Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/oNsVNfqjBj93esdjzS35MQDUlX8.roa
File: oNsVNfqjBj93esdjzS35MQDUlX8.roa (raw, json)
Hash identifier: XfK3S+37UdBExjRxldtWR00pfuy+Oc1sUfry2HOpRO0=
Subject key identifier: A0:DB:15:35:FA:A3:06:3F:77:7A:C7:63:CD:2D:F9:31:00:D4:95:7F
Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial: 0196BE0EE98A117B2E860A4DE0DCE6BF263F
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/oNsVNfqjBj93esdjzS35MQDUlX8.roa
Signing time: Sun 11 May 2025 06:36:10 +0000
ROA not before: Sun 11 May 2025 06:36:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213644
IP address blocks: 5.160.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 May 2025 10:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:0e:e9:8a:11:7b:2e:86:0a:4d:e0:dc:e6:bf:26:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
Validity
Not Before: May 11 06:36:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0db1535faa3063f777ac763cd2df93100d4957f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2f:05:aa:4d:69:e9:5f:66:7c:ad:a7:2d:76:
bc:e5:bf:bb:f0:bf:65:5b:bb:43:d6:b0:9b:0a:43:
8d:7e:d3:9d:e9:2d:80:a2:40:67:44:1a:55:3b:59:
6e:f4:96:8b:d6:86:05:07:cd:48:03:8d:d6:0f:42:
a8:13:9a:7a:f3:fd:30:8b:64:35:44:48:3c:76:8f:
9d:50:5f:18:71:ef:cc:0d:8b:a8:79:27:5e:d9:98:
0f:06:68:01:b4:2e:d2:f4:55:23:ff:ed:00:d8:ef:
c3:9d:d8:b6:e8:d7:7a:98:26:62:1d:a1:35:11:6d:
85:49:59:b5:c9:58:1c:88:26:99:78:9d:f3:99:d5:
35:88:ef:91:8c:c5:f9:8e:bf:3f:29:4a:55:2d:89:
32:e0:78:b7:e3:01:28:52:53:be:cd:18:23:fd:4b:
36:00:d6:7a:bf:60:0d:5f:87:84:d1:62:9c:3c:73:
bc:20:dd:27:90:ec:3f:5c:ee:97:8d:3c:ba:40:00:
0f:a4:d6:27:29:36:b1:a8:4d:04:93:0f:32:fc:06:
41:37:af:8d:77:7f:b7:53:bf:16:c6:42:de:41:cd:
cf:f9:58:dd:3e:f1:7f:ba:c7:04:4a:3e:47:04:2a:
e4:b7:c1:a5:15:5c:c8:f1:cd:2f:ed:1f:f9:0b:d2:
cd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:DB:15:35:FA:A3:06:3F:77:7A:C7:63:CD:2D:F9:31:00:D4:95:7F
X509v3 Authority Key Identifier:
keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/oNsVNfqjBj93esdjzS35MQDUlX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.132.0/24
Signature Algorithm: sha256WithRSAEncryption
81:5a:bb:1c:3c:ac:10:6e:f7:7f:8d:84:ad:21:e9:1f:85:19:
b2:8f:5f:ce:20:cd:83:64:7a:06:cf:23:76:9c:4c:40:50:56:
49:2e:37:93:10:a1:b6:b6:42:25:f3:41:30:0f:52:72:a6:84:
21:81:1e:28:48:82:60:57:e9:88:25:ce:6f:ce:90:ad:d6:93:
c8:a6:a0:f9:0c:7b:9a:50:b1:cc:54:57:71:16:b2:6c:e4:e0:
e8:d9:84:35:3e:70:f1:d5:0b:b8:ec:b6:cc:5a:00:18:07:87:
3c:23:58:ba:0c:21:2c:a9:ed:fc:01:13:18:e1:b2:b3:71:b9:
35:84:f2:81:ca:15:bc:fc:df:9a:0d:82:1b:98:de:28:62:e5:
d7:81:69:0e:cd:18:37:a8:af:c4:b0:ee:7a:eb:38:60:f8:41:
90:fc:2b:cc:e7:51:42:c9:88:97:33:3d:23:77:fc:7b:7c:fb:
2a:b7:af:23:35:ae:71:d5:b8:12:50:9c:e1:74:6d:65:60:1e:
e9:06:75:70:23:5e:6f:9e:58:e2:79:20:74:45:f0:24:66:48:
eb:b5:97:5e:00:d6:56:60:b4:f6:ec:93:6c:ba:12:4c:45:c7:
c2:4c:71:09:ef:4b:bd:05:8f:a0:f4:4a:58:90:bb:a1:b5:bc:
e0:c7:12:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:37:38 2025 by rpki-client