Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/C-ta3ggrW76O2YhgHMdwAQD8Zuo.roa
File: C-ta3ggrW76O2YhgHMdwAQD8Zuo.roa (raw, json)
Hash identifier: wHf6pha5d0FJYFDe4YumasyxxQgDsAjL3zwzDcIMuCg=
Subject key identifier: 0B:EB:5A:DE:08:2B:5B:BE:8E:D9:88:60:1C:C7:70:01:00:FC:66:EA
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019711A7216D4CFE212E9217265C23C9B517
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/C-ta3ggrW76O2YhgHMdwAQD8Zuo.roa
Signing time: Tue 27 May 2025 12:10:55 +0000
ROA not before: Tue 27 May 2025 12:10:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215287
IP address blocks: 212.38.81.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Jun 2025 07:25:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:11:a7:21:6d:4c:fe:21:2e:92:17:26:5c:23:c9:b5:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 27 12:10:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0beb5ade082b5bbe8ed988601cc7700100fc66ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:69:94:85:dc:ec:b5:f4:da:55:b9:e0:5c:7d:
cc:0b:0a:a6:43:27:64:72:fe:89:c9:b5:6f:7b:03:
0a:56:e9:2b:45:c6:79:c0:2a:65:67:91:b2:17:d6:
c8:36:23:e5:41:1b:2f:48:02:9a:2d:46:37:ee:71:
fd:a3:48:a2:1b:10:6d:e6:f3:b3:6b:d7:d4:15:a9:
49:6c:c4:88:16:fe:ef:01:fc:5f:48:c4:ae:09:3a:
70:a6:fb:ef:92:1c:86:ae:34:de:7d:33:80:8f:eb:
42:21:30:e5:39:fb:89:78:e8:d7:54:0e:a5:e3:a8:
fe:c3:48:4e:57:ae:0c:45:80:a9:bd:97:31:af:56:
b5:1a:8d:da:53:ff:28:7b:93:32:3f:8f:25:1d:a6:
b9:36:47:be:28:4e:e0:a1:89:4c:a9:d3:b1:a2:3f:
b8:08:06:37:44:ca:76:ea:6d:e1:c3:34:4c:dd:c2:
43:e3:0f:9e:d0:88:51:cc:ca:87:c9:ff:49:a8:5b:
22:0e:10:dd:d1:3b:e5:61:7e:ea:83:3f:1a:2a:e0:
56:9d:c9:18:d7:96:dc:ff:fd:c5:69:76:0e:74:0f:
49:c4:bb:5e:9e:ed:73:b0:c7:a4:7b:e3:12:e4:25:
a5:39:3f:d4:a4:fd:03:38:03:97:8f:56:42:cb:82:
b8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EB:5A:DE:08:2B:5B:BE:8E:D9:88:60:1C:C7:70:01:00:FC:66:EA
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/C-ta3ggrW76O2YhgHMdwAQD8Zuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.38.81.0/24
Signature Algorithm: sha256WithRSAEncryption
91:e8:fc:fb:07:e4:5b:fd:96:a9:c9:f2:0c:0f:44:15:63:07:
5c:0b:b6:80:c9:1b:00:97:cc:11:4d:19:b6:b2:ba:9f:09:cc:
41:ee:cd:2c:83:e5:07:9f:9c:73:75:a7:fb:b9:ab:60:d1:05:
54:04:d9:cc:e6:96:c4:7a:70:ff:f4:5c:13:07:73:98:ff:de:
e7:96:d5:45:bc:75:bd:3b:81:76:2c:65:a0:06:a7:53:d1:c7:
77:49:9f:43:79:52:ce:14:e6:53:b2:53:5c:ca:d8:55:4e:bc:
b1:26:51:b7:d3:4c:05:66:ab:d1:fa:cf:8e:86:30:b8:2a:6d:
7a:e3:3f:28:b4:ff:ae:20:1f:f3:7f:a1:55:24:45:04:4f:31:
d0:fb:e1:95:31:48:93:13:7b:46:81:15:b9:19:9d:18:22:57:
aa:f4:34:81:21:d9:31:e2:d5:67:d2:d3:29:81:2f:40:b1:e2:
83:b0:8a:d1:2d:d1:65:de:99:96:9f:f1:48:3a:34:74:99:de:
66:4a:c4:dc:29:30:c6:63:26:40:1f:c8:5e:16:8c:15:14:e0:
9d:1a:6d:52:39:3b:f7:b6:57:ec:83:0a:b4:61:78:fb:b4:04:
f9:51:17:62:34:c9:2a:38:53:09:4e:2d:38:58:c3:64:1d:9e:
79:ae:e0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:16:00 2025 by rpki-client