Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212150.roa
File: AS212150.roa (raw, json)
Hash identifier: ZfgOKd+kac7Ii4iX5NGSGv6kCIq3Ry5xN6gsmWd/kgU=
Subject key identifier: 23:DB:5C:74:35:A9:39:94:1C:34:8E:72:C6:A1:EA:8A:82:A1:5E:40
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 0E5C29E97EFACFA0E6B480CDEBC73D38A3ED498F
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212150.roa
Signing time: Tue 25 Feb 2025 12:55:06 +0000
ROA not before: Tue 25 Feb 2025 12:50:06 +0000
ROA not after: Tue 24 Feb 2026 12:55:06 +0000
asID: 212150
IP address blocks: 95.135.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Mar 2025 00:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:5c:29:e9:7e:fa:cf:a0:e6:b4:80:cd:eb:c7:3d:38:a3:ed:49:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 25 12:50:06 2025 GMT
Not After : Feb 24 12:55:06 2026 GMT
Subject: CN=23DB5C7435A939941C348E72C6A1EA8A82A15E40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:72:32:59:ab:2f:37:4b:b5:18:d4:07:02:f2:
ab:6e:ea:d8:9c:13:ad:97:68:18:09:2e:ff:d8:57:
5c:4e:03:54:c3:5c:cb:be:fc:77:d1:5c:2a:6b:cb:
0e:4f:0e:e1:55:25:63:2d:82:89:21:8d:14:10:6a:
b5:f1:7c:c2:b7:33:37:ef:f6:2d:7f:0a:e1:79:2a:
7d:ce:09:3b:bf:06:fb:0c:ea:95:6d:5a:0a:ed:e8:
86:40:e3:9d:b8:e0:9a:69:31:16:42:9d:38:85:cd:
a2:e8:1f:36:d8:e9:10:2c:6e:37:d5:a2:a6:38:8a:
f1:55:7e:13:36:a7:8a:e8:5b:d6:de:b1:63:ba:17:
eb:35:86:ea:94:08:f7:6b:df:84:2c:70:fd:b4:6b:
7f:1d:cb:34:86:bf:fc:4a:bf:14:00:6f:ce:44:c5:
04:4a:20:f8:f5:4a:4d:42:85:dc:5a:dd:f5:a0:62:
78:3f:b6:15:15:c5:53:e9:54:5f:b2:d1:d4:4b:15:
8e:d1:b3:e8:27:2b:c7:c1:83:b0:9a:6d:45:d3:6e:
66:4d:77:b7:67:37:f5:7a:d3:82:a3:bd:d2:d2:9c:
9f:f4:2e:d1:f6:6c:0f:83:28:d4:c8:6b:32:ab:9e:
e6:15:5e:6e:84:62:16:53:66:47:0c:9f:7a:6a:84:
98:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DB:5C:74:35:A9:39:94:1C:34:8E:72:C6:A1:EA:8A:82:A1:5E:40
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212150.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.135.138.0/24
Signature Algorithm: sha256WithRSAEncryption
15:5b:59:b2:b1:85:49:f7:81:32:d6:85:9f:b2:12:30:c6:b0:
9e:e2:81:5b:9b:7e:01:51:8d:b7:3d:e4:14:cc:76:f3:2f:be:
dd:ef:7f:77:a9:c1:9f:5e:61:40:00:b8:bd:25:2c:24:25:64:
1b:87:09:70:02:e1:7a:83:55:de:1b:2e:31:77:16:91:a9:f7:
a4:78:33:00:b3:d0:5a:f1:c6:61:d6:71:8d:5d:98:16:6b:83:
00:a1:eb:2c:3d:c6:e7:02:2e:f8:fc:21:8a:96:32:48:38:b9:
fe:84:f7:49:7e:fb:64:82:11:02:8e:f8:15:96:78:d4:15:cd:
01:7d:9d:e7:b9:97:f0:7e:21:54:dc:40:90:53:8a:21:4d:c9:
b2:c3:53:b2:f2:c7:60:75:c9:74:2b:0f:d8:d0:2a:7c:a9:3b:
df:c3:46:4b:85:f5:15:95:06:88:eb:d9:f6:d6:78:ec:1f:16:
6c:31:0a:7b:16:ff:0f:8d:6e:e1:87:6e:3b:12:6e:b2:ff:64:
21:1c:94:be:69:21:32:92:0b:c9:13:6c:b7:f7:ef:03:9d:dc:
c7:1b:d1:75:ee:fa:53:3c:04:32:08:8e:19:49:9a:f7:63:21:
5c:ef:da:b4:4b:a2:97:f6:50:ff:c9:b2:af:2d:e9:d2:d6:f7:
d7:17:ac:9a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUDlwp6X76z6DmtIDN68c9OKPtSY8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTAyMjUxMjUwMDZaFw0yNjAyMjQxMjU1MDZaMDMxMTAvBgNV
BAMTKDIzREI1Qzc0MzVBOTM5OTQxQzM0OEU3MkM2QTFFQThBODJBMTVFNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmcjJZqy83S7UY1AcC8qtu6tic
E62XaBgJLv/YV1xOA1TDXMu+/HfRXCpryw5PDuFVJWMtgokhjRQQarXxfMK3Mzfv
9i1/CuF5Kn3OCTu/BvsM6pVtWgrt6IZA45244JppMRZCnTiFzaLoHzbY6RAsbjfV
oqY4ivFVfhM2p4roW9besWO6F+s1huqUCPdr34QscP20a38dyzSGv/xKvxQAb85E
xQRKIPj1Sk1Chdxa3fWgYng/thUVxVPpVF+y0dRLFY7Rs+gnK8fBg7CabUXTbmZN
d7dnN/V604KjvdLSnJ/0LtH2bA+DKNTIazKrnuYVXm6EYhZTZkcMn3pqhJh5AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUI9tcdDWpOZQcNI5yxqHqioKhXkAwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjEyMTUwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX4eK
MA0GCSqGSIb3DQEBCwUAA4IBAQAVW1mysYVJ94Ey1oWfshIwxrCe4oFbm34BUY23
PeQUzHbzL77d7393qcGfXmFAALi9JSwkJWQbhwlwAuF6g1XeGy4xdxaRqfekeDMA
s9Ba8cZh1nGNXZgWa4MAoessPcbnAi74/CGKljJIOLn+hPdJfvtkghECjvgVlnjU
Fc0BfZ3nuZfwfiFU3ECQU4ohTcmyw1Oy8sdgdcl0Kw/Y0Cp8qTvfw0ZLhfUVlQaI
69n21njsHxZsMQp7Fv8PjW7hh247Em6y/2QhHJS+aSEykgvJE2y39+8DndzHG9F1
7vpTPAQyCI4ZSZr3YyFc79q0S6KX9lD/ybKvLenS1vfXF6ya
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:34:04 2025 by rpki-client