Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/OKLzGd7eVCsJ92LjPtWRspXy8no.roa
File: OKLzGd7eVCsJ92LjPtWRspXy8no.roa (raw, json)
Hash identifier: +xdG+Bm7r/0kicm5jcC/lk4jsXu7uWMehi3H49nr4dk=
Subject key identifier: 38:A2:F3:19:DE:DE:54:2B:09:F7:62:E3:3E:D5:91:B2:95:F2:F2:7A
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0195D5FEF35631FDAC8D5B98A90A5A6AE5D2
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/OKLzGd7eVCsJ92LjPtWRspXy8no.roa
Signing time: Thu 27 Mar 2025 05:06:50 +0000
ROA not before: Thu 27 Mar 2025 05:06:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215828
IP address blocks: 5.83.138.0/24 maxlen: 24
77.90.25.0/24 maxlen: 24
94.249.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Mar 2025 10:43:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d5:fe:f3:56:31:fd:ac:8d:5b:98:a9:0a:5a:6a:e5:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 27 05:06:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38a2f319dede542b09f762e33ed591b295f2f27a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:de:7f:17:35:d0:46:99:5a:f1:46:29:a2:d3:
9f:2a:98:0f:53:80:e9:8d:9d:dc:90:44:d4:14:cf:
02:05:70:ab:21:ef:92:65:75:20:0d:26:1d:1f:6a:
c8:17:1c:28:2f:71:66:8d:bf:ed:e8:24:89:fc:25:
ea:ef:2c:32:fb:d2:bb:ca:1f:34:17:32:1d:18:fc:
68:cf:32:13:50:a6:7b:b4:c3:04:8f:e4:0a:1c:5f:
1f:50:20:04:5d:c5:94:10:4a:0a:0f:64:f6:89:48:
32:dc:b4:68:95:4f:4e:9f:ba:ec:8f:84:44:43:db:
9f:6f:c3:1b:c8:f2:a7:b7:33:5a:aa:da:93:ac:3d:
b0:1d:19:59:ad:57:33:bd:ac:10:6d:d2:e2:2b:c0:
7e:39:00:f8:5e:6f:00:dc:60:84:e7:f1:68:e3:b3:
bc:bd:81:0d:36:57:20:60:68:b7:e5:83:e9:4d:7b:
84:df:ad:c8:63:c7:6e:b8:43:c0:55:c9:9c:28:c5:
ac:ce:d3:fd:90:40:62:6c:a2:00:f9:bf:fd:a5:f6:
6d:92:3c:9d:6e:84:ab:d0:68:49:87:53:d6:3c:6e:
26:55:3a:53:a5:4a:cd:f4:f6:a0:09:a2:fc:5d:71:
ee:9a:6f:e3:d3:ad:20:1d:9b:5e:82:e4:6f:01:ac:
67:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A2:F3:19:DE:DE:54:2B:09:F7:62:E3:3E:D5:91:B2:95:F2:F2:7A
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/OKLzGd7eVCsJ92LjPtWRspXy8no.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.138.0/24
77.90.25.0/24
94.249.138.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:2d:56:09:56:9f:77:05:02:ab:69:9f:9e:1d:ab:f3:d8:a8:
58:5f:22:f8:76:28:5a:a3:dd:c0:b7:42:85:9c:62:13:b8:d0:
97:10:02:6d:d2:1d:6a:4e:0b:08:56:67:ce:2c:8d:82:e4:8c:
ab:80:27:37:b3:8f:23:9c:19:82:92:1e:c2:d3:ca:e8:ce:4e:
15:6b:2e:e0:b3:37:27:63:44:bb:0a:0e:a4:34:25:95:5f:2d:
1d:32:01:d1:ca:42:dc:1a:86:55:f1:b7:ca:87:ba:7f:4c:88:
77:bb:cf:ab:3b:3a:06:c3:bb:c3:66:13:f9:93:11:fc:8e:d7:
e8:8e:42:c9:e1:6e:4e:8c:f3:00:d2:f8:a9:56:67:f3:5a:cd:
4d:82:99:0e:71:e4:27:21:76:04:f0:2c:39:a4:01:a7:95:40:
d0:e2:af:5e:34:ce:1a:d5:c6:47:5f:88:0b:74:ab:5f:9d:4a:
2a:63:4b:a0:6f:cd:b5:91:e7:42:2b:c8:00:59:78:09:11:59:
a0:ee:91:63:1d:13:ae:1b:06:b1:c8:04:96:70:cd:12:70:24:
b5:7a:1e:be:94:3d:ab:54:78:55:0e:58:a7:c4:74:fd:e2:82:
20:e5:c7:4b:d4:79:cb:4f:cc:69:07:83:36:5a:8d:3a:36:b7:
28:ec:35:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:34:24 2025 by rpki-client