Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/oK82Wyyz3CQABHzoYgJF6JqAzhc.roa
File: oK82Wyyz3CQABHzoYgJF6JqAzhc.roa (raw, json)
Hash identifier: b8pxGk50BBSekuZaYpc04t5/HHRUvIteYIVi0lslQys=
Subject key identifier: A0:AF:36:5B:2C:B3:DC:24:00:04:7C:E8:62:02:45:E8:9A:80:CE:17
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194734320B8F1EF0F0FDC64032EE0FF2EA4
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/oK82Wyyz3CQABHzoYgJF6JqAzhc.roa
Signing time: Fri 17 Jan 2025 07:56:06 +0000
ROA not before: Fri 17 Jan 2025 07:56:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 37.139.130.0/24 maxlen: 24
45.149.243.0/24 maxlen: 24
79.110.48.0/24 maxlen: 24
79.110.61.0/24 maxlen: 24
85.217.144.0/23 maxlen: 24
185.225.74.0/23 maxlen: 24
193.35.18.0/24 maxlen: 24
193.149.28.0/22 maxlen: 24
212.115.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Feb 2025 11:25:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:73:43:20:b8:f1:ef:0f:0f:dc:64:03:2e:e0:ff:2e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 17 07:56:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0af365b2cb3dc2400047ce8620245e89a80ce17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7c:27:9c:62:cd:b8:e1:4d:bc:d5:14:e7:34:
01:54:ef:42:34:2a:01:58:57:03:41:42:f6:dd:f4:
36:49:1b:bb:f0:ee:14:3e:86:9d:8e:04:6a:e3:21:
ce:cd:4b:83:20:c7:0b:55:80:bc:aa:8d:41:38:e8:
4f:ea:71:8a:df:0f:51:37:c1:0d:82:83:32:8c:be:
9f:5e:e3:de:bf:73:03:bb:a5:cc:4a:cd:1b:8a:0b:
e6:72:e1:55:02:ce:c8:77:1a:38:94:12:1f:12:fe:
50:41:90:57:3a:e1:ce:3f:64:ce:25:3b:45:b8:9f:
12:56:96:57:ba:ed:17:9c:b6:36:7a:c5:97:12:e1:
9f:a5:c6:9e:3b:4d:f7:64:e1:b0:ae:8b:83:d2:4b:
54:48:e9:aa:3f:11:ac:53:0d:89:31:96:81:18:97:
b9:32:e9:f2:bb:17:9c:92:f6:68:f8:d7:5c:c7:03:
69:84:2f:43:88:2e:77:b4:15:73:52:fd:38:60:11:
69:f0:29:47:36:37:b6:ed:48:8f:36:17:a6:f4:29:
b0:00:69:36:7b:66:e5:c0:a2:eb:c6:4a:64:99:c1:
9e:e2:42:87:dc:32:62:ea:80:e6:2a:32:2c:37:7c:
d0:4a:d7:b3:57:93:ee:8a:07:6d:83:80:56:69:87:
f8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AF:36:5B:2C:B3:DC:24:00:04:7C:E8:62:02:45:E8:9A:80:CE:17
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/oK82Wyyz3CQABHzoYgJF6JqAzhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.130.0/24
45.149.243.0/24
79.110.48.0/24
79.110.61.0/24
85.217.144.0/23
185.225.74.0/23
193.35.18.0/24
193.149.28.0/22
212.115.41.0/24
Signature Algorithm: sha256WithRSAEncryption
38:60:5b:d2:f5:2a:3c:e8:bd:17:58:4e:51:e9:cf:64:9c:a9:
e5:97:3e:2f:94:1f:33:71:28:65:3d:61:61:d6:ab:f4:e7:e1:
69:87:de:5c:16:aa:ae:03:4c:b4:93:f3:e4:fb:81:a3:87:0f:
15:f5:d0:7d:3c:b8:d8:d9:d8:b5:44:e2:65:64:6c:ec:33:2f:
2d:35:28:36:5d:8c:1e:3f:de:cc:a2:e5:06:06:a2:89:a9:73:
0b:bd:fd:a8:48:36:2c:c2:0d:ef:82:c7:ec:a8:89:95:d7:ac:
6c:cd:3d:02:df:43:52:15:69:f6:db:bc:a0:6d:6e:4e:46:30:
6a:be:de:f1:fb:62:31:0e:16:df:7b:35:dd:16:ae:35:94:dc:
f6:fb:ff:77:83:ba:35:fd:d8:a3:ba:41:4b:21:61:c4:94:c7:
0d:fa:7b:42:9f:39:ae:0e:54:1c:88:97:a1:51:64:6f:df:8d:
ca:30:61:2a:72:8c:61:e6:d4:17:69:a2:14:8a:c4:e3:7a:40:
e1:33:e3:bf:81:3b:63:48:af:98:64:2a:22:4a:ba:c5:ec:47:
e4:e7:74:7e:54:1d:f4:a6:40:a9:5c:70:f8:46:de:4b:4a:7e:
43:16:48:94:c4:36:a7:1d:d4:87:15:4a:36:09:26:73:10:62:
32:98:c6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:36:03 2025 by rpki-client