Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/OVScsf5fy1WUWntVJjugZr2ruxE.roa
File: OVScsf5fy1WUWntVJjugZr2ruxE.roa (raw, json)
Hash identifier: PcwhLdZO14ZJvPkWSiCifCUI9c80QlBoT/KTCYVrzKU=
Subject key identifier: 39:54:9C:B1:FE:5F:CB:55:94:5A:7B:55:26:3B:A0:66:BD:AB:BB:11
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019FDC43E528CA3370063F7851758D4F8A8E
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/OVScsf5fy1WUWntVJjugZr2ruxE.roa
Signing time: Fri 07 Aug 2026 12:47:44 +0000
ROA not before: Fri 07 Aug 2026 12:47:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 163.5.59.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.196.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Aug 2026 15:17:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dc:43:e5:28:ca:33:70:06:3f:78:51:75:8d:4f:8a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 7 12:47:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=39549cb1fe5fcb55945a7b55263ba066bdabbb11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f6:29:8d:47:d2:fc:2b:29:00:29:ba:56:3b:
b8:48:49:32:73:eb:52:42:c0:e7:7e:99:5f:6f:32:
ad:73:d6:73:01:68:32:5c:df:76:6f:3f:ea:a8:c3:
2d:dc:d0:33:b4:20:64:ff:b2:b7:0c:a5:d9:90:9b:
9f:27:5d:f6:bc:1d:c6:03:a5:75:55:45:7f:7d:b0:
d4:7e:cb:c0:61:43:9f:a8:ae:95:f7:d5:17:f5:70:
91:79:08:1a:82:8b:a5:0b:dd:55:41:1d:d1:41:87:
bc:78:6a:7d:33:78:1e:d1:bd:96:41:63:fd:14:2c:
92:ee:4d:51:8f:14:5f:10:97:a0:22:bf:1c:aa:2f:
3d:b5:f6:0c:6a:db:9e:62:b4:a9:e1:4f:f1:1c:45:
d7:ae:99:2e:1f:79:e0:f6:11:9a:6e:65:ff:f0:23:
51:3d:5f:61:4a:69:c3:2e:90:4f:3d:0f:31:8a:6f:
49:00:df:c5:77:48:50:42:59:e6:30:89:a0:ee:4a:
41:1e:49:23:16:59:9c:d5:8d:a4:2d:7f:86:bd:14:
d8:e1:35:36:5d:bf:6d:27:35:58:61:09:fc:87:a8:
b9:3c:0f:8d:21:08:20:2e:fb:0a:49:c6:50:75:83:
d0:35:d1:af:e3:b7:ea:93:46:cc:74:6c:d9:7f:30:
68:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:54:9C:B1:FE:5F:CB:55:94:5A:7B:55:26:3B:A0:66:BD:AB:BB:11
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/OVScsf5fy1WUWntVJjugZr2ruxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.59.0/24
163.5.112.0/24
163.5.120.0/23
163.5.125.0/24
163.5.129.0/24
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.148.0/24
163.5.151.0/24
163.5.160.0/24
163.5.167.0/24
163.5.178.0/24
163.5.196.0/24
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.233.0/24
163.5.241.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:e6:da:3f:43:e0:75:ac:fd:02:2b:74:21:34:e3:58:f3:d5:
a8:7a:6b:95:7e:f0:9d:4a:3f:3e:53:ef:0f:c0:88:e6:c7:75:
8f:66:1e:01:93:5f:89:76:5e:53:5b:ab:73:92:f2:23:68:89:
ff:27:1c:a2:3a:cf:59:3f:3d:d7:86:28:10:16:a6:42:20:bb:
eb:88:bf:9b:40:dd:90:81:c8:ad:ff:fb:2f:0b:58:66:39:8e:
88:38:14:7f:fc:c2:77:43:e5:61:27:92:0d:4b:d5:9b:61:a6:
d8:1c:9c:0d:1a:73:a5:40:4c:2a:fd:ea:79:3a:d4:2c:3d:56:
f4:6b:3d:ef:bb:55:57:72:53:1a:72:34:19:c7:f9:3d:ea:b5:
c6:fc:0d:f6:23:ed:98:90:d4:a9:61:a8:ab:57:40:68:42:ab:
85:f2:46:c3:72:df:0f:ef:90:c5:fd:b5:10:62:7f:9c:fc:a1:
3a:af:20:7e:33:21:58:79:69:61:1c:94:ed:07:c9:c8:4b:52:
06:53:05:c0:8c:7f:ca:f8:fd:1c:5f:76:34:70:ed:ca:d3:62:
dd:2f:c2:82:e0:ed:b5:0d:6a:8b:70:37:cc:3c:cb:ac:75:64:
e0:cd:ae:31:6e:3b:bd:ae:90:ae:1f:3f:21:b1:08:87:6d:2c:
a9:4d:dd:75
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Aug 26 04:49:31 2026 by rpki-client