Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/OUOk6A8-Er8yLIBk3NKhBQgsXdI.roa
File: OUOk6A8-Er8yLIBk3NKhBQgsXdI.roa (raw, json)
Hash identifier: z2rNEM89Zj8Zg/0ftu+WeXzlAcpKwcZRCxwT/9A1evA=
Subject key identifier: 39:43:A4:E8:0F:3E:12:BF:32:2C:80:64:DC:D2:A1:05:08:2C:5D:D2
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01968FA7F2B6E2F8C292EA221DDC88AC82C3
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/OUOk6A8-Er8yLIBk3NKhBQgsXdI.roa
Signing time: Fri 02 May 2025 06:21:10 +0000
ROA not before: Fri 02 May 2025 06:21:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214159
IP address blocks: 84.32.208.0/23 maxlen: 24
88.216.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 May 2025 12:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:a7:f2:b6:e2:f8:c2:92:ea:22:1d:dc:88:ac:82:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: May 2 06:21:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3943a4e80f3e12bf322c8064dcd2a105082c5dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:34:72:2a:54:b5:8b:18:6d:a2:eb:0e:a5:bd:
1b:b7:ff:82:03:17:99:06:4c:67:fd:00:47:1c:05:
9f:47:28:08:56:b1:3c:2a:86:ac:8c:57:c4:52:59:
f9:51:41:48:da:08:08:a4:3e:23:93:09:db:e7:30:
3a:79:90:4d:e7:b5:45:d1:17:ec:4c:a6:0d:e4:f6:
f9:5e:01:ee:8c:d1:68:3b:ad:d6:dd:8b:b6:6f:6d:
3c:88:17:dc:8e:6e:a5:d3:66:d4:85:f1:16:09:ec:
fb:70:68:5f:8b:d5:32:da:4b:d8:d9:4a:b2:b5:4b:
f3:c9:b3:47:22:78:d7:e9:80:bb:aa:51:89:20:fe:
91:ba:3d:a3:b8:1e:d1:76:7f:29:e1:37:88:5a:ba:
af:c0:08:9f:4c:29:47:7a:63:aa:3f:c1:f6:52:23:
dc:a9:e3:8c:91:6c:3d:d4:15:66:ac:2c:ba:b2:4b:
e0:5d:10:70:ac:46:e2:49:68:70:27:35:c1:fc:09:
5d:da:46:fc:a9:1c:94:09:55:d8:06:bb:cb:a5:2b:
4e:10:85:18:cc:09:50:9c:55:43:56:58:be:31:13:
b8:20:f8:3d:2a:8d:94:25:de:f0:74:c0:df:a0:ef:
19:60:91:46:d7:79:91:b9:63:ab:d6:7b:66:e8:10:
62:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:43:A4:E8:0F:3E:12:BF:32:2C:80:64:DC:D2:A1:05:08:2C:5D:D2
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/OUOk6A8-Er8yLIBk3NKhBQgsXdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.208.0/23
88.216.214.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:56:cb:38:b8:e4:2a:b7:53:fa:a1:06:9a:30:6a:2f:2a:b1:
9e:02:cf:83:d6:d5:d4:c2:2d:14:9d:b6:5e:58:bb:d0:ce:f9:
5f:c3:87:5b:87:c5:2f:10:e2:ac:48:c4:98:6f:29:22:e8:3e:
0c:ad:2e:2b:8f:07:9a:52:8f:8e:9c:26:66:bc:ea:fb:5e:f8:
f0:45:d0:89:c8:76:40:bb:7d:6b:b8:37:2d:cb:ae:32:94:d6:
7d:af:46:e9:6d:26:5b:f4:e5:51:75:19:74:0f:a7:cb:e7:f3:
9d:c7:ad:e1:ff:1c:aa:d7:80:90:cf:64:d3:6c:6e:fd:9e:48:
e9:5c:30:8a:e3:5d:94:48:05:d7:ae:6f:10:86:ab:c3:29:8a:
a6:a6:52:2e:a3:b0:51:eb:b1:26:89:6d:0c:42:29:b0:b9:e5:
bc:26:16:08:5a:93:0d:23:61:f7:8e:1b:a6:40:d7:d9:d5:a0:
ed:33:f1:92:f9:fe:48:72:b7:cf:c0:3f:c9:32:b6:5b:e4:dd:
36:e9:74:56:d5:0b:0b:a0:3a:f3:ba:f6:35:fd:b4:41:25:ca:
b0:03:67:86:45:f1:c6:f0:74:39:61:b5:cb:5d:a6:b9:d2:f7:
ea:23:8e:30:5f:53:d8:f9:1b:81:38:08:50:8f:8b:c3:ab:94:
89:3d:db:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 04:45:20 2025 by rpki-client