Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/0MGlnqW-h1D_-sQkwTcCACYwFU4.roa
File: 0MGlnqW-h1D_-sQkwTcCACYwFU4.roa (raw, json)
Hash identifier: XbWMYWHBYB3nnvBHzE2HKHyFyGbz03JTRzETL0kSulA=
Subject key identifier: D0:C1:A5:9E:A5:BE:87:50:FF:FA:C4:24:C1:37:02:00:26:30:15:4E
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019422FBA276B40C9C1C0659F61F7BC136F1
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/0MGlnqW-h1D_-sQkwTcCACYwFU4.roa
Signing time: Wed 01 Jan 2025 17:48:24 +0000
ROA not before: Wed 01 Jan 2025 17:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210122
IP address blocks: 83.137.154.0/24 maxlen: 24
88.209.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 08 Mar 2025 10:18:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:a2:76:b4:0c:9c:1c:06:59:f6:1f:7b:c1:36:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 1 17:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0c1a59ea5be8750fffac424c13702002630154e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b4:f8:69:74:43:6f:6c:1f:e9:02:53:14:ac:
68:0f:f5:45:b1:5a:b9:24:de:02:24:0e:29:44:4d:
87:40:21:15:6e:fb:07:c8:f7:07:2c:f7:66:b5:dc:
5a:6d:15:18:76:e2:48:9f:45:ef:38:08:eb:ac:9c:
48:0c:9b:44:f4:40:3b:a1:33:fb:73:2a:12:11:57:
74:a3:b1:02:97:48:28:07:a1:ea:7c:88:a5:84:33:
9d:12:d1:eb:00:66:4c:20:8e:be:ae:74:5b:a8:c6:
be:69:54:72:39:77:6d:0e:94:ce:62:e4:36:94:a5:
42:6d:55:3b:bf:55:94:cc:2f:24:b3:e4:45:9f:34:
b5:03:8d:44:0a:d2:e4:1d:2d:77:43:3c:fa:6f:cd:
d8:e6:3d:13:a4:13:bb:3e:e0:e4:47:5b:6d:00:a2:
2d:fd:b4:fb:20:4e:54:fe:b8:e9:9c:50:c7:11:12:
83:28:eb:c0:4b:6f:ef:1a:89:d8:20:23:ad:df:3d:
f6:7f:0d:e4:cf:95:26:12:f2:5a:39:a9:3b:44:47:
f0:ea:1e:f9:d9:ea:a3:64:75:f0:55:93:e6:2e:24:
64:9e:e5:4f:c3:78:f2:3e:2a:b6:d9:fe:44:cf:88:
4f:27:2f:7a:09:92:ff:05:d3:c8:36:f4:89:3a:90:
f2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C1:A5:9E:A5:BE:87:50:FF:FA:C4:24:C1:37:02:00:26:30:15:4E
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/0MGlnqW-h1D_-sQkwTcCACYwFU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.154.0/24
88.209.204.0/24
Signature Algorithm: sha256WithRSAEncryption
25:c9:8a:2c:70:ef:2f:21:9b:8c:81:72:79:6a:eb:ee:f0:51:
bd:1c:81:af:0d:49:32:64:dd:ff:b9:53:d3:ca:7a:26:7d:f9:
d6:a8:fc:94:eb:c6:de:59:d3:63:a5:0d:a9:54:26:74:3b:cb:
3a:77:20:2c:11:49:5c:c7:5c:5d:7f:5c:b0:80:23:20:00:26:
d4:3d:90:61:e7:1a:4d:58:3a:e4:b1:04:cb:ab:bd:00:94:a0:
e0:79:3e:84:99:0e:7b:f4:72:16:dc:42:6d:a4:c1:b1:bb:ae:
24:a0:d2:73:6c:08:0b:80:18:40:cf:8e:f7:32:43:31:87:ce:
e3:a8:3f:c3:01:3a:09:7c:be:8a:53:63:80:19:5a:6a:46:1b:
d5:6d:b7:6f:ef:18:79:8c:04:d1:c0:b2:97:71:90:38:05:eb:
56:05:e5:8d:52:12:f0:61:ab:8f:8c:d3:73:ae:9e:fb:15:9b:
08:90:81:b3:0e:fc:03:76:64:ad:0e:8d:21:db:cc:93:10:97:
fe:36:30:1b:17:bf:52:1e:b0:1d:d0:71:a9:8e:c9:ab:dd:da:
53:e8:d6:16:29:02:d3:ed:82:7f:4c:3a:af:b5:1c:03:70:0b:
63:47:d8:53:dc:fd:bd:19:f4:0e:b3:7b:2b:21:d2:dd:c0:52:
53:f3:02:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:17:45 2025 by rpki-client