Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/0v29eGlW2AA3453odJcbDNJpoCg.roa
File: 0v29eGlW2AA3453odJcbDNJpoCg.roa (raw, json)
Hash identifier: Dkc4elnZZK1rE4yRqFHX4o0CezvtD5vDgYJOOOb16qI=
Subject key identifier: D2:FD:BD:78:69:56:D8:00:37:E3:9D:E8:74:97:1B:0C:D2:69:A0:28
Certificate issuer: /CN=38506d80ab592de7be0a331bbf4fa0068d41408a
Certificate serial: 0196C36EF3233F0FDEB232589CFDB9812057
Authority key identifier: 38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/0v29eGlW2AA3453odJcbDNJpoCg.roa
Signing time: Mon 12 May 2025 07:39:10 +0000
ROA not before: Mon 12 May 2025 07:39:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57136
IP address blocks: 91.230.248.0/24 maxlen: 24
194.105.143.0/24 maxlen: 24
194.126.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 May 2025 10:52:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:6e:f3:23:3f:0f:de:b2:32:58:9c:fd:b9:81:20:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38506d80ab592de7be0a331bbf4fa0068d41408a
Validity
Not Before: May 12 07:39:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2fdbd786956d80037e39de874971b0cd269a028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6b:e5:1b:5b:90:06:97:bb:d5:61:5f:85:3a:
f6:62:ca:11:87:88:ec:51:f2:2d:b2:e9:27:6b:d9:
c3:09:4f:ab:42:c4:6c:30:f0:01:62:a6:40:a3:f5:
6e:0c:ca:53:e3:b8:e3:d0:99:1c:bf:d0:54:0e:c5:
f0:9c:90:68:21:a9:a5:f0:ae:e2:aa:ed:e3:ce:b6:
40:63:92:47:3f:48:fd:62:90:13:b9:17:f5:a4:9f:
5a:72:a8:b7:3c:97:8d:c9:f0:14:8f:c9:e5:eb:3d:
18:56:27:24:06:c4:f4:90:a5:1f:df:06:19:d6:0c:
ef:e3:cc:f2:37:1d:25:e2:21:5f:b9:83:68:1e:49:
60:6c:85:92:2e:9a:5f:13:18:fd:93:de:bf:7f:d7:
0e:02:dc:f0:01:a3:2c:34:41:3b:c6:cc:72:84:c3:
c1:77:bb:cd:aa:0d:e9:d0:23:a8:4b:50:9e:e7:dc:
fd:20:3d:39:13:d2:44:80:87:9e:15:40:1a:e2:83:
41:6e:8f:43:d2:b4:71:f1:05:c4:38:de:ac:15:98:
ea:99:5a:9a:02:72:30:b8:de:10:c1:69:37:96:b4:
7c:48:31:15:8b:4e:07:8f:8d:31:4c:49:95:f7:87:
4b:d1:97:41:3e:36:ff:2a:c2:35:9a:bd:4e:6a:bc:
02:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:FD:BD:78:69:56:D8:00:37:E3:9D:E8:74:97:1B:0C:D2:69:A0:28
X509v3 Authority Key Identifier:
keyid:38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/0v29eGlW2AA3453odJcbDNJpoCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.248.0/24
194.105.143.0/24
194.126.205.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:4a:da:e7:d3:62:d2:08:b7:4e:e1:3f:ac:81:9a:71:7e:c6:
fa:a1:94:88:ff:b9:40:d2:87:44:d4:fb:25:39:1e:6c:b6:44:
3d:67:5f:a2:df:96:f6:56:12:03:b1:77:e9:d1:da:88:0c:6e:
7f:11:e1:38:c1:8a:0d:59:42:4b:eb:63:6d:86:cc:b1:9d:f1:
a0:93:76:01:24:a6:cb:10:a5:4d:3b:44:ca:16:1c:39:fb:2b:
aa:ae:1d:85:17:29:98:00:0e:e7:07:58:97:7b:f8:a4:9e:21:
b8:28:e4:64:e4:65:39:e4:14:21:ad:d8:ef:22:72:0b:6e:2a:
15:65:58:e2:ad:59:00:4e:7a:2c:e4:ed:a3:7a:b3:e3:38:17:
64:52:b0:8f:79:8c:48:db:94:e9:0f:22:b3:04:4f:88:16:0d:
4b:92:e8:63:79:77:36:b1:9c:37:b9:d5:52:a0:b8:30:37:b6:
83:36:e6:3c:b1:94:2d:d7:1e:48:03:47:69:14:d7:d5:cf:95:
02:a6:93:9e:0b:55:40:2b:0c:bb:c2:e7:eb:44:8f:f0:60:dc:
25:8e:57:9e:d8:21:bc:2d:7e:e5:39:44:9d:3e:68:dc:c0:95:
bc:0a:54:2d:5b:ea:44:76:22:61:95:45:f4:e4:44:02:59:94:
7d:42:14:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:20:15 2025 by rpki-client