Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/oGNJ7xsTVyirj3z-V0xw5QTodFI.roa
File: oGNJ7xsTVyirj3z-V0xw5QTodFI.roa (raw, json)
Hash identifier: t/q3X7Zd1RUXsjUaydYYYnYMMIXplP7VnrHpSaseIrk=
Subject key identifier: A0:63:49:EF:1B:13:57:28:AB:8F:7C:FE:57:4C:70:E5:04:E8:74:52
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196AE154110C0AE170DC5B9B19B2EF9F00D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/oGNJ7xsTVyirj3z-V0xw5QTodFI.roa
Signing time: Thu 08 May 2025 04:09:10 +0000
ROA not before: Thu 08 May 2025 04:09:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36352
IP address blocks: 94.103.168.0/24 maxlen: 24
94.249.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 May 2025 04:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:15:41:10:c0:ae:17:0d:c5:b9:b1:9b:2e:f9:f0:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 8 04:09:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a06349ef1b135728ab8f7cfe574c70e504e87452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1d:5a:d4:64:88:d9:8d:51:aa:74:13:85:93:
61:78:50:da:6b:99:6c:62:0b:89:bd:16:c6:be:86:
1e:74:20:3f:e7:db:81:1a:0e:fa:55:4d:44:11:7c:
84:c1:c3:40:1c:cd:de:32:a9:9c:1c:86:1b:72:d4:
0a:f0:0d:f4:53:e2:e3:b1:7c:4b:46:db:94:c9:42:
99:c2:3f:f3:74:8c:34:c9:63:c0:3b:fb:4e:08:f7:
48:6d:b1:37:05:9f:19:9d:4a:76:f1:27:d5:27:66:
b1:7a:da:3d:de:7a:6a:cd:4a:b9:29:3f:7b:15:64:
c5:39:ca:f0:1b:b2:66:39:0d:cf:5b:ae:1f:3a:42:
30:96:f9:8e:56:3a:1f:a8:18:c9:fa:bd:29:54:25:
d4:b6:31:67:35:eb:39:d8:9f:7f:96:c1:e7:73:c7:
4d:16:cd:db:48:87:78:13:8d:02:3f:02:c8:6e:01:
e3:86:d8:d7:ef:ee:ec:9d:44:a9:eb:5d:05:04:1d:
98:ec:96:7b:8e:e7:e6:ec:62:e9:59:22:23:ff:19:
8b:31:fc:9d:9b:06:10:ae:65:98:0f:95:dc:fa:8b:
9f:b2:cd:86:e8:16:5b:33:44:76:98:10:7e:0a:9a:
43:40:37:e6:9e:91:bc:f8:c5:12:f0:a3:bc:f1:aa:
ab:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:63:49:EF:1B:13:57:28:AB:8F:7C:FE:57:4C:70:E5:04:E8:74:52
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/oGNJ7xsTVyirj3z-V0xw5QTodFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.168.0/24
94.249.232.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:59:1e:fd:15:ee:03:89:96:4a:7e:2b:10:a9:50:8a:5e:cb:
5d:67:a6:db:cf:a4:72:92:ef:39:69:53:d1:49:14:1b:9e:db:
2f:1e:e1:d8:68:cb:25:39:fa:85:c6:0c:47:48:7a:64:aa:f2:
a1:98:b9:d6:45:a7:54:2e:11:16:ab:f2:13:0f:e8:1a:ef:a5:
b5:ec:70:58:ed:f0:8f:c3:4e:df:ff:8f:be:46:0b:5d:2f:53:
fc:4f:3a:f7:48:a7:61:d8:61:bc:2e:a6:f7:3c:ce:57:b4:5b:
57:04:c6:94:a5:b8:82:f2:f8:2b:c0:ca:3d:b0:48:3c:6d:c3:
35:ee:ef:ab:2f:d5:2e:1e:44:0d:0c:f7:33:4b:26:8a:40:a8:
73:19:93:52:fe:b9:f3:d5:88:10:0f:45:a0:80:3a:fd:79:c3:
c0:0e:09:2d:df:ac:93:91:27:1c:35:a0:0c:cd:3b:94:7f:14:
0b:fe:3a:1b:8e:db:41:3e:11:0c:9b:f6:5c:98:d3:83:99:02:
10:04:8d:11:64:07:55:8a:83:2b:6f:b0:ba:ab:38:67:3b:59:
d1:36:35:51:f0:ad:5e:24:92:8c:c4:be:09:1d:96:d5:3c:50:
79:e9:1c:0f:c1:97:78:4f:36:0e:5f:b3:5d:e9:6e:4b:df:3f:
45:e7:90:73
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZauFUEQwK4XDcW5sZsu+fANMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwNTA4MDQwOTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDYzNDllZjFiMTM1NzI4YWI4ZjdjZmU1NzRjNzBlNTA0ZTg3NDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5B1a1GSI2Y1RqnQThZNheFDaa5ls
YguJvRbGvoYedCA/59uBGg76VU1EEXyEwcNAHM3eMqmcHIYbctQK8A30U+LjsXxL
RtuUyUKZwj/zdIw0yWPAO/tOCPdIbbE3BZ8ZnUp28SfVJ2axeto93npqzUq5KT97
FWTFOcrwG7JmOQ3PW64fOkIwlvmOVjofqBjJ+r0pVCXUtjFnNes52J9/lsHnc8dN
Fs3bSId4E40CPwLIbgHjhtjX7+7snUSp610FBB2Y7JZ7jufm7GLpWSIj/xmLMfyd
mwYQrmWYD5Xc+oufss2G6BZbM0R2mBB+CppDQDfmnpG8+MUS8KO88aqrOQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKBjSe8bE1coq498/ldMcOUE6HRSMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvb0dOSjd4c1RWeWlyajN6LVYweHc1UVRvZEZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXmeoAwQA
XvnoMA0GCSqGSIb3DQEBCwUAA4IBAQCPWR79Fe4DiZZKfisQqVCKXstdZ6bbz6Ry
ku85aVPRSRQbntsvHuHYaMslOfqFxgxHSHpkqvKhmLnWRadULhEWq/ITD+ga76W1
7HBY7fCPw07f/4++RgtdL1P8Tzr3SKdh2GG8Lqb3PM5XtFtXBMaUpbiC8vgrwMo9
sEg8bcM17u+rL9UuHkQNDPczSyaKQKhzGZNS/rnz1YgQD0WggDr9ecPADgkt36yT
kSccNaAMzTuUfxQL/jobjttBPhEMm/ZcmNODmQIQBI0RZAdVioMrb7C6qzhnO1nR
NjVR8K1eJJKMxL4JHZbVPFB56RwPwZd4TzYOX7Nd6W5L3z9F55Bz
-----END CERTIFICATE-----
Generated at Sun Jun 15 08:43:17 2025 by rpki-client