Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/PrMZr3_rUT4QyUk5wm9rjXxMuV0.roa
File: PrMZr3_rUT4QyUk5wm9rjXxMuV0.roa (raw, json)
Hash identifier: ojL2mOGAT2jqGyuC8PWRR+ncK2tKSImCQ1Mt81nNBL4=
Subject key identifier: 3E:B3:19:AF:7F:EB:51:3E:10:C9:49:39:C2:6F:6B:8D:7C:4C:B9:5D
Certificate issuer: /CN=edb04a943332768017266f4e5f56c006d98ebbb4
Certificate serial: 0196C50318370EED4D4A9A4E5E74DEAF9B9D
Authority key identifier: ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/PrMZr3_rUT4QyUk5wm9rjXxMuV0.roa
Signing time: Mon 12 May 2025 15:00:36 +0000
ROA not before: Mon 12 May 2025 15:00:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202276
IP address blocks: 185.251.8.0/23 maxlen: 23
185.251.10.0/23 maxlen: 23
2a03:b8c0::/48 maxlen: 48
2a03:b8c0:1::/48 maxlen: 48
2a03:b8c0:2::/48 maxlen: 48
2a03:b8c0:3::/48 maxlen: 48
2a03:b8c0:4::/48 maxlen: 48
2a03:b8c0:5::/48 maxlen: 48
2a03:b8c0:6::/48 maxlen: 48
2a03:b8c0:7::/48 maxlen: 48
2a03:b8c0:8::/48 maxlen: 48
2a03:b8c0:9::/48 maxlen: 48
2a03:b8c0:10::/48 maxlen: 48
2a03:b8c0:12::/48 maxlen: 48
2a03:b8c0:13::/48 maxlen: 48
2a03:b8c0:14::/48 maxlen: 48
2a03:b8c0:2f::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 19 May 2025 17:15:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:03:18:37:0e:ed:4d:4a:9a:4e:5e:74:de:af:9b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edb04a943332768017266f4e5f56c006d98ebbb4
Validity
Not Before: May 12 15:00:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3eb319af7feb513e10c94939c26f6b8d7c4cb95d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ba:ed:d4:f1:4c:37:06:3e:66:72:6b:66:ee:
6b:a3:c5:62:18:44:a4:70:26:c4:f9:c3:1d:be:d3:
4d:d5:07:4a:8a:fa:0b:56:b5:3e:4a:2e:d1:12:06:
12:65:3f:1f:69:d8:a0:7b:f0:27:d3:11:0f:ae:c0:
4d:bc:30:20:cb:52:5d:34:99:ff:eb:f3:bd:94:ab:
b2:34:ca:57:a8:a9:b1:8f:a0:a4:2c:a3:4b:7c:bb:
4a:35:2d:78:bd:57:ed:53:df:63:a1:c4:65:c3:2b:
ef:4a:5c:42:7f:32:fc:9e:d8:99:17:a5:a4:62:c0:
8b:ae:38:89:a9:38:d5:8c:bc:de:6a:00:e6:29:9e:
81:76:3b:0f:9b:ff:cd:22:75:04:f7:12:1f:5b:c7:
90:0b:20:39:9b:72:c8:fa:17:13:be:36:f3:27:75:
9b:01:af:2f:79:7b:d6:50:c7:4d:24:3a:db:1b:90:
fb:4e:0e:ef:28:ea:c0:42:7b:f9:d1:55:d5:71:e7:
ef:27:0a:3c:f0:2e:49:44:f4:cb:c6:b3:01:b7:aa:
f8:55:28:1b:84:3b:1d:bc:e6:48:a5:b8:ff:2d:eb:
04:57:b6:60:70:7f:a0:21:e7:d9:be:df:e1:10:3b:
7a:c3:51:8a:c0:a2:b4:db:1d:34:d4:a6:ce:18:41:
f0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B3:19:AF:7F:EB:51:3E:10:C9:49:39:C2:6F:6B:8D:7C:4C:B9:5D
X509v3 Authority Key Identifier:
keyid:ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/PrMZr3_rUT4QyUk5wm9rjXxMuV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.8.0/22
IPv6:
2a03:b8c0::-2a03:b8c0:9:ffff:ffff:ffff:ffff:ffff
2a03:b8c0:10::/48
2a03:b8c0:12::-2a03:b8c0:14:ffff:ffff:ffff:ffff:ffff
2a03:b8c0:2f::/48
Signature Algorithm: sha256WithRSAEncryption
1b:b3:02:94:c6:3f:17:c1:20:0c:16:04:00:f0:a1:c2:46:98:
b1:44:d8:e0:6d:a4:19:b9:34:4e:7c:a6:be:be:b2:dd:fa:6f:
e2:df:c5:8b:6f:d4:ad:80:96:e2:81:52:b6:14:98:a3:2a:df:
95:63:54:9a:eb:a6:24:62:b3:a4:fb:3e:c7:3a:69:64:ba:63:
78:c0:26:f7:50:ff:f7:1a:b7:9a:05:3b:8f:87:37:9a:a2:40:
e2:42:80:44:55:76:61:ae:18:ea:9c:8c:e6:1e:f5:70:5b:5b:
8d:b0:56:47:cd:0f:05:8b:c6:99:1d:ef:b0:78:3e:5f:de:8d:
38:a2:98:ec:66:72:09:d0:ea:23:a6:e0:a8:b9:65:38:1a:3e:
91:3f:a9:55:c6:4d:cf:ae:f0:f2:60:a9:2f:49:b6:00:a0:53:
c0:06:ba:d4:0d:dd:32:6f:ab:71:20:15:16:ac:c5:56:e1:4d:
1e:52:9c:b6:75:36:2d:2e:9e:4c:5e:2f:1c:34:ee:a7:64:b6:
14:b5:54:6d:c2:13:9b:9d:ab:f1:2b:b9:c4:92:83:fd:45:7e:
e0:c7:a0:65:7d:a6:f5:71:8f:ed:63:5d:d6:9d:bc:ac:11:8a:
4b:ff:f0:ff:2d:83:ae:12:00:bf:c1:dc:cb:24:4d:66:c4:21:
74:9a:a5:5b
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgISAZbFAxg3Du1NSppOXnTer5udMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYjA0YTk0MzMzMjc2ODAxNzI2NmY0ZTVmNTZjMDA2ZDk4
ZWJiYjQwHhcNMjUwNTEyMTUwMDM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZWIzMTlhZjdmZWI1MTNlMTBjOTQ5MzljMjZmNmI4ZDdjNGNiOTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrrt1PFMNwY+ZnJrZu5ro8ViGESk
cCbE+cMdvtNN1QdKivoLVrU+Si7REgYSZT8fadige/An0xEPrsBNvDAgy1JdNJn/
6/O9lKuyNMpXqKmxj6CkLKNLfLtKNS14vVftU99jocRlwyvvSlxCfzL8ntiZF6Wk
YsCLrjiJqTjVjLzeagDmKZ6BdjsPm//NInUE9xIfW8eQCyA5m3LI+hcTvjbzJ3Wb
Aa8veXvWUMdNJDrbG5D7Tg7vKOrAQnv50VXVcefvJwo88C5JRPTLxrMBt6r4VSgb
hDsdvOZIpbj/LesEV7ZgcH+gIefZvt/hEDt6w1GKwKK02x001KbOGEHwPwIDAQAB
o4ICSTCCAkUwHQYDVR0OBBYEFD6zGa9/61E+EMlJOcJva418TLldMB8GA1UdIwQY
MBaAFO2wSpQzMnaAFyZvTl9WwAbZjru0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2JCS2xETXlkb0FYSm05T1gxYkFCdG1PdTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81MGE0YzQtOTFkMS00MzExLWI2N2It
ZTQ1ZmE2NGQ0ZDJkLzEvUHJNWnIzX3JVVDRReVVrNXdtOXJqWHhNdVYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC81MGE0YzQtOTFkMS00MzExLWI2N2ItZTQ1ZmE2NGQ0ZDJk
LzEvN2JCS2xETXlkb0FYSm05T1gxYkFCdG1PdTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjAMBAIAATAGAwQCufsIMD4E
AgACMDgwEAMFBioDuMADBwEqA7jAAAgDBwAqA7jAABAwEgMHASoDuMAAEgMHACoD
uMAAFAMHACoDuMAALzANBgkqhkiG9w0BAQsFAAOCAQEAG7MClMY/F8EgDBYEAPCh
wkaYsUTY4G2kGbk0Tnymvr6y3fpv4t/Fi2/UrYCW4oFSthSYoyrflWNUmuumJGKz
pPs+xzppZLpjeMAm91D/9xq3mgU7j4c3mqJA4kKARFV2Ya4Y6pyM5h71cFtbjbBW
R80PBYvGmR3vsHg+X96NOKKY7GZyCdDqI6bgqLllOBo+kT+pVcZNz67w8mCpL0m2
AKBTwAa61A3dMm+rcSAVFqzFVuFNHlKctnU2LS6eTF4vHDTup2S2FLVUbcITm52r
8Su5xJKD/UV+4MegZX2m9XGP7WNd1p28rBGKS//w/y2DrhIAv8HcyyRNZsQhdJql
Ww==
-----END CERTIFICATE-----
Generated at Sun Jun 8 01:30:54 2025 by rpki-client