Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OO93xLGavgiPUNAa6HE22KkK3jE.roa
File: OO93xLGavgiPUNAa6HE22KkK3jE.roa (raw, json)
Hash identifier: 79lEGQ0A7yoKcAmszynU/it1MdNpbEiPauilUJUqGQk=
Subject key identifier: 38:EF:77:C4:B1:9A:BE:08:8F:50:D0:1A:E8:71:36:D8:A9:0A:DE:31
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0195AD85ED75FAFFCD02DB033718904FAA91
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OO93xLGavgiPUNAa6HE22KkK3jE.roa
Signing time: Wed 19 Mar 2025 08:29:50 +0000
ROA not before: Wed 19 Mar 2025 08:29:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208287
IP address blocks: 82.115.211.0/24 maxlen: 24
185.222.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Mar 2025 17:19:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ad:85:ed:75:fa:ff:cd:02:db:03:37:18:90:4f:aa:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 19 08:29:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38ef77c4b19abe088f50d01ae87136d8a90ade31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5d:10:37:cf:41:03:85:52:13:2f:dd:8a:19:
ff:9c:3a:ef:c8:d9:57:b1:48:d4:cf:72:54:23:f2:
0e:d7:36:b3:46:03:e8:d4:8d:2e:fd:ff:97:a3:33:
00:95:b2:8c:d5:c2:82:e6:5d:0e:46:0a:ea:fe:a2:
91:10:34:5d:a9:59:c9:3e:6b:1b:40:1a:46:ea:75:
e2:82:0d:95:20:91:f7:96:1b:69:24:1c:98:c5:17:
5a:77:bb:0e:8f:98:b8:2a:69:aa:91:51:99:97:4c:
69:8e:06:cb:db:df:97:72:88:55:e2:ce:11:1f:6a:
2c:07:97:cf:e0:df:22:27:d2:c7:47:06:59:e7:b0:
96:37:94:3c:7c:f2:a3:83:96:63:64:59:87:ae:57:
6e:8c:88:60:00:cb:dc:20:07:d1:92:b1:5e:37:0c:
94:09:ed:50:c1:bc:e8:f6:19:72:47:56:58:b5:6a:
d2:ba:ed:1d:dc:86:e5:45:d2:1d:73:33:b7:ee:5d:
33:39:27:16:2f:08:5a:d8:51:3d:4b:19:35:b7:05:
5f:0e:69:fb:81:3e:e1:f2:03:dd:ba:ab:e5:48:32:
b0:d4:2e:e8:ee:a6:20:c2:12:58:74:d0:fe:50:f1:
94:a8:e1:ba:b2:65:11:d7:40:ac:20:88:0b:02:58:
5f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:EF:77:C4:B1:9A:BE:08:8F:50:D0:1A:E8:71:36:D8:A9:0A:DE:31
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OO93xLGavgiPUNAa6HE22KkK3jE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.211.0/24
185.222.162.0/24
Signature Algorithm: sha256WithRSAEncryption
27:f4:1e:b6:6c:3c:2e:b2:14:52:ad:eb:a6:ed:aa:36:39:ad:
a9:55:c6:dd:90:59:60:36:87:07:fa:f9:75:9d:b4:b4:e1:4f:
2a:d4:00:9f:c4:b9:ee:ff:2b:61:c9:4e:27:c4:68:37:06:2d:
d7:f3:c3:c8:bd:0a:53:da:e9:c5:ec:91:6f:95:94:3e:50:59:
ce:58:6f:78:02:56:2a:12:a2:26:c0:83:1d:c7:6f:5b:f0:53:
fb:fa:71:88:f2:df:a9:22:85:09:63:82:48:b7:a3:a8:d3:87:
42:d4:e9:53:84:47:46:5f:c8:72:d3:42:97:14:01:db:91:40:
e6:f4:e5:79:3a:45:89:dd:c5:d9:cf:49:08:79:86:f7:9f:a7:
90:04:ea:bd:5c:32:75:68:47:fc:96:71:aa:13:1e:7b:5d:7f:
b8:37:5b:43:00:dc:83:f1:80:b6:52:10:62:b5:b1:0b:8b:16:
ab:40:80:26:68:7e:ab:88:fe:cb:e4:32:0e:78:f3:93:53:53:
24:8e:41:f6:7b:a0:f5:d1:8d:d0:7a:31:c4:a5:3f:a1:f5:1a:
fb:c2:15:24:ff:20:bc:37:63:2a:7b:7c:be:70:17:36:09:07:
51:77:8e:1e:d6:a5:1c:bb:15:a2:b1:91:a4:1c:f7:61:d9:d4:
bb:be:65:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:26:33 2025 by rpki-client