Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/OQ-p6xujxPl7gRYeoh0t0lUF6HU.roa
File: OQ-p6xujxPl7gRYeoh0t0lUF6HU.roa (raw, json)
Hash identifier: 5khriDgWmong+kbQn3rlyVlXovjUYGTOlO/cAfBVzrM=
Subject key identifier: 39:0F:A9:EB:1B:A3:C4:F9:7B:81:16:1E:A2:1D:2D:D2:55:05:E8:75
Certificate issuer: /CN=f7d32e75294187d46e8eae0f8fe72b5fd7abf886
Certificate serial: 0192C9ADB3F3ECF29A54927775A2A3681201
Authority key identifier: F7:D3:2E:75:29:41:87:D4:6E:8E:AE:0F:8F:E7:2B:5F:D7:AB:F8:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/OQ-p6xujxPl7gRYeoh0t0lUF6HU.roa
Signing time: Sat 26 Oct 2024 16:34:16 +0000
ROA not before: Sat 26 Oct 2024 16:34:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215424
IP address blocks: 45.14.76.0/22 maxlen: 24
195.95.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 26 Oct 2024 17:08:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c9:ad:b3:f3:ec:f2:9a:54:92:77:75:a2:a3:68:12:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7d32e75294187d46e8eae0f8fe72b5fd7abf886
Validity
Not Before: Oct 26 16:34:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=390fa9eb1ba3c4f97b81161ea21d2dd25505e875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ce:d3:5d:c8:cd:ad:34:b0:11:dc:c2:6e:a4:
5d:af:41:38:4a:bf:49:a4:ec:03:6f:2d:d7:ed:a5:
6a:ea:bc:37:c6:8d:4d:38:cd:cd:d6:a9:aa:81:3a:
d2:3e:4a:fa:56:c4:13:83:4c:6b:2f:09:ca:26:a6:
4e:86:5b:66:bb:71:aa:06:84:cb:c5:bc:82:ac:80:
13:7b:51:fe:23:9f:4c:10:f2:7b:2a:c0:5a:8f:ae:
c0:6a:41:01:f5:cc:ab:91:04:b7:3d:16:96:8d:19:
81:a5:e8:43:98:37:5b:39:c2:f6:0b:d9:ce:58:9f:
61:e7:f0:86:af:80:f4:d7:64:ce:8b:41:dd:bf:78:
68:da:80:62:b1:8d:1f:d5:38:73:55:b1:93:e4:79:
29:08:e3:69:fe:51:74:4a:3a:7b:ba:f2:35:5c:63:
1f:1a:7e:56:f6:ab:3b:94:93:7b:26:c5:f9:e2:d0:
25:15:70:11:d0:eb:3e:1b:39:67:37:9c:a2:56:d8:
ec:71:47:b8:1b:5f:39:c0:8e:33:1f:5f:4b:b3:2f:
0b:72:b5:19:28:5c:50:d6:ee:11:6d:da:2b:0f:18:
be:06:bd:a1:b6:f3:6e:b4:cd:3e:08:95:f1:3a:6f:
52:b2:19:e1:78:b8:ac:cb:db:8a:2d:ca:64:95:3f:
7a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:0F:A9:EB:1B:A3:C4:F9:7B:81:16:1E:A2:1D:2D:D2:55:05:E8:75
X509v3 Authority Key Identifier:
keyid:F7:D3:2E:75:29:41:87:D4:6E:8E:AE:0F:8F:E7:2B:5F:D7:AB:F8:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/OQ-p6xujxPl7gRYeoh0t0lUF6HU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.76.0/22
195.95.153.0/24
Signature Algorithm: sha256WithRSAEncryption
82:96:f8:63:38:cd:6f:44:e2:1f:29:c6:ad:3a:dd:fa:c6:af:
02:06:c0:0a:09:66:78:27:54:44:58:02:be:61:a5:95:97:97:
52:19:94:6d:a1:11:3d:0f:db:be:72:c8:74:4d:73:7b:4b:c3:
18:d7:93:c0:b6:dd:a0:aa:63:d1:31:bd:7b:44:39:cd:de:92:
bd:ca:6a:e1:d1:d3:1c:80:0f:1c:8e:b2:63:84:29:b5:1b:b9:
28:ac:9f:fd:ee:e3:3d:cf:f9:7b:e7:d4:48:ef:85:e8:06:16:
be:3f:ca:fa:c8:8c:e8:8d:7b:27:d9:ba:d6:14:35:7a:b3:4a:
b9:4e:ee:28:e5:19:cf:98:eb:d8:ab:0d:2f:ed:58:ee:25:01:
da:5d:b1:1c:37:04:3b:4b:e3:34:3e:1a:67:36:13:c9:30:fe:
75:49:17:ed:e9:34:6c:5e:c5:05:cd:fd:33:39:64:aa:c2:b4:
a6:1c:f2:74:8e:37:72:38:1c:c9:0b:07:69:62:98:13:39:d1:
cb:f1:29:df:d7:ad:15:b0:8a:50:83:97:05:a4:af:23:35:19:
e6:4f:22:61:7e:73:8f:b1:f2:8a:e9:fb:be:33:87:dd:67:1f:
dc:13:82:59:50:d6:08:66:db:ab:c8:18:b9:1c:76:96:bd:17:
ac:56:6d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:15:32 2025 by rpki-client