Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/OGNuQFshvlxEUalqH89NqeeDMtg.roa
File: OGNuQFshvlxEUalqH89NqeeDMtg.roa (raw, json)
Hash identifier: 9oyWcJePI6i466Ahl8YlOc5gaJg5eXmvpEfPzvk659Q=
Subject key identifier: 38:63:6E:40:5B:21:BE:5C:44:51:A9:6A:1F:CF:4D:A9:E7:83:32:D8
Certificate issuer: /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial: 01942143B447E14CAA12B91182DA63ADEEBA
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/OGNuQFshvlxEUalqH89NqeeDMtg.roa
Signing time: Wed 01 Jan 2025 09:47:52 +0000
ROA not before: Wed 01 Jan 2025 09:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 265515
IP address blocks: 95.210.95.0/24 maxlen: 24
176.227.129.0/24 maxlen: 24
176.227.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Jan 2025 14:39:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:b4:47:e1:4c:aa:12:b9:11:82:da:63:ad:ee:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
Validity
Not Before: Jan 1 09:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38636e405b21be5c4451a96a1fcf4da9e78332d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cb:23:a7:9e:80:7b:c7:1a:9d:3d:c1:d6:e3:
84:3c:87:bc:ce:95:e8:78:8f:4b:92:18:54:4b:55:
45:5f:a3:13:b6:be:55:6a:68:cd:12:b2:9b:12:49:
a2:f9:95:b0:57:d7:a0:92:68:f1:29:66:43:9e:97:
6f:35:80:81:ff:51:60:e9:a8:2d:08:91:6a:06:3c:
10:4e:63:38:00:d2:e3:0b:5d:c4:59:a0:68:33:0b:
ed:f5:ab:d5:e2:7e:d6:d9:5e:2c:b4:b8:54:31:ef:
0d:45:9d:a1:56:67:ad:5f:64:c7:fe:95:fd:53:4c:
10:52:cc:c2:99:17:d8:56:7e:a7:ba:97:2a:a8:7e:
27:69:60:64:49:2f:c5:ef:44:2b:9a:0d:df:0f:36:
d2:42:32:10:0f:e1:bf:58:26:fb:a9:7a:c2:a3:08:
ca:27:58:e2:0b:8d:ae:82:14:a6:30:2e:46:5e:21:
4e:62:6d:d8:f8:64:68:69:a7:fd:ec:54:39:e5:46:
4a:42:c7:3d:f4:7f:c2:ec:ea:78:1e:b9:74:23:23:
25:e3:e6:78:30:46:16:e2:9c:56:32:b6:34:06:01:
01:e1:4b:2f:b4:d1:70:f6:7c:4d:96:4e:00:e4:fa:
d7:1f:ad:54:57:1d:f3:31:ed:f3:f3:b7:e0:c3:af:
61:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:63:6E:40:5B:21:BE:5C:44:51:A9:6A:1F:CF:4D:A9:E7:83:32:D8
X509v3 Authority Key Identifier:
keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/OGNuQFshvlxEUalqH89NqeeDMtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.210.95.0/24
176.227.129.0/24
176.227.133.0/24
Signature Algorithm: sha256WithRSAEncryption
86:ad:74:8e:56:c0:ab:7d:d3:53:38:5b:2c:99:bf:f7:6e:5e:
57:9d:cd:d0:49:41:f9:45:b6:a8:83:a9:38:c7:b8:94:11:19:
92:e4:2f:f5:c7:fa:c9:bd:2b:34:41:d2:63:36:bb:09:54:e9:
26:15:0d:97:c2:33:c3:ed:e7:3c:c1:33:8d:5c:40:37:dc:96:
0a:9d:89:f8:01:66:20:bb:64:48:8b:57:4d:33:3d:a1:8a:71:
8d:57:4c:fb:1f:9b:aa:1f:4d:25:d5:03:f8:b6:af:17:9a:bd:
56:f2:03:99:d9:ba:33:38:5c:74:b6:84:55:a9:58:b9:a5:a8:
e4:95:8b:24:ed:17:7a:1f:e2:77:64:86:8e:43:67:81:4e:07:
b6:8d:6d:61:21:39:7e:76:c0:b4:4b:82:08:a8:8e:15:e6:9e:
e2:ff:5f:7b:e5:95:0c:51:82:2b:ef:21:88:f1:d3:a4:8a:6e:
c0:d9:8e:a9:d3:d9:fe:db:38:bc:44:d0:5d:c2:44:a7:95:5c:
c3:25:5e:35:b0:73:0c:b9:53:41:11:08:2f:22:02:5b:ca:d8:
81:9e:6d:67:5e:2a:0a:34:bf:35:72:db:d3:03:b1:f4:e5:35:
74:10:54:4d:54:c6:12:68:17:0a:43:c2:c4:a9:70:50:fb:cf:
e9:e5:a2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:51:39 2025 by rpki-client