Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/CUdRMMHNqtu59PFzb57y32T5ioA.roa
File: CUdRMMHNqtu59PFzb57y32T5ioA.roa (raw, json)
Hash identifier: 2o4M+YwYP6ISHpRaFIGnFLmLZI1flaFe/GADizW7eoM=
Subject key identifier: 09:47:51:30:C1:CD:AA:DB:B9:F4:F1:73:6F:9E:F2:DF:64:F9:8A:80
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 0197AC65CF0048D8573BFCA5CE5B3ED46B8A
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/CUdRMMHNqtu59PFzb57y32T5ioA.roa
Signing time: Thu 26 Jun 2025 13:20:42 +0000
ROA not before: Thu 26 Jun 2025 13:20:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 212.116.226.0/23 maxlen: 24
212.116.226.0/24 maxlen: 24
212.116.228.0/22 maxlen: 24
212.116.229.0/24 maxlen: 24
212.116.236.0/24 maxlen: 24
212.116.238.0/23 maxlen: 24
212.116.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 29 Jun 2025 22:24:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ac:65:cf:00:48:d8:57:3b:fc:a5:ce:5b:3e:d4:6b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Jun 26 13:20:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09475130c1cdaadbb9f4f1736f9ef2df64f98a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:49:f1:c9:8f:10:b7:bf:3c:78:8d:f2:87:da:
ad:bc:b8:34:70:07:64:c2:29:e1:3a:f9:32:c7:1a:
71:a6:b0:61:d8:06:88:e1:24:80:1a:8d:d8:33:15:
90:83:38:20:49:44:55:0c:64:18:77:83:a2:62:c0:
30:dd:cb:55:21:24:1e:3d:54:8e:b8:bd:e6:ed:65:
f0:cb:a3:7b:b4:78:d6:a8:7c:ce:7b:8c:78:05:0d:
18:a3:0c:9b:17:cb:88:c3:8b:09:9f:f3:fb:a7:aa:
de:0d:c6:db:a2:65:4e:8b:63:1b:b9:3d:a0:0d:c2:
a8:e3:2b:17:f3:4c:6e:3d:ba:c4:31:0c:51:d4:6f:
62:5d:ce:ae:54:68:e6:f7:69:49:cb:58:8e:05:8d:
fb:c2:23:2f:6e:1a:b7:5e:ef:e0:eb:ca:39:76:91:
fb:06:44:47:9a:05:75:a7:ae:c5:c1:76:f9:d2:51:
43:d4:3e:d4:ea:77:6f:55:59:27:71:24:fc:ad:37:
34:77:25:5d:e9:3d:94:5e:c6:51:6a:8b:3d:42:f7:
6a:24:61:06:bc:ef:c7:6b:46:65:4c:0d:1d:4c:b4:
89:fe:e3:fe:a2:4f:4d:d0:cf:d2:2f:93:2e:1e:1d:
ce:12:f1:81:64:9a:26:21:64:e9:8c:ad:dd:5f:92:
58:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:47:51:30:C1:CD:AA:DB:B9:F4:F1:73:6F:9E:F2:DF:64:F9:8A:80
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/CUdRMMHNqtu59PFzb57y32T5ioA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.226.0-212.116.231.255
212.116.236.0/24
212.116.238.0/23
212.116.244.0/24
Signature Algorithm: sha256WithRSAEncryption
16:10:42:7b:e9:61:28:2b:40:4f:d7:d5:31:9b:a6:8d:45:bd:
80:0c:34:5b:7c:00:fd:0f:9f:55:9d:17:69:64:c3:8c:d9:37:
fa:f5:59:63:0b:38:d8:9e:a7:51:8b:d4:f2:95:b2:af:ec:8e:
c2:56:f2:98:d6:0f:2d:f4:98:3c:e1:4e:54:70:20:ca:30:12:
5a:50:9c:ed:d1:94:20:16:e8:3f:1d:3c:c5:00:e3:66:bb:1a:
5b:1d:93:37:bd:db:b8:95:94:8a:6c:d9:eb:93:ef:bc:1e:a3:
06:0d:3b:d8:2c:a5:28:a4:c7:a5:10:e9:fd:71:b6:b2:45:41:
bb:82:e4:8b:9c:3e:ce:33:40:cb:69:c5:b4:0d:e3:d2:c0:e9:
14:31:21:9f:e0:1f:66:28:d2:95:f1:0b:51:e5:85:25:0a:2e:
88:f8:9e:91:84:21:ec:66:2e:74:70:3b:0a:78:de:60:ad:81:
f8:41:1e:68:88:d8:e7:16:a5:82:ee:b8:b1:2a:c6:97:38:e6:
5f:47:aa:5f:fc:e9:c3:e9:ba:b9:9e:f6:a7:db:a8:8e:c9:87:
36:f7:91:a9:2f:82:2f:d6:b2:ba:de:91:9d:50:b6:d2:1a:c5:
4a:4d:da:dd:10:8c:fa:a1:ce:89:5f:05:18:6f:86:38:1c:f8:
e2:ef:0a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 12:07:47 2025 by rpki-client