Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/OHZzgRkah7jVJM6t0FSmnitU0cY.roa
File: OHZzgRkah7jVJM6t0FSmnitU0cY.roa (raw, json)
Hash identifier: HrAnTMKNuJcRmu8Z+G7hz17g9IeHcHMIUlFqLYfmUo8=
Subject key identifier: 38:76:73:81:19:1A:87:B8:D5:24:CE:AD:D0:54:A6:9E:2B:54:D1:C6
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019637FD9F7A67219DB367DC1D9BCFB4C475
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/OHZzgRkah7jVJM6t0FSmnitU0cY.roa
Signing time: Tue 15 Apr 2025 05:48:10 +0000
ROA not before: Tue 15 Apr 2025 05:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 89.251.20.0/24 maxlen: 24
91.200.221.0/24 maxlen: 24
109.122.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Apr 2025 07:15:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:37:fd:9f:7a:67:21:9d:b3:67:dc:1d:9b:cf:b4:c4:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Apr 15 05:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38767381191a87b8d524ceadd054a69e2b54d1c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:66:c9:1d:07:b2:35:14:e4:f5:bc:16:73:c1:
94:11:35:c8:e6:d3:b6:d5:bd:be:d8:06:ce:7d:a8:
1c:7c:a1:d1:4b:96:f9:29:72:94:ca:e0:ea:6a:24:
11:23:34:7d:32:70:bd:e0:50:c0:cb:52:c6:f8:ad:
6b:0a:39:42:87:89:6e:83:15:27:27:79:d1:5e:81:
3f:49:54:23:60:67:29:2f:ef:76:98:57:e3:d4:9f:
4f:7b:9a:e8:f0:a3:4d:b4:78:77:08:6b:ef:b7:17:
38:9a:39:d1:ba:9b:50:cd:c3:db:d4:37:c2:8a:37:
95:39:76:fe:38:94:99:51:e4:4a:d1:91:23:36:da:
41:e8:25:21:cf:2f:e8:5c:da:eb:dc:57:a1:24:6e:
1e:19:46:9f:b7:f5:8a:32:a4:b5:95:48:73:c8:5e:
b6:79:c9:c3:54:d8:a7:2a:f8:c9:d6:3d:db:21:e4:
05:2a:a2:d4:05:97:6c:30:49:dd:0c:9e:63:26:5f:
87:82:d3:3a:27:93:c4:67:1c:de:1b:49:5b:16:c8:
26:7c:2f:72:7b:ef:2a:f9:71:a4:28:fd:70:f4:5f:
34:ef:02:76:17:b0:a4:d7:27:ba:c7:99:bf:c2:85:
31:93:2e:aa:43:3e:71:8e:5e:be:e4:37:d4:08:c3:
b0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:76:73:81:19:1A:87:B8:D5:24:CE:AD:D0:54:A6:9E:2B:54:D1:C6
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/OHZzgRkah7jVJM6t0FSmnitU0cY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.20.0/24
91.200.221.0/24
109.122.44.0/24
Signature Algorithm: sha256WithRSAEncryption
00:d4:8b:21:d7:f4:15:09:27:ff:e3:9e:2c:7c:33:58:bc:7a:
a8:88:0a:2c:c7:07:8c:43:4b:74:52:8d:bf:9a:e6:73:7e:49:
2d:70:b3:7b:0f:a3:14:13:b3:7c:0f:10:cd:74:c0:c5:01:22:
c5:99:d7:08:e2:06:f2:fe:01:1f:56:27:09:4e:65:d7:64:af:
e3:a5:ba:97:75:23:04:8d:07:52:f3:04:49:af:13:e4:cf:1a:
2f:12:e1:ab:dc:92:41:07:71:1f:f0:fe:ff:79:b5:55:46:16:
1b:06:49:24:1b:6f:0c:46:9a:6d:d5:ee:ed:07:56:3f:1c:69:
f2:c1:9d:97:e7:02:04:a5:3d:24:8a:8d:f5:30:ac:00:eb:b3:
8b:72:48:bd:4c:e1:18:1a:4d:1d:c5:d6:47:6c:14:54:c1:b9:
07:0d:06:27:8f:a9:7d:c3:80:a5:17:c2:d4:e9:43:c9:99:69:
63:52:c9:55:62:6f:2f:21:71:19:e0:9c:3e:d1:b3:1a:ab:f9:
d0:18:0c:a7:a1:75:a3:82:9e:92:00:36:2c:d8:24:16:0c:93:
26:1b:d6:d2:3b:96:30:77:73:52:f3:bf:f9:ce:8a:a3:f2:bc:
b3:2c:f1:ae:41:2c:47:e8:64:1e:74:55:47:31:c2:53:49:25:
3c:15:d9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:29:27 2025 by rpki-client