Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ozvxE-6bL0PbXJ4TpI5SfneqFCo.roa
File: ozvxE-6bL0PbXJ4TpI5SfneqFCo.roa (raw, json)
Hash identifier: yV2l8VGqhWn+UKnRXuGlmph4vbBxx2WLGusEd/+Ifmc=
Subject key identifier: A3:3B:F1:13:EE:9B:2F:43:DB:5C:9E:13:A4:8E:52:7E:77:AA:14:2A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197FE7327F5E419EBED8B6464DA54831789
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ozvxE-6bL0PbXJ4TpI5SfneqFCo.roa
Signing time: Sat 12 Jul 2025 11:44:09 +0000
ROA not before: Sat 12 Jul 2025 11:44:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198584
IP address blocks: 94.183.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Jul 2025 06:08:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:fe:73:27:f5:e4:19:eb:ed:8b:64:64:da:54:83:17:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 12 11:44:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a33bf113ee9b2f43db5c9e13a48e527e77aa142a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0b:e0:34:f8:9b:88:32:e8:2b:d4:4a:ab:43:
b4:a7:cf:1a:fd:67:f2:66:b5:0b:3f:bf:b0:66:d2:
c1:d1:5f:59:cb:75:1e:f6:2e:c2:0b:39:55:34:44:
c2:7c:51:98:33:91:9f:d6:c4:8d:a6:8e:36:f7:99:
b2:86:39:67:0b:00:b1:cc:a5:a5:9f:8f:c5:02:ec:
d6:5d:b0:13:aa:6f:ea:ca:0f:c0:45:8e:2d:e5:6d:
88:64:5f:02:92:b0:df:3f:e2:df:68:3d:2a:5b:50:
8c:62:e9:29:d3:80:66:82:6d:9f:f5:c6:30:f9:68:
c3:d3:12:76:d8:2d:ca:0f:36:14:db:55:7c:02:aa:
c9:64:16:2b:70:24:30:2c:16:ec:df:74:4c:5a:53:
e8:7f:a5:86:18:e8:ed:69:17:51:a6:3c:4e:f8:bc:
be:4c:ba:20:97:5e:6b:df:dc:3e:16:7e:fc:d1:5d:
01:bf:90:fc:81:77:1f:43:d0:a2:32:e3:98:b7:9a:
26:30:7d:f0:45:21:11:bf:95:6e:0c:b3:f3:13:9a:
01:e6:45:22:9c:c1:a7:e1:4b:e0:de:8e:c3:84:a7:
32:25:1f:00:2f:fd:77:cc:58:b3:c7:43:70:a4:07:
8d:99:f6:6b:88:82:f3:ab:3d:7c:e2:70:70:6d:2f:
8e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:3B:F1:13:EE:9B:2F:43:DB:5C:9E:13:A4:8E:52:7E:77:AA:14:2A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ozvxE-6bL0PbXJ4TpI5SfneqFCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.168.0/24
Signature Algorithm: sha256WithRSAEncryption
99:61:fa:7e:da:b0:2c:49:3b:77:b7:8b:08:28:f3:5b:63:df:
03:59:9c:1d:82:71:fb:c8:a2:7d:a2:76:d3:25:64:d7:f5:76:
03:d6:43:e1:94:bb:8a:56:8e:d4:25:be:1c:4c:76:7d:60:be:
1e:fb:46:eb:10:d4:e8:7a:b9:53:ac:5e:e0:dc:34:42:06:90:
26:ca:eb:97:c1:c9:db:fc:1a:57:b7:f1:4d:47:25:bc:46:a2:
0c:24:c9:ef:ad:8c:fa:69:8f:e1:b2:17:6d:87:dd:1e:5e:21:
65:77:97:27:77:a8:64:fb:01:58:29:89:83:d0:3c:d2:8c:10:
d9:dc:68:12:c2:1c:16:49:e9:36:35:ad:21:c9:6f:11:ef:c6:
1f:60:ee:eb:d1:81:d2:9c:db:93:ab:de:37:bd:06:f8:36:99:
21:d9:29:40:80:bb:be:57:47:c5:ea:48:57:8f:ff:c9:c0:ae:
b3:7c:7d:2d:1e:29:01:22:9a:1c:57:4e:32:ad:2b:f7:47:d6:
f0:8a:e2:0d:34:01:f5:df:d1:7e:6c:00:2a:61:9e:4e:a7:5f:
6a:91:7b:02:94:0c:e1:a4:74:6f:8a:ce:c2:db:3d:be:64:e5:
71:ab:d3:6d:03:97:ef:56:fa:0c:b1:96:5f:74:32:2c:d3:b5:
00:8a:8e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 16:24:57 2025 by rpki-client