Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/5OPGNjeMw77VZFiX_yEAkl_wigc.roa
File: 5OPGNjeMw77VZFiX_yEAkl_wigc.roa (raw, json)
Hash identifier: GLWR2kyQ3VX+WSzY2wwedPb26ISFdZpZ0IeRvgjSgbI=
Subject key identifier: E4:E3:C6:36:37:8C:C3:BE:D5:64:58:97:FF:21:00:92:5F:F0:8A:07
Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a
Certificate serial: 0197E1DA39AA3876128EA0196242BE0C28BA
Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/5OPGNjeMw77VZFiX_yEAkl_wigc.roa
Signing time: Sun 06 Jul 2025 22:27:44 +0000
ROA not before: Sun 06 Jul 2025 22:27:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207577
IP address blocks: 45.142.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Jul 2025 16:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e1:da:39:aa:38:76:12:8e:a0:19:62:42:be:0c:28:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a
Validity
Not Before: Jul 6 22:27:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4e3c636378cc3bed5645897ff2100925ff08a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3a:47:46:be:fe:7d:68:17:00:c0:86:24:b8:
be:9d:0f:da:05:7d:34:fe:8e:e0:cc:0e:f7:ae:d9:
14:67:f3:8a:63:6f:ee:9a:92:97:26:24:c6:7f:2f:
11:72:c3:3d:f0:7c:36:db:b7:1f:57:9b:13:03:7c:
5e:88:81:12:49:1b:c0:ac:8c:5c:06:54:d7:39:19:
2d:71:b3:d1:db:8d:81:2f:c8:20:c2:3c:da:0c:7d:
c6:a4:5e:bb:c0:ff:ca:b0:29:27:b1:b0:b8:46:73:
86:5e:41:96:a5:0d:11:21:a3:4a:b7:4a:53:9e:e9:
64:1a:f9:44:eb:cb:c9:99:1f:a8:90:c1:af:41:67:
13:01:1c:85:b6:a7:95:62:a7:8b:58:69:a1:88:06:
b6:87:1c:a6:b0:29:6f:6a:6a:5f:b6:95:7f:8f:ec:
68:cd:07:3f:08:56:b0:e8:c7:86:05:e3:f4:75:3d:
67:5c:e7:d3:9b:c4:91:a7:83:2c:db:e2:0a:73:93:
8a:1a:0f:c4:cc:d9:17:11:44:c9:39:93:24:a8:b2:
8c:f4:6b:70:60:18:87:e9:c7:7f:ee:07:c1:c9:c6:
af:dd:32:95:91:21:7d:87:5c:8f:af:7c:ef:ef:11:
3c:d6:27:1c:0a:8e:27:12:c5:0a:5f:c8:97:3d:a5:
c7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E3:C6:36:37:8C:C3:BE:D5:64:58:97:FF:21:00:92:5F:F0:8A:07
X509v3 Authority Key Identifier:
keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/5OPGNjeMw77VZFiX_yEAkl_wigc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.123.0/24
Signature Algorithm: sha256WithRSAEncryption
30:8b:7e:2c:b4:5a:39:c9:c6:a8:a9:c4:41:17:83:6a:19:4e:
86:19:8c:05:79:de:6d:ca:fc:53:dd:00:07:e1:40:83:99:13:
67:3a:ef:58:62:a0:10:dc:61:7b:08:87:e7:65:07:37:12:4f:
34:88:eb:63:f6:70:fe:ce:68:f8:85:6e:ac:46:58:d4:c1:33:
f7:00:f4:b4:78:22:6e:85:0a:5e:2c:14:68:1a:58:fb:8f:01:
53:b9:4c:21:30:72:c9:8b:70:b0:1a:60:c2:c6:2e:08:7a:40:
03:88:61:2e:21:67:80:c2:da:24:f9:c7:f8:ff:7d:3e:6e:d0:
78:41:fe:a1:e0:d4:36:dd:64:db:47:dc:b3:f3:17:59:29:34:
5e:8e:27:32:72:06:6f:96:6a:37:bb:ee:f8:b7:6c:19:5f:22:
f4:43:1c:98:a6:84:c8:b1:65:66:64:64:7e:b1:ee:64:40:05:
d2:d9:8a:c6:79:a6:6e:85:ea:65:8c:00:99:e4:2e:f2:c0:39:
c0:8e:5e:05:cc:0b:e7:1b:66:c8:5d:72:db:96:ac:12:f3:a7:
80:13:20:09:97:fd:4c:4a:a0:b4:c3:00:61:3a:43:9f:48:f7:
30:3d:58:a7:b6:c4:b6:93:80:6c:cd:b4:fe:e6:6e:34:26:80:
31:a9:37:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 00:21:59 2025 by rpki-client