Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/PSBBphSOSt_h-SF3DiasnOxEBag.roa
File: PSBBphSOSt_h-SF3DiasnOxEBag.roa (raw, json)
Hash identifier: ci8xG/wQdu7pk+NsgSfLJeNweR8frihRmMK/I8CDf0Y=
Subject key identifier: 3D:20:41:A6:14:8E:4A:DF:E1:F9:21:77:0E:26:AC:9C:EC:44:05:A8
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 0196C4DA6B00DB5C3BF44BBC5C14C0B76CA1
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/PSBBphSOSt_h-SF3DiasnOxEBag.roa
Signing time: Mon 12 May 2025 14:16:10 +0000
ROA not before: Mon 12 May 2025 14:16:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.140.57.0/24 maxlen: 24
45.149.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 May 2025 09:55:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:da:6b:00:db:5c:3b:f4:4b:bc:5c:14:c0:b7:6c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: May 12 14:16:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d2041a6148e4adfe1f921770e26ac9cec4405a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6e:59:dd:3c:ea:55:fb:92:77:ab:6c:7c:68:
af:d4:2a:a5:9b:82:72:99:bc:74:3f:de:c7:16:70:
76:2f:44:3f:69:5b:f8:bf:37:7d:52:ab:dd:4f:f7:
2c:77:33:d9:36:89:9f:49:0f:ff:00:36:46:15:90:
45:77:68:13:32:e4:c7:7b:67:77:7c:ce:43:c7:fa:
dd:65:15:76:05:a6:eb:f4:c7:9f:c4:90:88:9c:ad:
fe:1c:ba:8e:97:bd:2f:7a:af:25:2c:00:d4:55:5d:
cf:9f:b6:7f:17:64:c2:a7:b4:16:7e:c7:60:08:78:
42:e1:45:fd:96:63:56:37:54:40:d1:e2:40:3b:96:
0c:e9:57:dd:96:c4:f7:89:39:1f:cf:51:5e:68:02:
9b:45:45:7a:26:32:cf:2b:d0:dd:01:5e:67:26:ae:
aa:9d:19:4f:10:46:bb:6a:40:4c:39:57:44:0b:95:
44:14:c5:a5:18:87:15:e5:16:dc:fc:56:7c:93:e5:
26:38:63:fd:04:f8:73:08:7a:62:be:4d:7a:56:05:
52:9d:c8:5d:81:81:53:4f:84:11:cf:a4:c1:8d:96:
60:0d:e8:2d:fa:6c:9c:fc:f4:18:c6:b2:a2:46:99:
f2:af:24:9e:06:b7:15:4f:93:64:e1:38:b6:89:fb:
8a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:20:41:A6:14:8E:4A:DF:E1:F9:21:77:0E:26:AC:9C:EC:44:05:A8
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/PSBBphSOSt_h-SF3DiasnOxEBag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.57.0/24
45.149.4.0/24
Signature Algorithm: sha256WithRSAEncryption
53:30:31:2f:37:dd:5e:91:5a:fa:16:d7:63:10:cd:a6:24:10:
a2:0e:38:49:f2:21:3d:16:5d:6f:ed:7e:8f:2e:fc:7f:3e:23:
7d:a0:35:db:cb:73:76:c8:e8:b1:48:6f:bc:e3:ee:65:1f:4c:
65:29:ac:fb:b1:ea:f6:10:6b:28:5a:70:79:5b:bc:e4:8b:2a:
e6:03:4d:33:1f:ba:8b:5e:4d:e5:3f:fb:4a:e7:57:dc:bc:0f:
b6:92:76:4b:d7:be:e1:a3:98:fd:53:8c:13:ab:f1:76:67:7e:
a2:a3:ad:50:88:21:5d:da:7b:87:e5:b4:30:57:b4:14:81:69:
f0:77:94:4d:65:31:18:21:16:1b:8d:c2:d0:09:f3:f2:77:a5:
29:54:3f:54:4d:a9:95:87:cc:97:fa:a7:94:09:79:62:71:d5:
4f:77:cb:b8:44:cc:b4:55:fd:bf:1e:be:f3:7f:0f:d4:ae:0e:
3e:27:aa:b7:07:71:88:93:e9:90:3a:a9:c2:ec:a3:63:31:00:
2c:ee:35:5c:ae:64:af:64:6c:da:b9:a0:3c:86:6b:d1:90:a1:
38:16:10:d5:d8:a9:69:38:03:70:a9:34:6e:da:ae:de:25:4e:
9f:76:bc:43:8c:2e:2a:4b:1d:e8:a6:3e:90:a3:0f:7a:91:70:
45:86:bf:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:31:13 2025 by rpki-client