Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/oXrj8Es_VZfK7KX8GKYxU9gt_og.roa
File: oXrj8Es_VZfK7KX8GKYxU9gt_og.roa (raw, json)
Hash identifier: veGhGzS6UagjydW1m9vPIZLmLucoDKE58BThs2LTdec=
Subject key identifier: A1:7A:E3:F0:4B:3F:55:97:CA:EC:A5:FC:18:A6:31:53:D8:2D:FE:88
Certificate issuer: /CN=e15136feff3574ef9b2262de59b06a21908fab3e
Certificate serial: 01955456F55CCBB1B05EF8522E9988D4B522
Authority key identifier: E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/oXrj8Es_VZfK7KX8GKYxU9gt_og.roa
Signing time: Sun 02 Mar 2025 00:52:19 +0000
ROA not before: Sun 02 Mar 2025 00:52:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41227
IP address blocks: 87.247.168.0/22 maxlen: 22
87.247.170.0/23 maxlen: 24
87.247.178.0/24 maxlen: 24
87.247.184.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Mar 2025 23:32:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:54:56:f5:5c:cb:b1:b0:5e:f8:52:2e:99:88:d4:b5:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15136feff3574ef9b2262de59b06a21908fab3e
Validity
Not Before: Mar 2 00:52:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a17ae3f04b3f5597caeca5fc18a63153d82dfe88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1f:31:34:32:1e:f2:4d:2f:2a:72:aa:12:6e:
3b:7e:6a:b8:7b:77:ab:b6:58:39:cd:b2:ed:2a:1d:
75:5a:97:dd:8f:bf:6b:cc:53:17:33:35:10:c9:33:
85:26:72:a0:c4:9c:c2:e3:8a:58:3d:62:dc:9e:c8:
92:9d:a3:ce:99:51:4d:b2:66:ee:57:03:f1:9e:a1:
29:e4:11:6a:e0:2a:db:32:b5:fe:0c:bb:a6:bc:ea:
44:b1:7c:70:fe:1f:20:27:69:80:8a:db:ce:ec:82:
16:b4:a5:15:91:8d:5e:82:4b:58:46:d2:3e:e1:a7:
c3:55:b1:d0:23:ff:ba:ba:fd:af:fc:29:5a:ce:69:
5e:9e:82:03:77:f8:b7:fa:36:4b:93:bf:d3:8e:19:
ee:bd:f0:58:0f:ad:a9:aa:0c:65:71:9c:21:f5:8e:
1e:c4:5b:60:88:15:46:de:b6:2d:27:68:6e:10:ce:
a1:05:61:4c:a1:e6:69:ce:fa:a7:bb:57:33:44:08:
9a:ab:5f:7a:52:2b:85:3c:0f:ae:cc:26:49:cb:10:
6d:c0:60:87:5f:9e:e7:7d:ee:a9:7d:cd:74:2d:c5:
2e:41:1b:45:54:11:d5:fa:ff:ea:1a:98:41:12:17:
49:19:10:16:44:7d:d3:96:36:67:35:94:68:83:6f:
a6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7A:E3:F0:4B:3F:55:97:CA:EC:A5:FC:18:A6:31:53:D8:2D:FE:88
X509v3 Authority Key Identifier:
keyid:E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/oXrj8Es_VZfK7KX8GKYxU9gt_og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.247.168.0/22
87.247.178.0/24
87.247.184.0/21
Signature Algorithm: sha256WithRSAEncryption
21:61:54:85:9a:4e:05:ab:0a:05:37:02:04:78:f0:03:b0:a1:
91:33:e7:26:38:b6:6f:e8:fd:3e:12:5f:be:79:d8:e4:19:d1:
42:1e:88:da:8c:81:2d:e1:aa:af:a4:30:7b:c8:c7:01:05:2e:
9e:18:69:eb:82:96:28:81:a7:1f:85:97:3b:cc:d0:59:6b:ef:
b7:74:80:62:24:53:b3:61:b1:1f:c8:f2:a2:f3:8a:a4:10:86:
bc:f8:cf:d2:73:55:fd:29:0d:ca:c0:97:63:f4:60:6e:76:d9:
79:0b:e6:2d:11:c0:2b:eb:16:4c:54:e4:81:04:ab:13:80:99:
3d:8b:97:bf:04:50:70:e5:51:03:f4:20:3b:c3:e5:6e:9a:b6:
f5:cf:73:8d:72:48:01:00:d6:f3:54:50:b6:30:ac:a2:a6:2b:
c6:9e:d8:f7:e8:77:56:9c:50:e8:f5:be:36:cb:e8:5a:8f:cb:
90:76:cb:cd:d2:01:89:b1:df:92:fb:9a:40:2e:88:8f:66:11:
8a:9d:a4:35:de:90:6a:f9:22:4a:d1:ea:38:cb:c8:62:3e:87:
d9:3f:3b:50:50:17:dc:92:13:90:8d:5e:8c:e4:a2:34:d2:a3:
cf:d2:12:b6:f9:aa:09:f3:be:22:e2:b6:83:94:9f:71:6a:c9:
8f:fc:4b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 09:22:27 2025 by rpki-client