Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/p0liFEC13zZbiv2XROqHff8M2L0.roa
File: p0liFEC13zZbiv2XROqHff8M2L0.roa (raw, json)
Hash identifier: D3aQiBs7Zoeh47hHLwfQ82RoBGJXROXA95uoJTPxnX4=
Subject key identifier: A7:49:62:14:40:B5:DF:36:5B:8A:FD:97:44:EA:87:7D:FF:0C:D8:BD
Certificate issuer: /CN=b467367967dc763349fd0b50e31f75b823028590
Certificate serial: 0194266BD2A4D10314ADEDA335F06F923444
Authority key identifier: B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/p0liFEC13zZbiv2XROqHff8M2L0.roa
Signing time: Thu 02 Jan 2025 09:49:47 +0000
ROA not before: Thu 02 Jan 2025 09:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201178
IP address blocks: 185.81.236.0/22 maxlen: 24
185.81.236.0/24 maxlen: 24
185.81.237.0/24 maxlen: 24
185.81.238.0/24 maxlen: 24
185.81.239.0/24 maxlen: 24
185.153.248.0/22 maxlen: 24
185.155.148.0/22 maxlen: 24
185.155.148.0/24 maxlen: 24
185.155.150.0/24 maxlen: 24
185.155.151.0/24 maxlen: 24
2a05:8a00::/29 maxlen: 48
Validation: Failed, certificate revoked on Sat 15 Mar 2025 23:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:d2:a4:d1:03:14:ad:ed:a3:35:f0:6f:92:34:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b467367967dc763349fd0b50e31f75b823028590
Validity
Not Before: Jan 2 09:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a749621440b5df365b8afd9744ea877dff0cd8bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:95:1d:89:c7:e8:f2:9f:c7:ff:bc:ae:0d:3e:
27:ff:ec:83:83:82:6b:62:2c:9e:10:1c:78:3a:69:
94:04:05:39:6b:82:a7:13:4d:e5:4a:8c:78:5a:87:
0d:43:f1:2e:be:ba:7c:a1:3e:2e:96:74:d5:b6:f1:
8e:41:b8:d6:88:16:83:1a:d3:df:bd:7b:cc:62:5a:
a0:c1:89:29:39:d0:72:1d:27:d8:e6:ed:d3:fe:0e:
73:ac:fa:43:73:da:b4:10:98:10:26:ac:9e:c2:4b:
28:44:27:15:86:93:e4:9e:88:4e:dc:93:ed:f2:e7:
85:ba:b1:8d:b6:cf:5a:d4:9f:8a:15:79:d4:a7:82:
cf:24:73:1a:f2:83:e6:c7:60:b4:15:8a:65:f7:90:
5e:ed:97:71:06:d6:fa:e0:1b:a6:22:2c:ed:dc:c7:
49:4b:87:73:76:8e:cb:06:56:16:8f:da:1c:b2:2c:
56:4f:de:c5:d9:77:2e:48:23:fc:85:b7:b6:05:45:
fa:7c:7f:0b:70:54:19:17:8d:3b:e9:68:8e:dc:c9:
fd:4a:2e:43:e6:0d:5b:6e:ed:48:b1:a8:43:9f:e1:
34:c9:be:42:d5:13:1e:af:fa:b3:73:77:aa:16:8b:
29:7d:87:2e:6f:bd:6d:d0:97:56:62:98:89:be:22:
63:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:49:62:14:40:B5:DF:36:5B:8A:FD:97:44:EA:87:7D:FF:0C:D8:BD
X509v3 Authority Key Identifier:
keyid:B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/p0liFEC13zZbiv2XROqHff8M2L0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.236.0/22
185.153.248.0/22
185.155.148.0/22
IPv6:
2a05:8a00::/29
Signature Algorithm: sha256WithRSAEncryption
12:a2:5d:3d:fb:e8:a4:ee:e0:01:06:ca:56:54:2a:56:77:b0:
9f:7a:e4:61:cf:67:bc:39:44:20:dc:e6:76:a7:ec:4c:72:ce:
98:83:f4:84:d6:11:89:dc:96:b0:e4:12:cd:bd:52:77:a2:7a:
5d:9d:6f:8b:79:dc:fe:de:ae:6e:47:fc:a0:fc:d7:09:2a:9f:
e1:60:09:2f:0e:1d:8c:b4:99:6f:3f:2c:27:47:ed:74:69:d1:
e2:8f:34:1a:3b:6e:d1:f9:ef:78:26:2f:fc:df:f0:8d:ad:4d:
ed:28:0e:a4:47:9a:1b:c5:d6:33:92:cc:0c:c9:fc:71:67:28:
15:d1:c1:eb:d1:61:cb:eb:96:7a:07:3e:d3:10:fa:93:83:a1:
db:12:82:34:a8:18:15:7e:a6:91:ce:69:59:88:b2:05:99:2e:
7f:58:96:cf:66:47:f5:8e:9a:a8:eb:0f:ae:58:12:43:b5:7c:
e0:d7:5f:ae:e3:18:00:4a:29:bf:ed:08:ea:1f:04:42:50:4c:
51:af:45:bb:a9:c5:f6:38:31:ca:95:8c:47:fe:31:30:06:da:
01:e3:8e:20:ce:3d:13:a3:27:6e:ea:a9:b4:99:a5:0e:d6:2f:
31:b0:8c:e3:56:fe:fb:f8:76:8a:37:d9:1f:58:c9:81:3e:5c:
b3:0d:f8:98
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZQma9Kk0QMUre2jNfBvkjREMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NjczNjc5NjdkYzc2MzM0OWZkMGI1MGUzMWY3NWI4MjMw
Mjg1OTAwHhcNMjUwMTAyMDk0OTQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzQ5NjIxNDQwYjVkZjM2NWI4YWZkOTc0NGVhODc3ZGZmMGNkOGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5Udicfo8p/H/7yuDT4n/+yDg4Jr
YiyeEBx4OmmUBAU5a4KnE03lSox4WocNQ/Euvrp8oT4ulnTVtvGOQbjWiBaDGtPf
vXvMYlqgwYkpOdByHSfY5u3T/g5zrPpDc9q0EJgQJqyewksoRCcVhpPknohO3JPt
8ueFurGNts9a1J+KFXnUp4LPJHMa8oPmx2C0FYpl95Be7ZdxBtb64BumIizt3MdJ
S4dzdo7LBlYWj9ocsixWT97F2XcuSCP8hbe2BUX6fH8LcFQZF4076WiO3Mn9Si5D
5g1bbu1IsahDn+E0yb5C1RMer/qzc3eqFospfYcub71t0JdWYpiJviJj0wIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFKdJYhRAtd82W4r9l0Tqh33/DNi9MB8GA1UdIwQY
MBaAFLRnNnln3HYzSf0LUOMfdbgjAoWQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEdjMmVXZmNkak5KX1F0UTR4OTF1Q01DaFpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9kZmM0ZjItZWQ3ZC00NjEwLTg2MGMt
YjgxMzczYzQwZGM5LzEvcDBsaUZFQzEzelpiaXYyWFJPcUhmZjhNMkwwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9kZmM0ZjItZWQ3ZC00NjEwLTg2MGMtYjgxMzczYzQwZGM5
LzEvdEdjMmVXZmNkak5KX1F0UTR4OTF1Q01DaFpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCuVHsAwQC
uZn4AwQCuZuUMA0EAgACMAcDBQMqBYoAMA0GCSqGSIb3DQEBCwUAA4IBAQASol09
++ik7uABBspWVCpWd7CfeuRhz2e8OUQg3OZ2p+xMcs6Yg/SE1hGJ3Jaw5BLNvVJ3
onpdnW+Ledz+3q5uR/yg/NcJKp/hYAkvDh2MtJlvPywnR+10adHijzQaO27R+e94
Ji/83/CNrU3tKA6kR5obxdYzkswMyfxxZygV0cHr0WHL65Z6Bz7TEPqTg6HbEoI0
qBgVfqaRzmlZiLIFmS5/WJbPZkf1jpqo6w+uWBJDtXzg11+u4xgASim/7QjqHwRC
UExRr0W7qcX2ODHKlYxH/jEwBtoB444gzj0Toydu6qm0maUO1i8xsIzjVv77+HaK
N9kfWMmBPlyzDfiY
-----END CERTIFICATE-----
Generated at Tue Apr 8 09:28:19 2025 by rpki-client