Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/oLV1X99aHFqOoiQTPRd5FQHgEg0.roa
File: oLV1X99aHFqOoiQTPRd5FQHgEg0.roa (raw, json)
Hash identifier: fDm9h7m3CNFipAQG2SQO2WztRiX+eBJCNMxHviQrYac=
Subject key identifier: A0:B5:75:5F:DF:5A:1C:5A:8E:A2:24:13:3D:17:79:15:01:E0:12:0D
Certificate issuer: /CN=582ae803df22b055c74e5fe8f11d944089560ed2
Certificate serial: 01973A91587A2E8E8699AFAD57E58EC52545
Authority key identifier: 58:2A:E8:03:DF:22:B0:55:C7:4E:5F:E8:F1:1D:94:40:89:56:0E:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCroA98isFXHTl_o8R2UQIlWDtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/oLV1X99aHFqOoiQTPRd5FQHgEg0.roa
Signing time: Wed 04 Jun 2025 10:51:33 +0000
ROA not before: Wed 04 Jun 2025 10:51:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209594
IP address blocks: 185.207.50.0/24 maxlen: 24
185.207.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Jun 2025 08:46:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3a:91:58:7a:2e:8e:86:99:af:ad:57:e5:8e:c5:25:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582ae803df22b055c74e5fe8f11d944089560ed2
Validity
Not Before: Jun 4 10:51:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0b5755fdf5a1c5a8ea224133d17791501e0120d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:30:fe:74:9b:92:41:fc:fb:61:c7:0f:17:0f:
46:9a:e6:4d:c4:5f:23:d4:1e:20:2c:41:12:f2:20:
36:97:59:24:b8:40:fc:b1:ef:24:50:3b:fa:b2:03:
61:02:d4:d7:f5:7b:6f:56:f2:c3:24:30:be:6d:de:
64:56:2f:ab:0f:da:72:4c:a7:e2:9a:75:bc:51:f2:
fd:8e:57:6f:1f:3a:d5:7c:fb:74:b0:15:7b:92:26:
30:b6:97:ca:63:90:7f:07:41:d7:16:d3:8d:db:c7:
7a:fd:1b:5c:79:7a:ad:3e:5d:a8:cf:73:42:ad:f7:
39:cc:7a:56:f2:cd:78:59:6c:7e:55:15:df:24:68:
cc:65:3d:d6:4a:da:7d:53:50:8a:bc:f2:1c:5d:64:
fb:a5:e2:78:49:2b:e5:f0:9c:12:db:66:21:de:97:
63:b8:08:b9:0b:1b:30:13:19:49:d1:e2:b6:7c:25:
0c:50:6e:15:be:aa:c1:2c:97:98:9e:fa:34:aa:c7:
4d:a0:74:71:b5:9c:9e:04:be:36:8d:7a:59:0f:6a:
73:5d:da:cd:3e:72:d4:d9:8f:b2:3f:67:3a:9a:cd:
5d:ac:e5:9f:40:66:d8:5f:ad:e4:ec:73:ec:fe:c4:
8e:de:54:12:0c:e8:cb:6c:e4:09:cb:18:91:be:05:
0b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B5:75:5F:DF:5A:1C:5A:8E:A2:24:13:3D:17:79:15:01:E0:12:0D
X509v3 Authority Key Identifier:
keyid:58:2A:E8:03:DF:22:B0:55:C7:4E:5F:E8:F1:1D:94:40:89:56:0E:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCroA98isFXHTl_o8R2UQIlWDtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/oLV1X99aHFqOoiQTPRd5FQHgEg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.50.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:52:02:6e:ec:83:49:9c:ea:de:f3:76:d2:56:17:56:96:7d:
78:18:62:be:01:e7:c3:a4:74:87:ef:c5:46:b6:f5:02:23:93:
7d:54:c0:46:4c:73:3a:84:af:d8:84:f0:0c:b6:9f:2f:95:e0:
f7:e3:2a:62:5a:98:73:10:90:e3:02:1e:24:57:63:3b:af:f0:
01:5b:b6:69:0b:b4:4f:52:4b:3b:c2:fb:07:f9:18:2a:66:e0:
9a:8f:f5:a1:b2:8d:70:66:1e:76:0b:e4:c1:3c:8b:23:47:c5:
b7:36:36:a7:1d:b7:00:bd:8b:97:8f:2e:51:01:d6:b4:dd:19:
8d:ba:f9:7c:03:33:81:2b:98:a1:ff:9b:90:52:34:9b:ca:43:
80:04:96:ef:e6:31:01:8d:90:d4:d7:d8:07:36:7c:17:5d:70:
a1:a2:61:8a:e2:61:ed:84:c6:6c:6e:fa:84:af:5a:2e:d7:f9:
e8:3e:e7:e5:8b:a9:4d:11:b5:df:ff:fd:f2:36:c4:92:33:bf:
5b:43:6e:90:c6:85:0c:4f:0f:bc:06:9c:20:ba:47:e6:ba:49:
f2:2e:9f:35:5c:10:8c:cc:d2:07:ef:ec:6f:21:d4:5b:93:26:
b5:5d:2e:42:70:3e:0e:5f:22:1d:f9:1a:1a:b9:57:13:7e:16:
0e:31:a5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:03:18 2025 by rpki-client