Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/cLrrre0nlkrt3aFI7K5CBMc1yrI.roa
File: cLrrre0nlkrt3aFI7K5CBMc1yrI.roa (raw, json)
Hash identifier: iBiTs/29jKJ9KY3QLyGn1TZruL4xobBaURfQxCWhmFg=
Subject key identifier: 70:BA:EB:AD:ED:27:96:4A:ED:DD:A1:48:EC:AE:42:04:C7:35:CA:B2
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 019805E2876CC7B814547C017AAE570B6AB8
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/cLrrre0nlkrt3aFI7K5CBMc1yrI.roa
Signing time: Sun 13 Jul 2025 22:23:08 +0000
ROA not before: Sun 13 Jul 2025 22:23:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 212.116.228.0/22 maxlen: 24
212.116.229.0/24 maxlen: 24
212.116.236.0/24 maxlen: 24
212.116.238.0/23 maxlen: 24
212.116.244.0/24 maxlen: 24
212.116.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 20 Jul 2025 14:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:05:e2:87:6c:c7:b8:14:54:7c:01:7a:ae:57:0b:6a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Jul 13 22:23:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70baebaded27964aeddda148ecae4204c735cab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:bf:b6:d1:fa:50:3f:0e:2d:60:83:bd:83:f7:
06:4b:62:89:fe:48:91:5c:83:4c:26:27:3a:5e:e7:
61:82:f9:9f:74:75:11:72:09:5d:f4:d2:2d:28:7b:
27:f3:a4:2a:b1:87:57:63:0a:20:46:9c:ab:57:75:
85:8e:a8:ce:76:b9:fa:06:11:26:42:4a:fa:36:d2:
e3:ae:bd:23:09:7e:30:d9:5f:66:7f:47:26:19:f6:
42:49:45:1f:28:f1:3c:66:e1:02:a6:69:55:49:31:
03:29:00:64:28:c3:92:1c:55:9d:0e:9a:56:30:3f:
e1:c7:3a:19:97:1b:da:c3:f8:f5:73:c2:90:e1:11:
63:62:83:f1:3f:f7:68:7c:8f:d4:8e:42:c2:88:a7:
e2:92:0a:cd:72:1b:8a:0e:1b:f5:6a:e8:89:57:8c:
cb:1e:44:c7:a9:14:cb:2d:dd:a5:51:1a:fa:25:34:
d6:02:09:a7:cc:d4:d4:bc:aa:5a:a2:20:18:82:35:
33:a0:38:f4:45:0d:d2:17:15:c5:b6:b3:91:45:61:
ba:ce:f6:14:5d:11:42:26:91:2b:c2:94:6a:81:e8:
78:4e:10:f5:2a:f3:c1:25:5b:37:0f:ff:47:83:09:
59:eb:8c:ab:b1:c3:c0:98:e3:ea:a1:cb:d3:e8:fd:
8d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:BA:EB:AD:ED:27:96:4A:ED:DD:A1:48:EC:AE:42:04:C7:35:CA:B2
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/cLrrre0nlkrt3aFI7K5CBMc1yrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.228.0/22
212.116.236.0/24
212.116.238.0/23
212.116.244.0/24
212.116.246.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:ba:0c:5a:49:a1:01:44:89:23:be:0d:e1:0e:42:b1:c0:60:
25:1f:e1:40:30:60:2a:4b:24:12:b7:e8:d9:da:c2:4a:d6:c9:
a5:2d:60:1c:e9:6b:3e:50:96:31:88:ed:61:62:50:cf:50:9e:
a9:fd:78:b1:ce:3d:ec:c3:a3:26:8a:bc:0a:5f:7f:32:3a:f9:
6a:fd:71:39:bc:cd:5e:30:24:5c:e2:37:cb:4f:08:8c:a7:9b:
3d:3c:ff:31:e2:95:f6:cc:d2:0e:1c:2e:f3:50:9f:d0:ef:6e:
14:e5:d7:fc:b6:6e:d0:66:fa:fb:b1:f3:dd:22:36:16:88:4b:
29:34:07:1b:26:2e:96:d4:0b:8c:65:52:47:10:a8:b4:bb:9d:
69:e5:52:e8:2d:87:7b:cb:f8:1f:a8:ef:e4:7a:83:ba:7f:85:
84:96:77:9d:b9:9d:4c:0a:9b:76:89:4f:35:a5:76:28:ac:c2:
13:e1:81:d8:39:6d:c7:9c:56:b3:3d:78:67:d8:a7:4e:ce:ae:
7b:89:2d:14:6b:14:43:bb:1a:07:ed:11:12:2f:25:3d:6b:cf:
fa:8e:5c:18:cb:f9:ba:98:ed:de:e3:3a:a9:53:df:f7:96:f2:
24:c2:70:dc:d8:d1:dc:11:3c:1d:04:4f:88:b2:f3:78:c0:30:
e2:ea:7e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 23:36:13 2025 by rpki-client