Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/OXH6C2sYERwGeMvIq6gWWDtvcUM.roa
File: OXH6C2sYERwGeMvIq6gWWDtvcUM.roa (raw, json)
Hash identifier: EyYB7Tm0MuZT+WlTFxyz3f56eqiIYv7nDQtRbp0eRLM=
Subject key identifier: 39:71:FA:0B:6B:18:11:1C:06:78:CB:C8:AB:A8:16:58:3B:6F:71:43
Certificate issuer: /CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Certificate serial: 0194258F95B5586F66AEBFEB229B3B4B69AE
Authority key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/OXH6C2sYERwGeMvIq6gWWDtvcUM.roa
Signing time: Thu 02 Jan 2025 05:49:14 +0000
ROA not before: Thu 02 Jan 2025 05:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64425
IP address blocks: 5.182.210.0/23 maxlen: 24
185.244.39.0/24 maxlen: 24
2a0d:2406:200::/39 maxlen: 39
Validation: Failed, certificate revoked on Wed 15 Jan 2025 13:25:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:95:b5:58:6f:66:ae:bf:eb:22:9b:3b:4b:69:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Validity
Not Before: Jan 2 05:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3971fa0b6b18111c0678cbc8aba816583b6f7143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a4:9d:8a:1c:39:b6:65:14:00:5c:07:4e:b8:
65:37:a2:78:12:88:fb:1b:03:e6:e4:f7:61:4a:25:
32:44:bb:87:5e:73:fe:42:76:70:d5:f2:9c:14:08:
91:4d:2d:3c:7d:df:f8:8b:02:78:95:36:3e:e8:ef:
1f:ff:5b:d4:c5:2e:ef:b9:76:69:32:5a:e3:b5:b4:
b8:bd:e2:6a:04:3e:c2:b3:f5:8d:27:28:a7:8f:dd:
e8:42:e1:20:e9:49:1b:9d:2b:6f:bd:fd:bc:d1:64:
19:02:8c:f0:da:88:89:ed:82:99:32:d4:ad:a7:04:
b6:62:d7:b3:96:2c:b3:8a:44:d6:45:d4:8b:24:62:
85:c0:db:d2:0f:9a:05:01:0d:4e:9a:37:cc:ec:17:
2f:9b:6f:9e:ff:13:91:71:51:b0:ba:c1:f4:00:3a:
9e:af:f7:77:e2:94:8e:c0:36:33:af:ab:a1:89:5e:
19:8e:ed:97:92:51:14:d3:7d:5b:53:55:65:b6:94:
1b:51:39:94:b0:b2:36:fb:74:19:c0:20:3d:fb:f1:
49:60:26:bf:ca:37:9d:59:96:45:20:5f:d8:76:f8:
f6:f5:88:93:df:2b:21:92:eb:13:4b:d8:78:3b:49:
ed:10:48:2b:0d:80:c3:b1:c5:87:4d:96:dd:e4:91:
07:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:71:FA:0B:6B:18:11:1C:06:78:CB:C8:AB:A8:16:58:3B:6F:71:43
X509v3 Authority Key Identifier:
keyid:EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/OXH6C2sYERwGeMvIq6gWWDtvcUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.210.0/23
185.244.39.0/24
IPv6:
2a0d:2406:200::/39
Signature Algorithm: sha256WithRSAEncryption
53:c7:b3:d0:05:67:bb:fe:0f:8f:8f:8d:02:53:5c:3f:5c:f9:
55:1a:db:97:a4:0a:87:60:13:9e:e4:3a:f9:0b:f9:46:78:66:
d3:82:0e:6c:96:c3:7f:76:00:79:d3:df:d8:f8:ac:f9:37:16:
94:10:a8:0c:b5:ec:f9:07:42:43:c7:dd:6f:3b:bc:98:d0:be:
e4:9f:5d:47:ef:58:96:a5:f5:f1:b3:67:04:a9:69:e1:9c:e8:
9d:a2:b5:5f:a5:b5:3a:5d:87:9d:b8:b1:fb:af:47:51:2e:5f:
4d:f4:cd:f3:3e:dd:b9:be:96:1b:df:39:9a:8e:d6:42:05:e5:
5b:f6:d6:04:48:87:a5:d6:69:55:6b:4e:74:4f:79:d7:39:e9:
32:1b:a7:a8:4b:ef:64:c5:72:4c:1a:4b:3d:c8:fd:4f:73:a8:
d3:a2:84:d4:bc:52:14:ca:ce:90:3c:01:cc:6f:a5:c8:48:b9:
64:0a:21:21:3e:92:78:ea:01:ff:1b:68:24:19:94:19:d1:7b:
3e:af:e8:2f:47:9f:f9:79:2f:e1:22:00:7c:af:99:b5:f2:a2:
f0:b3:47:6c:c8:8e:fc:12:d5:7d:64:82:1b:98:c3:cc:20:67:
7b:e8:f6:9e:b5:1c:ae:41:8f:dd:3a:3c:1e:4d:91:1a:98:64:
df:91:c9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:34:10 2025 by rpki-client