Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/OwKgLaAD239LSYDJspBtKVP9gIg.roa
File: OwKgLaAD239LSYDJspBtKVP9gIg.roa (raw, json)
Hash identifier: iFqrL0xmMCuGIhSPSv+raKi1g44lGrjplTL6+L9Qz1c=
Subject key identifier: 3B:02:A0:2D:A0:03:DB:7F:4B:49:80:C9:B2:90:6D:29:53:FD:80:88
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01982D10646B7658573A60E39EC9B0F1C5B3
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/OwKgLaAD239LSYDJspBtKVP9gIg.roa
Signing time: Mon 21 Jul 2025 12:58:25 +0000
ROA not before: Mon 21 Jul 2025 12:58:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Aug 2025 05:30:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2d:10:64:6b:76:58:57:3a:60:e3:9e:c9:b0:f1:c5:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jul 21 12:58:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b02a02da003db7f4b4980c9b2906d2953fd8088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9a:ca:60:55:6a:9f:35:6a:d8:78:c9:8d:28:
37:d7:22:3a:c4:e3:60:4b:0c:ee:6a:60:a6:f9:c0:
bd:ca:fc:58:80:0a:c1:de:0a:1a:7f:89:a2:84:f5:
7e:0d:b5:38:24:7e:4a:98:56:3a:07:51:51:9f:45:
46:03:46:d1:8d:c7:0a:cb:15:e4:df:0b:b5:3a:53:
3e:ee:3e:a3:b0:45:33:d6:c8:9f:69:db:9f:f8:63:
56:54:41:da:3c:f9:67:d8:ac:70:53:4f:92:4e:28:
3c:99:0a:34:88:e0:73:07:a3:6a:e2:4d:b0:ca:00:
29:ee:3e:fd:41:db:29:21:9f:56:ad:da:e2:8d:92:
e6:67:cb:53:db:ef:81:10:ee:b0:7a:fb:eb:37:f9:
64:02:fb:dd:e5:6e:41:c9:47:1b:00:bb:2f:77:a3:
1b:75:4d:de:57:5f:4e:a0:b2:8a:0b:2f:10:21:f1:
36:ba:c7:09:bf:0b:01:da:4f:74:07:c8:74:f4:e7:
5d:6f:b7:3c:21:89:46:26:f8:b0:ed:ef:94:8a:38:
b6:07:82:31:69:b1:20:73:58:93:42:dc:6d:fd:5e:
52:3b:ac:c1:d5:40:dc:31:6c:12:60:1c:11:65:ab:
7b:cf:94:1b:b0:6e:80:30:f0:4a:a3:cf:00:ea:15:
d6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:02:A0:2D:A0:03:DB:7F:4B:49:80:C9:B2:90:6D:29:53:FD:80:88
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/OwKgLaAD239LSYDJspBtKVP9gIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
81.21.2.0-81.21.7.255
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:73:a4:a0:c3:da:ba:9c:22:7b:e5:0f:3d:04:36:1e:49:86:
bf:d4:b7:4f:1f:15:44:e3:d3:4b:f9:c6:9f:9f:e2:69:88:d7:
ed:95:e5:43:5c:b5:6b:c6:94:9e:a3:65:92:eb:39:dd:01:ec:
d2:bc:79:b6:33:e9:d9:71:7e:bb:42:c8:32:0b:c7:f1:36:0d:
22:bc:42:25:c1:34:18:b1:94:f8:5c:81:fb:fe:3f:34:4e:4e:
d4:ba:64:55:67:44:00:ae:e3:11:11:85:58:2a:9a:6c:b6:78:
7b:08:4b:7f:43:72:ea:eb:cd:76:44:19:63:e0:ab:b5:d0:95:
f8:e0:66:ff:68:f6:13:26:0e:3b:40:d0:a6:8b:25:3a:f5:14:
4e:f4:4e:ce:49:52:4d:62:10:c7:07:24:c4:7d:74:04:7e:d8:
75:41:e6:86:73:42:54:9e:4d:e7:0c:4d:e4:28:c0:02:83:d1:
ed:a8:d0:2b:be:cc:ad:36:df:33:64:3b:b6:56:0e:7e:71:01:
bd:2e:dd:56:30:53:7a:64:f9:7a:08:67:97:75:47:93:f9:72:
50:9e:18:84:d1:9b:e4:15:d5:a6:3b:8c:2d:2e:e7:51:90:8d:
4a:d3:dc:f7:3a:a8:63:d9:b3:dd:17:23:72:af:bd:a6:c9:50:
75:67:a6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:28:10 2025 by rpki-client