Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Pg8flSSacA00aq4p-AQdjMa3vrk.roa
File: Pg8flSSacA00aq4p-AQdjMa3vrk.roa (raw, json)
Hash identifier: aAiMhrfnAgzrURaH0wxPEM6ppForwUz5xEzoHpPWhAw=
Subject key identifier: 3E:0F:1F:95:24:9A:70:0D:34:6A:AE:29:F8:04:1D:8C:C6:B7:BE:B9
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0196AE380AB827105D83EF547AFF1994DD19
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Pg8flSSacA00aq4p-AQdjMa3vrk.roa
Signing time: Thu 08 May 2025 04:47:10 +0000
ROA not before: Thu 08 May 2025 04:47:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213896
IP address blocks: 195.211.188.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 May 2025 13:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:38:0a:b8:27:10:5d:83:ef:54:7a:ff:19:94:dd:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: May 8 04:47:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e0f1f95249a700d346aae29f8041d8cc6b7beb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5f:3c:23:3d:a2:d7:5e:55:80:35:12:96:5b:
b3:89:4c:cb:f3:af:d4:6f:a5:00:b9:e7:41:4a:37:
7f:5c:b6:1c:55:19:7c:08:4f:2e:6c:72:79:24:94:
b7:8c:8a:ed:ad:91:fa:af:28:73:da:56:12:17:ca:
a4:78:cb:4d:51:0d:c9:77:03:fe:5e:95:7b:c7:f6:
19:5c:fd:e9:25:b4:59:44:96:b0:81:ff:06:97:ae:
ba:af:09:09:91:48:28:25:eb:55:7b:15:5f:bb:94:
90:0e:4c:13:58:ae:62:0d:c6:92:d8:1d:0e:d2:8c:
9a:db:07:c0:4c:f9:81:61:3c:f6:f8:a7:80:5b:b4:
32:8a:c6:dc:94:e9:d5:7c:4b:c5:db:8a:7e:db:06:
2f:59:f5:06:16:63:13:21:eb:2d:9d:86:56:ce:24:
e9:c1:43:33:ac:1a:d1:de:04:ec:27:22:ba:e5:8e:
01:74:1a:4a:5a:cf:a9:9e:ee:2c:8b:db:2d:ce:2b:
8d:59:46:d0:4e:0d:1b:74:34:38:31:bd:05:42:c7:
d1:07:97:3c:6d:84:e5:5c:85:bd:35:33:4a:84:33:
93:07:44:bf:96:13:a4:cf:6b:cd:7d:69:f9:32:2a:
af:f5:e5:05:78:55:1f:bc:65:ed:11:39:e2:3c:bb:
5b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:0F:1F:95:24:9A:70:0D:34:6A:AE:29:F8:04:1D:8C:C6:B7:BE:B9
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Pg8flSSacA00aq4p-AQdjMa3vrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.211.188.0/24
Signature Algorithm: sha256WithRSAEncryption
35:7b:19:4c:ee:20:a6:62:5d:a2:82:a3:7f:d7:0d:84:77:a7:
83:d5:fb:0f:3e:97:5b:b8:47:92:0e:85:4e:32:b7:56:48:97:
15:a6:4e:11:e1:08:44:81:7d:d2:3e:94:f3:03:89:17:7c:2c:
40:c8:cc:a9:8c:0a:35:aa:3e:35:79:a3:0c:7c:09:43:3f:d6:
40:93:16:8c:f2:60:67:81:3c:aa:11:30:c0:e9:30:26:28:43:
28:cc:b6:84:ff:8c:d9:89:41:00:75:bf:2f:45:e2:93:de:68:
fa:cc:54:9f:51:20:d2:16:85:12:7f:71:61:7e:a5:70:16:09:
7a:1f:95:da:60:5e:77:ba:56:d6:ff:ef:c6:7a:2f:6a:77:0b:
21:69:d6:60:b3:f1:ec:76:16:57:ce:55:3e:92:30:09:82:b6:
ba:0d:08:c0:76:43:a7:8e:a8:6a:3b:33:53:88:37:b1:f9:92:
2a:7d:57:09:79:cd:0c:a3:c4:ce:e0:33:f0:7c:0e:7c:36:7a:
ea:50:cc:9b:ba:b6:62:8d:74:c2:9e:07:b9:76:48:aa:ca:b1:
ad:01:da:5b:2e:14:91:b8:95:c2:cf:28:a6:97:96:27:54:cb:
c3:47:a4:cc:5b:99:d3:cb:d0:0c:d4:8d:51:97:10:86:b9:65:
ec:56:f7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:16:13 2025 by rpki-client