Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/OgrdfMT2cdxk2qYx-HjTJab30wA.roa
File: OgrdfMT2cdxk2qYx-HjTJab30wA.roa (raw, json)
Hash identifier: sZRCdsA6H8TuR1FQZoKVQarJPi8/mwjWBs/LRPI1K0s=
Subject key identifier: 3A:0A:DD:7C:C4:F6:71:DC:64:DA:A6:31:F8:78:D3:25:A6:F7:D3:00
Certificate issuer: /CN=57b89f5cc78219ea1273f9f53c5b9e33bc5dbeb5
Certificate serial: 0195542BEDE7201DBBDBA68EC3B4CC9E71E2
Authority key identifier: 57:B8:9F:5C:C7:82:19:EA:12:73:F9:F5:3C:5B:9E:33:BC:5D:BE:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7ifXMeCGeoSc_n1PFueM7xdvrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/OgrdfMT2cdxk2qYx-HjTJab30wA.roa
Signing time: Sun 02 Mar 2025 00:05:19 +0000
ROA not before: Sun 02 Mar 2025 00:05:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201150
IP address blocks: 80.75.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 09 Mar 2025 14:22:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:54:2b:ed:e7:20:1d:bb:db:a6:8e:c3:b4:cc:9e:71:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b89f5cc78219ea1273f9f53c5b9e33bc5dbeb5
Validity
Not Before: Mar 2 00:05:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a0add7cc4f671dc64daa631f878d325a6f7d300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f5:c4:5c:b4:41:ca:5d:20:5d:de:3a:ab:a4:
20:eb:1a:47:b2:5a:47:b3:d8:28:a0:6e:a3:18:38:
24:ec:91:76:60:04:2f:09:49:91:c6:db:33:2b:51:
f6:93:4e:62:3a:56:bb:85:90:77:08:21:a2:a8:78:
d6:8e:05:5e:9e:f0:82:24:10:27:28:8b:b8:03:39:
db:0c:75:f8:db:8e:2a:95:2c:83:3f:38:f0:5b:5c:
bd:bc:c4:9a:40:d1:76:fb:65:4e:3c:9b:c5:00:73:
3d:7a:23:3d:de:63:b2:3b:b8:cb:41:49:b1:1e:0d:
b9:7a:e4:2b:35:fa:67:26:37:60:0a:9a:82:8c:34:
35:ed:c3:72:02:81:4b:6d:06:16:1c:08:3e:c5:90:
ba:0c:77:c6:b4:8a:e2:f0:74:87:f0:6b:d0:a8:1c:
60:b4:fd:00:06:86:09:88:96:ee:03:e6:b0:ec:7a:
c6:ca:2a:ab:e9:b5:d5:31:d0:ef:fd:46:23:b6:02:
8d:d0:86:fa:38:00:73:b1:24:de:5c:f3:26:5f:bb:
d8:b2:c9:2d:95:29:b9:be:59:91:e7:43:39:c0:a8:
e4:90:a7:d1:99:52:e0:de:db:cc:8a:c3:65:ce:40:
8a:25:f3:d4:ec:40:93:c4:45:06:05:1a:60:97:e8:
fe:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:0A:DD:7C:C4:F6:71:DC:64:DA:A6:31:F8:78:D3:25:A6:F7:D3:00
X509v3 Authority Key Identifier:
keyid:57:B8:9F:5C:C7:82:19:EA:12:73:F9:F5:3C:5B:9E:33:BC:5D:BE:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7ifXMeCGeoSc_n1PFueM7xdvrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/OgrdfMT2cdxk2qYx-HjTJab30wA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/V7ifXMeCGeoSc_n1PFueM7xdvrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.215.0/24
Signature Algorithm: sha256WithRSAEncryption
92:84:5a:35:74:4b:3f:7f:56:fb:6a:02:f9:6c:ee:68:20:05:
4a:b0:bf:ca:e2:5b:6c:79:1d:ff:2e:bf:31:1d:0e:f6:c4:01:
df:1e:46:96:79:3c:68:d2:5c:75:8e:9d:21:9a:73:44:2f:99:
83:56:09:24:b7:e7:3e:90:24:3c:01:e2:1d:76:a7:f2:cb:e3:
4a:e7:67:b5:85:58:e1:06:b5:fd:2e:b0:4a:ee:ce:da:27:07:
e0:91:36:3f:0f:70:72:93:87:0c:60:e0:3a:bc:d4:f6:d0:a9:
2a:22:be:22:5f:71:2d:59:c0:56:f9:ee:a0:09:4c:ec:af:a5:
43:32:a7:44:22:6d:3a:90:1a:09:b3:aa:a3:08:b0:46:2f:98:
09:8b:34:49:5c:0a:14:78:5d:71:ac:0f:a2:c4:0f:b0:35:ca:
01:20:59:8b:49:87:c0:9c:0b:85:8b:c2:5b:ca:07:0f:a8:ed:
03:63:c5:a6:f7:ca:6d:e6:a0:5e:b8:c7:99:1e:99:20:c4:fb:
57:98:20:bc:a5:68:8c:9d:80:bc:6d:aa:05:39:5c:c8:b7:47:
e1:9a:c9:d1:54:bb:83:10:27:f9:3f:72:48:19:41:bf:11:1e:
98:f8:ab:f8:ef:c7:05:91:4e:d1:42:14:2b:32:a7:74:c2:88:
ea:f3:aa:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:21:37 2025 by rpki-client