Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/Om_UrAfN6sZ7VnVgM73J4dyIpT8.roa
File: Om_UrAfN6sZ7VnVgM73J4dyIpT8.roa (raw, json)
Hash identifier: 3+dvUDHzGkHz/zPfv2EGNojPWFlC18FfIuGkEK4RzK8=
Subject key identifier: 3A:6F:D4:AC:07:CD:EA:C6:7B:56:75:60:33:BD:C9:E1:DC:88:A5:3F
Certificate issuer: /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Certificate serial: 018CC79484588DBF86503F81F25FBAE473DA
Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/Om_UrAfN6sZ7VnVgM73J4dyIpT8.roa
Signing time: Tue 02 Jan 2024 00:30:48 +0000
ROA not before: Tue 02 Jan 2024 00:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197389
IP address blocks: 5.172.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:48:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:84:58:8d:bf:86:50:3f:81:f2:5f:ba:e4:73:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Validity
Not Before: Jan 2 00:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a6fd4ac07cdeac67b56756033bdc9e1dc88a53f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:83:d0:c1:43:16:75:6f:49:da:e8:cf:10:27:
4e:c4:9c:96:41:64:9e:b3:8d:13:e3:1c:a1:f4:af:
12:cf:22:31:85:7e:83:59:d3:9e:a9:53:b2:3d:68:
cd:e6:8f:d6:6e:ef:0a:a8:dd:c1:4d:75:d5:31:3a:
ad:97:0a:a8:cf:3e:28:0e:46:bb:63:7a:46:9a:52:
22:ee:d1:9f:9f:22:2f:a8:d9:ae:27:15:68:31:49:
b9:5a:d7:52:3e:53:4e:63:6b:f7:b5:26:16:94:21:
df:77:0f:a3:aa:ed:6d:a8:af:bf:92:38:9f:88:a6:
7d:5e:b4:3f:55:87:d9:a4:a4:50:9b:39:9e:5f:a4:
e9:d1:b8:97:11:c8:47:47:74:0c:53:b1:90:03:9b:
0e:12:6e:27:89:a7:1c:d7:d0:0e:47:62:08:a9:af:
85:1e:cc:4f:10:db:92:d4:09:34:b9:69:81:88:cc:
75:1d:bc:e9:db:1b:57:2e:55:6c:49:14:76:f1:41:
ca:01:5a:44:c3:8f:91:25:3e:06:f8:16:c8:22:a9:
46:bc:80:95:1f:e5:b8:da:b6:2c:54:42:16:30:8e:
91:0b:90:a9:42:07:51:12:a3:cc:f3:b7:6b:36:45:
30:f7:39:e9:57:6a:31:f5:26:8a:78:83:82:fc:1e:
47:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6F:D4:AC:07:CD:EA:C6:7B:56:75:60:33:BD:C9:E1:DC:88:A5:3F
X509v3 Authority Key Identifier:
keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/Om_UrAfN6sZ7VnVgM73J4dyIpT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.200.0/24
Signature Algorithm: sha256WithRSAEncryption
88:8a:2b:92:3e:f3:0c:af:d1:7c:19:45:f7:ec:e8:b9:b4:d3:
4d:d3:ab:7f:03:a0:71:32:ae:fc:4b:e1:0d:6d:f7:b9:06:b7:
f1:cd:a9:88:b5:47:09:47:4a:4e:37:f5:f7:01:8d:40:41:3d:
b7:af:50:91:d9:ef:57:d0:6f:d7:e2:60:46:b0:b9:86:a7:26:
66:5d:fa:45:e7:35:63:71:e0:bd:63:5f:64:a6:f6:dd:05:f4:
68:df:3a:5d:be:2f:5e:3c:28:5a:cd:0c:83:1f:38:98:53:1d:
aa:c7:47:6a:05:52:9a:74:af:11:2d:68:b6:67:45:99:e5:af:
79:34:85:33:37:02:25:3d:e1:c0:20:d8:69:0b:24:34:21:de:
81:96:24:b9:65:fb:91:08:9a:93:d0:78:54:31:c4:de:ad:0d:
5a:3e:bb:9d:0b:21:79:78:eb:af:aa:44:63:b0:82:a3:9b:21:
01:17:21:3d:78:1e:64:ae:6f:fc:ea:74:fa:3c:36:17:7b:d4:
3c:a9:16:aa:c1:03:24:82:c0:4c:a8:8d:1a:5b:d1:5a:85:27:
52:96:b1:79:64:8a:25:e1:ba:98:cf:0a:a1:d6:d2:66:cd:e2:
8b:67:50:79:ec:39:f8:83:2a:77:15:97:92:47:e5:de:3e:65:
20:d5:93:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 17:06:28 2025 by rpki-client