Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TOVgCqm_Xs7dgEAJB-ncgkNVj-4.roa
File: TOVgCqm_Xs7dgEAJB-ncgkNVj-4.roa (raw, json)
Hash identifier: o/C/IAaJgOUt1IYJgqAuDkdhn9xWCvpoafsuIFI4/pM=
Subject key identifier: 4C:E5:60:0A:A9:BF:5E:CE:DD:80:40:09:07:E9:DC:82:43:55:8F:EE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019711E0D0707F825EC73656373D8B755E72
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TOVgCqm_Xs7dgEAJB-ncgkNVj-4.roa
Signing time: Tue 27 May 2025 13:13:55 +0000
ROA not before: Tue 27 May 2025 13:13:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208287
IP address blocks: 82.115.211.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Jun 2025 10:24:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:11:e0:d0:70:7f:82:5e:c7:36:56:37:3d:8b:75:5e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 27 13:13:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ce5600aa9bf5ecedd80400907e9dc8243558fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7a:a4:eb:9a:d4:66:63:12:11:38:01:23:5a:
04:3c:27:14:56:27:18:23:32:7d:45:52:15:ba:7e:
b5:13:21:bd:e3:05:89:91:c1:db:a5:2e:fb:05:a9:
30:40:62:b1:9d:34:b9:7c:1d:6c:a8:a2:52:68:a8:
b0:ea:b2:78:b6:18:4c:a0:e9:7c:f2:38:a7:10:5d:
c8:e9:e6:4b:b6:be:3a:32:a4:cc:b7:5b:ea:be:53:
0e:32:36:6b:b5:0e:04:19:91:5d:f3:4a:0a:ad:6d:
2c:19:39:0c:b6:cd:84:cc:0e:47:fa:b5:ef:b3:f1:
f8:3f:c3:22:6e:63:c7:44:4c:2f:a4:3f:1d:ed:58:
e2:68:c3:b4:e0:ba:d4:28:ff:b5:86:ae:92:24:9f:
d3:8b:dc:58:86:53:7b:e8:d4:ef:61:d7:c3:50:4f:
ad:e9:9d:cb:90:cf:4c:96:e0:52:7f:89:66:fd:09:
80:20:25:3b:8f:75:2a:5e:2b:ad:6e:d3:d0:ac:b2:
39:78:98:54:e0:69:d7:15:29:6f:f5:0b:a1:e4:19:
ca:c1:7c:dd:24:6d:9f:87:9c:a1:f5:22:9b:fc:dc:
81:ba:b9:90:cf:d3:ab:fb:e3:c5:35:1f:fd:8b:cd:
99:56:51:f8:40:d9:36:fc:3c:37:bc:4f:18:7e:15:
ac:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E5:60:0A:A9:BF:5E:CE:DD:80:40:09:07:E9:DC:82:43:55:8F:EE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TOVgCqm_Xs7dgEAJB-ncgkNVj-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.211.0/24
185.222.160.0/24
Signature Algorithm: sha256WithRSAEncryption
50:71:8d:26:8e:0e:0f:23:e8:13:c5:ba:ff:60:77:dd:5e:da:
88:72:30:c8:15:48:cc:38:ac:11:cb:36:82:87:31:2c:92:9d:
f5:29:4f:af:d4:3f:41:f2:ea:6f:cd:2c:53:3a:79:f4:4d:ce:
ef:2e:8e:df:8d:2f:04:eb:8d:21:f6:40:f4:3c:10:98:eb:a3:
b6:a7:43:f2:13:07:bc:e1:ae:0e:85:a2:81:fd:64:02:73:6f:
82:b7:8b:4b:ed:8f:72:df:60:27:5e:a0:fb:07:40:c2:e9:d5:
d4:08:43:0a:11:86:69:b0:71:20:c7:89:56:02:e6:48:2c:03:
d0:2a:1d:10:77:3c:9e:68:26:d1:71:fa:d2:33:b6:dc:b7:80:
23:b6:fe:a7:c9:bc:36:3c:8f:c3:48:f0:3a:bb:b3:e6:fc:a8:
f7:39:9a:6f:18:0a:fa:31:7c:14:92:d2:9e:54:f7:ba:3f:f6:
d5:d0:21:27:43:b1:75:61:59:a9:e1:85:05:47:10:9f:b1:d7:
b9:41:35:ed:0a:50:82:9d:0d:88:17:ef:d1:d1:a5:a5:9c:4e:
86:57:3b:ce:20:7b:2e:9d:a1:5c:1d:92:56:91:a7:72:15:c7:
e4:f3:bf:2f:68:52:42:12:7c:0e:62:0a:91:0c:37:db:bb:43:
0c:f8:3d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 20:18:21 2025 by rpki-client