Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/OKY1mZ1VAwtAOzvBy3CwMWiZ4cQ.roa
File: OKY1mZ1VAwtAOzvBy3CwMWiZ4cQ.roa (raw, json)
Hash identifier: V6wF488bfTQzwxrQ8IGbxk+hRWYcAI2JdkSq+Hokmik=
Subject key identifier: 38:A6:35:99:9D:55:03:0B:40:3B:3B:C1:CB:70:B0:31:68:99:E1:C4
Certificate issuer: /CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Certificate serial: 0194206834B48A8C5F13DCFAFE31075A0A19
Authority key identifier: 96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/OKY1mZ1VAwtAOzvBy3CwMWiZ4cQ.roa
Signing time: Wed 01 Jan 2025 05:48:07 +0000
ROA not before: Wed 01 Jan 2025 05:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200195
IP address blocks: 5.42.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Jan 2025 07:22:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:34:b4:8a:8c:5f:13:dc:fa:fe:31:07:5a:0a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Validity
Not Before: Jan 1 05:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38a635999d55030b403b3bc1cb70b0316899e1c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:52:17:d2:9c:ba:bc:0a:73:5d:11:52:dc:4d:
bc:97:3d:81:10:88:ac:70:05:73:ed:14:47:ac:48:
01:76:16:f3:ad:71:6d:ee:eb:f5:32:44:0c:29:33:
05:25:2e:bc:7a:b6:d2:08:5c:20:6a:fe:34:5f:47:
50:e5:50:9e:f4:8a:d7:4b:5a:28:bf:a2:6a:11:20:
c2:ce:7f:3a:e8:27:51:60:5d:2a:b5:d6:c1:4f:c7:
4b:55:d4:2b:6b:55:47:e0:71:40:b3:b2:08:68:11:
e5:1c:a3:7c:c1:88:98:98:8a:49:02:1b:e2:43:16:
37:91:e0:62:60:0b:9e:9a:63:03:a5:6a:da:2b:97:
a1:3e:7e:00:ed:8e:4d:aa:48:b5:8e:da:82:0c:68:
9c:61:3f:de:60:d2:eb:7d:96:da:64:c5:1b:12:12:
24:00:ed:dd:03:c5:53:86:c3:c2:f5:b6:bd:60:0a:
fa:4f:ed:76:df:45:9c:3d:09:66:2e:06:1a:7a:83:
0f:ba:9f:b7:bf:11:ff:3a:6a:17:d0:f0:1f:68:51:
8d:84:a4:9f:fc:7d:cc:54:88:ac:cd:fc:cf:94:af:
e7:fb:ed:54:5a:fa:99:8a:0b:df:97:67:b9:28:aa:
0d:09:94:e3:46:1e:a9:56:4b:20:21:c9:14:f9:eb:
67:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A6:35:99:9D:55:03:0B:40:3B:3B:C1:CB:70:B0:31:68:99:E1:C4
X509v3 Authority Key Identifier:
keyid:96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/OKY1mZ1VAwtAOzvBy3CwMWiZ4cQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.68.0/24
Signature Algorithm: sha256WithRSAEncryption
52:ea:29:51:d9:98:b4:80:43:46:01:64:46:1a:ed:57:60:a6:
0a:97:ca:91:dd:6e:c3:f8:dd:b6:d3:cb:6b:d0:99:37:80:36:
ef:51:7c:2e:73:c2:7b:53:51:5d:ba:60:b6:11:68:10:e0:64:
f7:16:58:57:e8:5b:74:29:cb:65:6e:40:28:29:f7:a3:07:cc:
cc:fe:7f:43:c6:b9:b5:40:f8:9e:67:6c:3b:79:34:8f:db:59:
c0:20:28:2d:96:1a:03:09:48:75:b8:9d:dc:f5:39:c5:e1:e0:
a6:47:21:e3:5b:76:61:39:df:2e:1b:22:c0:e8:af:8d:f6:c7:
a2:6d:11:6a:30:5d:66:9c:21:30:c5:6e:b1:e2:c2:6b:de:fa:
bd:97:7b:a8:eb:24:9f:86:b5:54:8e:94:15:17:df:c1:eb:d4:
90:e4:21:a4:ce:f7:43:8b:05:73:45:70:0a:08:ff:75:d1:ae:
1c:ca:92:4f:1c:df:a3:13:2a:ae:bd:82:9d:a3:14:b5:82:6c:
cc:bd:34:bb:3b:26:79:48:9d:86:d4:87:99:1a:92:6f:2c:58:
97:27:4d:ae:13:8a:34:bc:a5:e3:25:7d:33:12:69:01:26:a4:
7b:9a:e2:f0:7b:79:61:97:82:16:38:80:2e:e5:a5:37:77:84:
2c:22:e3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:59 2025 by rpki-client