Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/Os1gXijgJRa4Du4wvt2xm2Rhv7Q.roa
File: Os1gXijgJRa4Du4wvt2xm2Rhv7Q.roa (raw, json)
Hash identifier: 0A9xBPs2bbtPK0w9xDOHcuEK9/c8oYRwtnoJhMKRZSk=
Subject key identifier: 3A:CD:60:5E:28:E0:25:16:B8:0E:EE:30:BE:DD:B1:9B:64:61:BF:B4
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 019369DB2C4FC282226EAD03848ACA67516E
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/Os1gXijgJRa4Du4wvt2xm2Rhv7Q.roa
Signing time: Tue 26 Nov 2024 19:03:11 +0000
ROA not before: Tue 26 Nov 2024 19:03:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214192
IP address blocks: 185.215.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:db:2c:4f:c2:82:22:6e:ad:03:84:8a:ca:67:51:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Nov 26 19:03:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3acd605e28e02516b80eee30beddb19b6461bfb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:84:02:03:6d:3b:bc:fe:d6:ff:e2:f9:55:60:
91:78:c9:16:d0:e3:05:54:eb:81:53:0d:41:31:45:
5d:9a:73:8c:c2:e4:9c:e5:c8:d9:ac:3d:a4:07:95:
0b:08:c0:d9:42:92:af:b4:6f:7d:64:95:2a:de:be:
6e:39:3e:4f:f6:a6:d8:68:d3:3a:62:5f:0c:77:0f:
01:bf:d4:1f:f6:12:2d:67:e8:83:31:2e:6e:f8:f6:
58:ac:e2:7e:b5:67:e7:9a:fa:a9:e6:74:5f:d3:33:
0d:6a:9f:11:8f:ba:20:ee:03:76:f1:5b:37:e1:06:
89:da:ac:90:7a:7a:b0:a0:bb:80:33:01:90:eb:45:
52:a7:45:97:10:5f:d9:e9:4c:11:b6:49:4e:f3:ca:
65:f3:f5:22:90:56:bc:67:b1:5e:da:3d:4b:08:8f:
14:14:25:b3:f5:75:5f:5f:d9:89:ba:12:17:b6:0a:
08:ac:71:41:f8:17:4c:0d:f2:91:5d:ee:34:0f:2c:
9f:d5:68:f1:17:91:a5:8b:3b:92:d7:a6:46:07:bc:
67:89:6b:e1:a1:ae:d9:67:2e:c0:93:66:91:c6:b0:
b8:df:6a:a4:14:ec:df:5d:f6:10:dd:b1:06:01:a7:
26:ac:42:23:b6:97:50:b5:44:84:48:f9:91:1e:20:
70:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:CD:60:5E:28:E0:25:16:B8:0E:EE:30:BE:DD:B1:9B:64:61:BF:B4
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/Os1gXijgJRa4Du4wvt2xm2Rhv7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.229.0/24
Signature Algorithm: sha256WithRSAEncryption
94:5e:40:64:3b:0c:2c:0c:ff:88:01:c5:8e:57:b2:da:d1:13:
7b:06:36:f0:9d:ec:6e:2a:ad:2f:2c:ac:9c:90:e0:2b:4b:a7:
b6:ad:af:4b:c0:19:ec:66:0a:54:7a:7a:50:be:b8:2c:3d:f6:
43:33:42:8c:7b:b1:27:fc:bb:99:2e:30:4f:8d:f3:d3:93:d6:
11:40:fe:e0:4c:95:eb:dc:16:31:17:dd:5a:27:20:0d:cd:eb:
32:2a:53:e6:03:bd:82:8d:91:1f:98:07:ab:2a:ca:3e:1b:92:
93:4e:20:79:32:5f:1d:60:c9:3f:3b:4b:ce:e2:40:58:d2:51:
35:33:a6:42:3e:3a:85:c5:37:8f:0e:fc:87:44:76:29:4d:61:
a4:ef:10:23:bf:7d:55:fd:b4:09:44:e4:c4:b7:09:a7:35:da:
93:42:43:47:79:fc:af:42:b1:05:ea:9a:b2:fb:d2:42:b6:b2:
9e:f8:94:37:78:27:6c:76:63:3e:a5:c0:26:4b:23:e5:f8:a6:
e5:01:18:f1:20:c4:af:d9:c5:61:98:45:51:46:8c:3e:c8:55:
f0:a6:07:46:53:c7:b2:3f:2e:73:a8:bc:55:62:fa:ef:68:9d:
ea:9f:88:f3:8a:52:e5:90:14:43:6b:1e:df:c3:c7:cc:b1:a1:
d4:89:d6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 04:46:50 2025 by rpki-client