Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/VOOB0VCMGRBk84v9-uDObQbg2JI.roa
File: VOOB0VCMGRBk84v9-uDObQbg2JI.roa (raw, json)
Hash identifier: 4bj1zE6SevtAjAzrjWRRyqWx9HahHyyRZbfSH8OZMgQ=
Subject key identifier: 54:E3:81:D1:50:8C:19:10:64:F3:8B:FD:FA:E0:CE:6D:06:E0:D8:92
Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial: 0195ADE8CBEBCC37CA3B5EDB23558D8BF214
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/VOOB0VCMGRBk84v9-uDObQbg2JI.roa
Signing time: Wed 19 Mar 2025 10:17:49 +0000
ROA not before: Wed 19 Mar 2025 10:17:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211798
IP address blocks: 193.46.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Mar 2025 10:43:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ad:e8:cb:eb:cc:37:ca:3b:5e:db:23:55:8d:8b:f2:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
Validity
Not Before: Mar 19 10:17:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54e381d1508c191064f38bfdfae0ce6d06e0d892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:57:8d:6b:d6:7d:df:62:18:c5:7f:6d:d5:35:
d2:1b:0a:d1:d9:60:e5:01:b8:14:ef:11:d8:1e:9f:
e6:ca:c5:43:f6:a8:7f:73:67:45:ba:50:f3:1e:ea:
fb:2d:08:28:1b:71:57:a3:95:40:e8:d4:0f:47:6c:
90:a8:f9:06:53:46:8e:07:58:76:78:99:aa:e4:dd:
cb:cc:33:2f:7d:40:fe:d5:42:5b:9d:1e:bf:47:0f:
8b:f5:bf:87:ff:26:4c:40:38:0d:aa:6f:1c:b0:5a:
93:8d:7e:45:96:4a:e7:dc:c5:d2:ad:59:2e:b5:17:
a3:57:2f:8f:41:68:b7:25:02:59:df:77:9a:52:04:
e4:9e:98:1a:ad:ca:f4:d8:27:44:74:aa:c3:4b:40:
6f:e5:30:4f:ed:dc:be:ee:e4:a2:56:14:a2:85:e2:
7d:b6:9b:d3:ca:31:1a:d4:0a:51:74:0d:44:3a:57:
d6:f7:d8:10:b7:7d:4f:09:90:d9:e2:fd:31:47:c3:
e1:78:d3:5a:14:49:6a:35:dc:55:40:03:c8:8d:e6:
c3:f8:8a:2e:21:6e:5f:7f:5c:93:a7:3a:fc:22:1c:
a8:2c:09:87:d7:95:19:96:08:56:cc:4b:8e:7e:d9:
61:26:9e:4c:5a:71:57:17:c0:1c:3a:34:85:86:60:
d1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E3:81:D1:50:8C:19:10:64:F3:8B:FD:FA:E0:CE:6D:06:E0:D8:92
X509v3 Authority Key Identifier:
keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/VOOB0VCMGRBk84v9-uDObQbg2JI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.216.0/24
Signature Algorithm: sha256WithRSAEncryption
36:9e:87:6f:76:b0:03:63:6e:e9:b6:cc:08:72:e6:4d:cd:cb:
4b:50:3e:2e:51:44:fe:de:45:a6:2c:d8:59:0c:bf:93:d0:db:
e3:1c:ba:0f:87:80:f0:f1:64:c9:49:8c:1b:18:b2:04:ee:cd:
39:14:b6:5e:c7:91:8c:04:67:2d:94:ce:4c:dc:4d:52:04:e1:
14:15:52:cf:08:3a:aa:2f:2d:1d:cd:a2:47:82:5d:75:96:b1:
d3:2a:93:da:9f:0e:85:ba:78:2f:51:1b:ac:31:e8:73:34:88:
f7:4d:c5:4b:fd:35:45:4a:16:5b:49:63:d8:80:d8:ed:96:40:
29:c4:97:c8:79:af:46:1f:1d:21:b1:23:37:eb:bd:7d:4c:af:
1c:d0:b8:82:15:39:a7:4b:da:bc:b1:1e:06:af:d5:07:62:6c:
e8:ca:8c:04:16:8a:51:1e:03:ac:ac:47:7d:b6:50:92:cd:5e:
34:01:c8:4b:87:d5:d2:e9:8e:7b:22:65:58:ca:fd:cf:b7:2a:
17:bf:60:70:99:8c:c5:cc:14:6a:dd:87:a3:83:86:5f:9e:b5:
33:71:7b:e8:5e:ac:97:74:41:03:72:10:d4:25:9b:2b:fa:dc:
76:c4:ee:0d:c4:c2:50:93:cc:ce:9f:c2:4a:49:82:a5:ee:ad:
74:1f:86:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:10:31 2025 by rpki-client