Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/995M8eM1gyjyjiBhlptvo6L6LjY.roa
File: 995M8eM1gyjyjiBhlptvo6L6LjY.roa (raw, json)
Hash identifier: qpdgQQSxlXcbCqbRSV7as5L+jUskP5ScUiadxKRsVF8=
Subject key identifier: F7:DE:4C:F1:E3:35:83:28:F2:8E:20:61:96:9B:6F:A3:A2:FA:2E:36
Certificate issuer: /CN=dc167379b591e95710cf7f31de2ec73ffbfb5ae7
Certificate serial: 01942521E81D42951C104C47305EFC1CA484
Authority key identifier: DC:16:73:79:B5:91:E9:57:10:CF:7F:31:DE:2E:C7:3F:FB:FB:5A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BZzebWR6VcQz38x3i7HP_v7Wuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/995M8eM1gyjyjiBhlptvo6L6LjY.roa
Signing time: Thu 02 Jan 2025 03:49:26 +0000
ROA not before: Thu 02 Jan 2025 03:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216315
IP address blocks: 83.220.30.0/24 maxlen: 24
83.220.31.0/24 maxlen: 24
2a13:abc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 03 Apr 2025 07:45:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:e8:1d:42:95:1c:10:4c:47:30:5e:fc:1c:a4:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc167379b591e95710cf7f31de2ec73ffbfb5ae7
Validity
Not Before: Jan 2 03:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7de4cf1e3358328f28e2061969b6fa3a2fa2e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ed:ac:37:e2:46:3b:18:15:b1:c4:1d:79:a1:
1b:92:95:32:4d:fa:07:76:f7:a2:45:3b:70:c5:37:
c7:9d:23:06:01:d6:ac:73:16:ce:a8:7e:7e:03:48:
30:3e:c5:eb:d1:78:a5:b7:84:03:fd:7f:e0:54:0f:
86:ed:f2:df:fc:6b:70:4f:9c:83:5b:95:e5:2c:bf:
dd:93:d5:88:bd:b9:12:7e:cd:28:f9:3c:17:f1:b5:
79:e9:ca:6c:6a:01:5f:5c:22:39:8b:bc:6b:b8:ae:
b8:46:b6:05:af:94:30:c6:5d:01:70:98:51:0e:f0:
5e:1a:3e:b1:f8:58:4c:1c:1c:09:97:bd:36:fc:02:
20:ca:2c:2c:ef:a7:fe:09:d6:f4:19:1d:da:9d:3f:
43:0a:b8:05:50:e6:09:6e:21:7c:fd:51:b4:a6:54:
7b:01:67:c9:56:ba:0d:0b:32:f8:96:c2:51:55:2a:
a8:5d:90:fc:eb:29:bf:e2:e4:c1:89:0c:f1:de:22:
a7:bb:c0:2d:52:0d:28:05:a1:28:97:bd:60:b3:3a:
01:05:a0:3e:b7:a8:7b:cf:80:52:48:60:39:0e:6a:
44:4c:95:a4:67:7f:0b:dc:a3:de:ea:06:f2:c4:2f:
97:dc:86:63:bb:2a:7b:bf:48:df:a1:67:d2:11:8d:
19:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DE:4C:F1:E3:35:83:28:F2:8E:20:61:96:9B:6F:A3:A2:FA:2E:36
X509v3 Authority Key Identifier:
keyid:DC:16:73:79:B5:91:E9:57:10:CF:7F:31:DE:2E:C7:3F:FB:FB:5A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BZzebWR6VcQz38x3i7HP_v7Wuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/995M8eM1gyjyjiBhlptvo6L6LjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.220.30.0/23
IPv6:
2a13:abc0::/29
Signature Algorithm: sha256WithRSAEncryption
38:6e:b4:8c:05:38:cd:cf:18:62:bd:36:2a:24:e7:df:05:27:
8a:2a:1a:17:20:45:e8:84:25:10:90:0c:8c:94:c4:b3:01:db:
3f:d8:c5:49:be:32:2b:e9:6b:78:7a:6b:24:59:90:db:85:b6:
95:8b:89:4a:ce:dd:e1:ed:74:9a:7d:00:aa:ad:09:1d:e0:12:
c3:2b:fc:9b:00:d3:ec:54:d3:a0:78:ae:cc:e4:89:1a:43:bb:
09:d6:5d:81:a6:5d:48:61:36:27:34:68:3a:6d:2d:10:99:d6:
00:ac:74:7b:73:ee:f9:da:c2:b3:ee:16:49:e3:09:01:7c:e6:
de:56:da:e5:60:07:44:56:7f:b2:b3:56:e6:2a:ff:be:e9:5d:
25:95:f1:a9:23:03:b3:3c:26:e0:74:3a:70:f4:27:5d:e6:92:
b9:67:ce:49:1f:26:6a:03:6c:7e:f6:84:45:35:4f:70:f3:89:
3e:0b:8a:79:a0:bd:bf:d5:dd:f3:d3:ec:29:c7:52:2c:85:9a:
c5:6f:cf:f2:ea:17:b1:56:02:b1:7a:29:47:ec:32:e3:17:2d:
61:cc:b4:6c:a0:e7:da:05:b8:cd:df:2a:41:73:19:fd:30:ec:
6d:28:50:bf:5e:ea:80:3a:85:39:01:af:81:75:61:38:59:7d:
a4:8d:0b:ea
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQlIegdQpUcEExHMF78HKSEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMTY3Mzc5YjU5MWU5NTcxMGNmN2YzMWRlMmVjNzNmZmJm
YjVhZTcwHhcNMjUwMTAyMDM0OTI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmN2RlNGNmMWUzMzU4MzI4ZjI4ZTIwNjE5NjliNmZhM2EyZmEyZTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzu2sN+JGOxgVscQdeaEbkpUyTfoH
dveiRTtwxTfHnSMGAdascxbOqH5+A0gwPsXr0Xilt4QD/X/gVA+G7fLf/GtwT5yD
W5XlLL/dk9WIvbkSfs0o+TwX8bV56cpsagFfXCI5i7xruK64RrYFr5Qwxl0BcJhR
DvBeGj6x+FhMHBwJl702/AIgyiws76f+Cdb0GR3anT9DCrgFUOYJbiF8/VG0plR7
AWfJVroNCzL4lsJRVSqoXZD86ym/4uTBiQzx3iKnu8AtUg0oBaEol71gszoBBaA+
t6h7z4BSSGA5DmpETJWkZ38L3KPe6gbyxC+X3IZjuyp7v0jfoWfSEY0ZtwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFPfeTPHjNYMo8o4gYZabb6Oi+i42MB8GA1UdIwQY
MBaAFNwWc3m1kelXEM9/Md4uxz/7+1rnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0JaemViV1I2VmNRejM4eDNpN0hQX3Y3V3VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8xNWFiYzMtYzRlMy00YmE5LTgyYWUt
NWY2MjBiMzhiOTA4LzEvOTk1TThlTTFneWp5amlCaGxwdHZvNkw2TGpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi8xNWFiYzMtYzRlMy00YmE5LTgyYWUtNWY2MjBiMzhiOTA4
LzEvM0JaemViV1I2VmNRejM4eDNpN0hQX3Y3V3VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBU9weMA0E
AgACMAcDBQMqE6vAMA0GCSqGSIb3DQEBCwUAA4IBAQA4brSMBTjNzxhivTYqJOff
BSeKKhoXIEXohCUQkAyMlMSzAds/2MVJvjIr6Wt4emskWZDbhbaVi4lKzt3h7XSa
fQCqrQkd4BLDK/ybANPsVNOgeK7M5IkaQ7sJ1l2Bpl1IYTYnNGg6bS0QmdYArHR7
c+752sKz7hZJ4wkBfObeVtrlYAdEVn+ys1bmKv++6V0llfGpIwOzPCbgdDpw9Cdd
5pK5Z85JHyZqA2x+9oRFNU9w84k+C4p5oL2/1d3z0+wpx1IshZrFb8/y6hexVgKx
eilH7DLjFy1hzLRsoOfaBbjN3ypBcxn9MOxtKFC/XuqAOoU5Aa+BdWE4WX2kjQvq
-----END CERTIFICATE-----
Generated at Tue Apr 22 20:56:49 2025 by rpki-client