Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/OkXRLJRo77tPUQFXir2yuKzP7q0.roa
File: OkXRLJRo77tPUQFXir2yuKzP7q0.roa (raw, json)
Hash identifier: Y4DZXcFvaEQE/VWC/zWUs+l44q0Ezaj/jKCMCsnGJSU=
Subject key identifier: 3A:45:D1:2C:94:68:EF:BB:4F:51:01:57:8A:BD:B2:B8:AC:CF:EE:AD
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 01955CFE889C201A64D16FD8911B2D4375C3
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/OkXRLJRo77tPUQFXir2yuKzP7q0.roa
Signing time: Mon 03 Mar 2025 17:12:19 +0000
ROA not before: Mon 03 Mar 2025 17:12:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 94.154.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 09 Mar 2025 16:33:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5c:fe:88:9c:20:1a:64:d1:6f:d8:91:1b:2d:43:75:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Mar 3 17:12:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a45d12c9468efbb4f5101578abdb2b8accfeead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e1:39:34:7b:77:30:94:ec:07:c2:b3:5e:d6:
f6:af:49:86:3d:9b:5b:ef:49:d0:d0:5f:a9:ee:20:
e5:82:bf:44:9c:63:47:6a:77:34:87:23:a2:9b:9e:
17:63:53:47:e4:be:39:77:91:37:38:23:f9:9b:ae:
18:a2:ce:3d:91:2e:46:21:52:28:6a:ba:62:76:8c:
8c:6c:5e:76:e7:a8:fe:b5:10:d2:7f:da:66:08:21:
86:a3:53:9a:cd:fb:46:93:c1:69:10:59:ad:28:fb:
eb:7d:26:e1:ba:09:96:71:da:5a:03:a6:e4:a3:92:
27:59:d9:2a:b8:db:bf:9e:90:29:e0:99:5d:99:bc:
a7:55:56:b5:66:3d:e4:36:43:49:4c:cd:c5:dc:4b:
f6:19:a3:d3:28:c9:8c:92:8a:d5:2f:7f:ad:c5:ee:
48:32:2d:a9:78:db:a1:1b:25:af:27:b4:a4:e5:b8:
bd:25:29:62:2a:70:d4:1a:3d:a4:23:b8:7a:54:8e:
5e:c1:e3:f0:f8:c1:93:e3:d9:ec:61:f6:33:d2:9f:
98:30:fd:df:ea:e7:c2:ef:88:90:4a:64:d3:e9:76:
92:c3:7c:96:e1:6c:71:4f:ef:df:c4:5b:db:3f:f0:
8c:56:35:aa:5f:21:ff:84:da:c3:1f:7c:8c:8a:d4:
0b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:45:D1:2C:94:68:EF:BB:4F:51:01:57:8A:BD:B2:B8:AC:CF:EE:AD
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/OkXRLJRo77tPUQFXir2yuKzP7q0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.33.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:5d:7f:ba:3a:1a:6f:a8:ee:7d:7b:c5:d1:64:8b:15:b2:37:
2c:a3:e8:50:03:b0:2b:cd:86:26:d6:98:16:93:3b:03:ad:bd:
10:76:9d:50:98:32:27:3c:78:fe:4c:63:86:0a:df:66:34:e4:
91:fc:f1:09:c6:52:40:2d:ea:4c:3d:d4:2a:72:c2:ea:54:05:
08:dc:ec:2d:e4:db:83:88:43:70:3b:4e:f0:85:0c:57:aa:66:
5d:f0:80:62:35:bb:09:b7:a4:e0:72:62:af:cd:a6:12:4e:77:
99:1f:5b:00:22:a0:01:ea:09:8a:63:c5:01:e6:aa:1f:46:72:
97:8c:9a:fb:8c:b2:d6:de:bf:53:6f:e1:73:ec:6c:ea:3e:73:
53:d5:a2:09:e9:8f:4c:3f:3a:ba:d2:0a:33:58:74:26:a5:7f:
cf:d6:f8:a1:42:3a:c6:6d:97:43:8b:ca:92:db:2a:8a:c3:57:
88:1a:27:65:dc:d5:a7:55:cf:03:b2:8c:1c:33:b6:ed:b1:89:
e6:9b:1f:e2:27:ae:90:5a:fc:19:b2:8a:ae:84:c2:0c:07:fb:
43:81:f7:d2:cd:99:a7:57:40:cb:43:7b:ab:ce:63:67:8b:f1:
48:55:1b:b7:50:94:21:53:e1:40:a2:4e:8e:3f:98:37:97:6e:
6f:3e:43:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZVc/oicIBpk0W/YkRstQ3XDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5
MjFmODgwHhcNMjUwMzAzMTcxMjE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTQ1ZDEyYzk0NjhlZmJiNGY1MTAxNTc4YWJkYjJiOGFjY2ZlZWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeE5NHt3MJTsB8KzXtb2r0mGPZtb
70nQ0F+p7iDlgr9EnGNHanc0hyOim54XY1NH5L45d5E3OCP5m64Yos49kS5GIVIo
arpidoyMbF5256j+tRDSf9pmCCGGo1OazftGk8FpEFmtKPvrfSbhugmWcdpaA6bk
o5InWdkquNu/npAp4JldmbynVVa1Zj3kNkNJTM3F3Ev2GaPTKMmMkorVL3+txe5I
Mi2peNuhGyWvJ7Sk5bi9JSliKnDUGj2kI7h6VI5ewePw+MGT49nsYfYz0p+YMP3f
6ufC74iQSmTT6XaSw3yW4WxxT+/fxFvbP/CMVjWqXyH/hNrDH3yMitQLLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDpF0SyUaO+7T1EBV4q9srisz+6tMB8GA1UdIwQY
MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt
YTE4NGYzNTU2ZTQzLzEvT2tYUkxKUm83N3RQVVFGWGlyMnl1S3pQN3EwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgtYTE4NGYzNTU2ZTQz
LzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXpohMA0G
CSqGSIb3DQEBCwUAA4IBAQCuXX+6OhpvqO59e8XRZIsVsjcso+hQA7ArzYYm1pgW
kzsDrb0Qdp1QmDInPHj+TGOGCt9mNOSR/PEJxlJALepMPdQqcsLqVAUI3Owt5NuD
iENwO07whQxXqmZd8IBiNbsJt6TgcmKvzaYSTneZH1sAIqAB6gmKY8UB5qofRnKX
jJr7jLLW3r9Tb+Fz7GzqPnNT1aIJ6Y9MPzq60gozWHQmpX/P1vihQjrGbZdDi8qS
2yqKw1eIGidl3NWnVc8DsowcM7btsYnmmx/iJ66QWvwZsoquhMIMB/tDgffSzZmn
V0DLQ3urzmNni/FIVRu3UJQhU+FAok6OP5g3l25vPkMR
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:28:25 2025 by rpki-client