:D5:05:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/PHDZXKdfATGhePGJ83jp1CWAIl0.roa
Signing time: Thu 10 Apr 2025 14:14:31 +0000
ROA not before: Thu 10 Apr 2025 14:14:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13335
IP address blocks: 185.149.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Apr 2025 10:44:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:20:0d:69:6a:a8:37:44:e5:62:23:a8:bb:4f:ea:a9:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7e9c7aa534b1300bf724fff0f0c1b0519d505bb
Validity
Not Before: Apr 10 14:14:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c70d95ca75f0131a178f189f378e9d42580225d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:97:1a:f8:3e:1e:73:88:af:e9:41:ca:89:f0:
b4:08:bb:c4:69:10:7a:37:ba:ad:b3:4f:b6:90:e7:
3d:13:98:e5:1a:a3:bc:3f:08:62:1a:63:56:d4:f2:
0c:d7:ab:6b:93:bc:06:f6:cc:76:3e:3f:69:e4:f3:
d9:c3:3d:a1:b4:70:0b:85:9d:b1:3c:c0:ff:a6:fe:
cf:6b:11:6d:ed:be:74:ce:94:3f:2d:90:b1:0f:cf:
02:9b:ba:b3:6f:ac:6e:5d:aa:39:64:1d:86:84:0b:
f7:fb:ac:f0:18:14:ad:89:8e:20:87:bb:3e:75:11:
f2:a1:5d:77:6e:93:fe:96:af:16:af:e2:6b:76:db:
fb:fc:d9:47:9b:82:07:0d:5f:1d:fa:8a:16:90:55:
b6:e8:f2:34:b4:70:7a:95:3d:e2:ad:ee:13:45:0c:
79:6a:2f:34:13:d8:8c:0c:dd:a0:31:0e:57:fa:b5:
40:81:76:12:b6:e0:b0:09:a9:3a:92:d1:2b:24:b4:
cd:13:57:b3:d4:05:96:81:73:cc:54:a5:b2:72:04:
d2:d1:fc:eb:18:d7:22:0d:94:2b:e0:b6:b7:30:84:
36:59:fb:14:ee:e5:79:46:c6:48:8e:8f:e0:b8:0b:
e4:35:4b:67:10:16:41:58:17:34:b1:ed:a1:a3:c6:
cc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:70:D9:5C:A7:5F:01:31:A1:78:F1:89:F3:78:E9:D4:25:80:22:5D
X509v3 Authority Key Identifier:
keyid:C7:E9:C7:AA:53:4B:13:00:BF:72:4F:FF:0F:0C:1B:05:19:D5:05:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/PHDZXKdfATGhePGJ83jp1CWAIl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.135.0/24
Signature Algorithm: sha256WithRSAEncryption
44:e0:e4:c3:fb:eb:b9:2b:88:c2:f4:41:77:08:ad:58:31:00:
94:5d:48:48:6e:9b:38:98:8e:ac:64:4f:7a:27:98:54:5d:17:
d8:49:be:ec:96:ae:00:9f:38:d4:ab:87:64:68:21:ec:33:8b:
9f:27:62:37:c3:26:5e:24:dc:e9:57:cf:81:2e:18:83:09:c0:
d8:1f:b6:ab:6b:33:b1:72:8f:db:e5:95:62:3b:e5:89:60:ed:
46:7c:d2:2f:95:73:fa:b0:a1:22:6c:59:24:69:ff:a0:e4:45:
32:7f:a5:e9:e7:e5:75:93:8a:a6:68:de:28:7d:4f:b8:07:12:
91:d6:e1:1c:1f:32:77:89:f8:82:b6:24:c7:17:3f:90:a0:8e:
b0:24:e3:11:7a:b7:9b:e0:fa:9e:4b:f6:07:4a:6d:7f:09:3a:
5c:57:7c:13:ba:5f:80:d3:0b:ee:55:71:57:f9:d8:a9:cb:a4:
80:5b:8a:99:79:eb:3a:9e:49:4e:48:ef:42:ab:de:01:60:65:
d3:23:0a:b7:96:e9:6e:ab:63:66:d2:99:2d:d1:fb:67:03:2b:
42:a0:53:8b:74:0a:8d:c9:f4:44:60:a5:b6:d8:0b:e7:c5:84:
3c:6b:9f:82:31:48:79:37:1a:a3:c4:09:04:53:a1:7c:c7:b6:
64:af:e0:d5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZYgDWlqqDdE5WIjqLtP6qnwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZTljN2FhNTM0YjEzMDBiZjcyNGZmZjBmMGMxYjA1MTlk
NTA1YmIwHhcNMjUwNDEwMTQxNDMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzcwZDk1Y2E3NWYwMTMxYTE3OGYxODlmMzc4ZTlkNDI1ODAyMjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJca+D4ec4iv6UHKifC0CLvEaRB6
N7qts0+2kOc9E5jlGqO8PwhiGmNW1PIM16trk7wG9sx2Pj9p5PPZwz2htHALhZ2x
PMD/pv7PaxFt7b50zpQ/LZCxD88Cm7qzb6xuXao5ZB2GhAv3+6zwGBStiY4gh7s+
dRHyoV13bpP+lq8Wr+Jrdtv7/NlHm4IHDV8d+ooWkFW26PI0tHB6lT3ire4TRQx5
ai80E9iMDN2gMQ5X+rVAgXYStuCwCak6ktErJLTNE1ez1AWWgXPMVKWycgTS0fzr
GNciDZQr4La3MIQ2WfsU7uV5RsZIjo/guAvkNUtnEBZBWBc0se2ho8bMCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDxw2VynXwExoXjxifN46dQlgCJdMB8GA1UdIwQY
MBaAFMfpx6pTSxMAv3JP/w8MGwUZ1QW7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveC1uSHFsTkxFd0NfY2tfX0R3d2JCUm5WQmJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC81MGFiZWYtMzc0Yy00ZWE2LWI3ZDQt
Y2U1MDA4MjdmZjdmLzEvUEhEWlhLZGZBVEdoZVBHSjgzanAxQ1dBSWwwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC81MGFiZWYtMzc0Yy00ZWE2LWI3ZDQtY2U1MDA4MjdmZjdm
LzEveC1uSHFsTkxFd0NfY2tfX0R3d2JCUm5WQmJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZWHMA0G
CSqGSIb3DQEBCwUAA4IBAQBE4OTD++u5K4jC9EF3CK1YMQCUXUhIbps4mI6sZE96
J5hUXRfYSb7slq4AnzjUq4dkaCHsM4ufJ2I3wyZeJNzpV8+BLhiDCcDYH7arazOx
co/b5ZViO+WJYO1GfNIvlXP6sKEibFkkaf+g5EUyf6Xp5+V1k4qmaN4ofU+4BxKR
1uEcHzJ3ifiCtiTHFz+QoI6wJOMRereb4PqeS/YHSm1/CTpcV3wTul+A0wvuVXFX
+dipy6SAW4qZees6nklOSO9Cq94BYGXTIwq3luluq2Nm0pkt0ftnAytCoFOLdAqN
yfREYKW22AvnxYQ8a5+CMUh5NxqjxAkEU6F8x7Zkr+DV
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:54:32 2025 by rpki-client