Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/sO1-95FKWzf6CMhcsfJsQXlbf9c.roa
File: sO1-95FKWzf6CMhcsfJsQXlbf9c.roa (raw, json)
Hash identifier: AmdE+AmwZWv3t99DgkwndKgDeMuF8wkGsLdG2zgoDMI=
Subject key identifier: B0:ED:7E:F7:91:4A:5B:37:FA:08:C8:5C:B1:F2:6C:41:79:5B:7F:D7
Certificate issuer: /CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526
Certificate serial: 0193DDC9B456E65DCAE1AAD6F5EE0B29C692
Authority key identifier: 8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/sO1-95FKWzf6CMhcsfJsQXlbf9c.roa
Signing time: Thu 19 Dec 2024 07:20:03 +0000
ROA not before: Thu 19 Dec 2024 07:20:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29584
IP address blocks: 82.194.0.0/24 maxlen: 24
82.194.1.0/24 maxlen: 24
82.194.2.0/24 maxlen: 24
82.194.3.0/24 maxlen: 24
82.194.4.0/23 maxlen: 23
82.194.6.0/24 maxlen: 24
82.194.7.0/24 maxlen: 24
82.194.8.0/24 maxlen: 24
82.194.9.0/24 maxlen: 24
82.194.10.0/24 maxlen: 24
82.194.11.0/24 maxlen: 24
82.194.12.0/24 maxlen: 24
82.194.13.0/24 maxlen: 24
82.194.14.0/24 maxlen: 24
82.194.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Dec 2024 10:39:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:dd:c9:b4:56:e6:5d:ca:e1:aa:d6:f5:ee:0b:29:c6:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526
Validity
Not Before: Dec 19 07:20:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0ed7ef7914a5b37fa08c85cb1f26c41795b7fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:63:64:6e:df:df:ec:e6:74:70:36:94:a3:6a:
ff:48:09:9c:5f:c7:c4:fe:b2:2f:ac:f6:be:f6:74:
69:20:02:b0:70:74:70:b8:37:45:4f:5b:30:aa:b9:
41:f2:70:0d:9a:e5:ba:71:02:82:e9:23:45:45:56:
04:e6:6d:a8:8d:f7:57:22:04:5e:fd:49:da:8c:3c:
36:9a:b2:bc:88:6d:d6:3d:db:3e:56:44:83:d2:72:
b1:50:bd:70:cb:c9:88:52:16:b4:db:5a:2b:aa:65:
23:77:d4:3c:5c:6f:d6:a6:2d:bd:b5:5f:1c:47:d4:
fc:b1:62:67:c6:87:e6:2a:44:7b:e1:dd:bc:18:87:
5c:fa:10:d9:5f:11:04:d9:89:0c:33:04:3a:24:0c:
3c:9a:a2:19:35:f4:20:a7:aa:f0:9d:4e:4e:a8:b6:
31:cd:4f:66:f5:f3:79:6f:c9:6e:19:fb:6b:8f:ee:
b3:90:46:f8:c0:f6:ff:66:6e:a7:3b:dc:31:50:69:
5f:36:3c:a0:ae:be:ff:cb:09:fa:52:78:91:63:a3:
a6:d9:44:01:64:2f:68:dd:6d:99:ab:19:d4:de:ff:
f6:1a:0c:d2:50:36:d0:c0:e5:71:80:66:0e:9d:0e:
14:52:25:07:83:2b:76:de:a3:c3:ce:94:6e:de:08:
cd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:ED:7E:F7:91:4A:5B:37:FA:08:C8:5C:B1:F2:6C:41:79:5B:7F:D7
X509v3 Authority Key Identifier:
keyid:8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/sO1-95FKWzf6CMhcsfJsQXlbf9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.194.0.0/20
Signature Algorithm: sha256WithRSAEncryption
a1:61:8c:eb:ad:48:10:f2:7b:ac:42:ca:fe:d8:d4:e8:37:07:
21:2b:8d:61:a6:1b:94:ec:fc:04:73:e5:f4:66:0f:3b:dc:3a:
39:15:a3:2b:45:01:49:54:e2:84:0b:82:b9:85:72:98:fa:0f:
d8:37:ad:06:b7:e5:fb:ba:bc:ec:d5:2c:95:d4:20:5b:2d:f8:
4c:c1:da:d3:9c:9d:9e:b3:f2:9d:f2:78:ef:b7:7c:07:e4:19:
97:56:43:af:4d:0a:c3:d5:77:ed:82:03:ce:6f:32:58:52:7c:
01:2c:53:a4:4e:39:55:60:6c:88:72:b2:eb:69:3d:d5:6f:82:
64:37:d3:cf:44:05:d4:63:f8:ab:39:3a:44:07:ea:80:60:29:
16:d7:e8:20:14:4b:d8:2a:a4:83:d0:ea:0f:57:97:0a:cf:fa:
50:93:6d:a0:b9:67:9a:20:3f:8c:51:37:43:7e:de:09:ee:9e:
54:8e:72:08:69:5d:41:11:d0:1b:81:c4:2d:9d:53:8e:43:07:
50:92:19:b7:ae:fa:45:50:f5:59:79:f1:76:86:63:6f:31:12:
58:6d:90:9c:27:9f:fd:b4:68:49:7c:0a:97:67:ff:9f:df:e1:
b4:b1:6c:0b:c9:fa:86:a9:0c:69:40:43:a5:f4:c5:5e:a6:0e:
67:0c:52:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:11:25 2025 by rpki-client