Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/O0UzHhFGCl7MpEtScqSF8DkIhuo.roa
File: O0UzHhFGCl7MpEtScqSF8DkIhuo.roa (raw, json)
Hash identifier: gWniLHrWTALZLXw7wNfozSyoEiuaomcRyb8Mrg+Cc/4=
Subject key identifier: 3B:45:33:1E:11:46:0A:5E:CC:A4:4B:52:72:A4:85:F0:39:08:86:EA
Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial: 019644F8FCE01BD04DD1B28565EA8C1CE107
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/O0UzHhFGCl7MpEtScqSF8DkIhuo.roa
Signing time: Thu 17 Apr 2025 18:18:10 +0000
ROA not before: Thu 17 Apr 2025 18:18:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214422
IP address blocks: 77.105.164.0/24 maxlen: 24
92.42.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 May 2025 13:15:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:f8:fc:e0:1b:d0:4d:d1:b2:85:65:ea:8c:1c:e1:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
Validity
Not Before: Apr 17 18:18:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b45331e11460a5ecca44b5272a485f0390886ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2b:57:b6:7e:db:75:ce:65:08:d0:6d:91:fd:
ab:a3:90:ce:b3:b2:5f:df:6b:ff:de:cd:30:f9:81:
cb:61:96:3f:88:73:3d:e3:a8:1f:36:80:f2:76:d4:
84:eb:57:b9:4b:d9:e7:5f:b2:d9:83:7b:85:bf:c5:
ac:7d:b6:11:c8:1d:12:a5:61:73:20:9f:32:fc:6e:
b5:e8:f1:6f:19:20:6d:c1:60:a8:7f:cf:ba:d2:d1:
eb:ba:80:1e:03:16:61:47:2c:6c:4b:d2:bd:1d:fb:
55:2e:ae:16:5f:9e:2d:3b:a8:ca:3c:64:be:3c:a3:
d7:9f:1b:26:3e:8c:6c:51:7f:18:d4:27:23:f9:cd:
73:79:01:db:9e:f5:69:5f:09:62:b1:28:32:ab:ca:
cf:da:0c:67:e5:4c:ce:dd:4f:87:3d:15:ae:2a:e0:
d5:17:fa:de:bb:d1:b5:3b:e6:a0:b9:8e:0a:22:4b:
2c:e8:47:d0:ee:52:e8:86:15:59:38:64:3a:04:68:
36:8e:ef:5b:b7:20:fd:7e:49:e1:9c:6f:0b:fe:7c:
0c:e1:e4:c5:49:ab:d9:9e:ef:be:4e:17:5b:9d:ee:
3e:25:7b:c6:3a:dd:c0:8b:26:db:6f:eb:52:4b:50:
08:46:47:96:6c:8f:e8:c3:76:85:a6:27:c2:92:28:
80:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:45:33:1E:11:46:0A:5E:CC:A4:4B:52:72:A4:85:F0:39:08:86:EA
X509v3 Authority Key Identifier:
keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/O0UzHhFGCl7MpEtScqSF8DkIhuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.164.0/24
92.42.102.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:88:ab:83:a6:3b:4b:ae:ef:25:1c:cb:ae:31:44:04:92:26:
d8:cd:14:e9:e5:bc:6e:51:4d:3f:24:1a:35:7e:58:40:9d:a7:
6a:01:c9:e7:90:e6:d1:97:04:d3:11:55:0c:20:72:53:3f:0a:
f0:2d:0e:b3:23:f5:de:7b:d4:e8:a1:4d:8a:46:8b:5c:35:cb:
4b:1c:1b:11:9f:94:4e:2b:ff:71:2b:c4:40:a0:9f:c0:1d:0f:
8d:bf:d8:cf:40:14:96:1d:1f:4f:8a:27:a2:7c:98:7d:c4:e2:
b8:43:46:21:74:6a:09:aa:09:36:31:e7:6b:88:0b:fd:e1:3d:
5d:d5:f2:3f:d6:86:f8:4c:f2:f3:3a:02:a9:52:8f:db:e0:9d:
98:7d:33:31:16:a6:0d:9d:8f:b7:41:6a:2f:d7:8b:b7:28:0a:
da:f0:38:11:84:e7:eb:35:f0:4a:91:a8:76:20:92:54:ba:7b:
3e:dc:5f:e5:aa:f0:18:be:e1:36:ac:a3:6f:e6:67:9c:65:a7:
75:23:a3:e1:1f:af:8b:ab:4b:54:32:9a:e1:70:8f:b5:ff:66:
17:69:17:23:7b:53:e3:4d:82:c7:17:9a:2d:4f:ae:74:0b:e9:
82:92:d8:ec:b3:b6:f6:74:05:73:e2:f9:77:fd:ad:8c:a3:44:
cf:9e:ed:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:01:28 2025 by rpki-client