Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/OGYTXCH3HDVScu-x4ReLgy2SjOE.roa
File: OGYTXCH3HDVScu-x4ReLgy2SjOE.roa (raw, json)
Hash identifier: 9uR/Q8txEyCEJjHifG309isW0bu8EwAuItgO/pQmlKg=
Subject key identifier: 38:66:13:5C:21:F7:1C:35:52:72:EF:B1:E1:17:8B:83:2D:92:8C:E1
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01976E79FE1CAA9B7F78792FF727FDEB2C79
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/OGYTXCH3HDVScu-x4ReLgy2SjOE.roa
Signing time: Sat 14 Jun 2025 12:46:18 +0000
ROA not before: Sat 14 Jun 2025 12:46:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207350
IP address blocks: 5.231.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 14 Jun 2025 13:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:79:fe:1c:aa:9b:7f:78:79:2f:f7:27:fd:eb:2c:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 14 12:46:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3866135c21f71c355272efb1e1178b832d928ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:58:0e:0c:de:94:4e:ae:71:5b:00:1e:7e:60:
b9:d4:3e:9e:fd:18:7d:61:d6:cc:68:db:43:0d:b7:
98:bd:00:26:77:0f:f0:87:1f:eb:02:01:d2:62:1b:
d7:74:cc:50:14:f2:23:b7:a5:2f:3c:c0:40:72:04:
f5:de:87:37:45:c9:33:ec:c8:df:35:c4:1e:52:71:
6c:20:7e:4c:fb:f7:14:9f:94:84:ba:78:0e:56:a1:
b8:74:88:f7:64:e8:86:1e:e8:e2:d5:20:af:a6:fa:
d8:41:56:15:a6:a3:3b:da:7a:e8:51:25:25:9d:51:
76:3a:a5:68:2a:04:35:7f:9b:04:87:79:8e:37:75:
f1:52:b2:a8:27:69:57:8a:ee:df:f1:a6:0b:45:36:
8a:13:06:22:31:a5:c4:58:e6:5f:39:08:f7:86:12:
bc:1a:96:d1:34:76:9f:ae:8b:6b:9c:d2:07:ab:66:
5f:44:e1:a6:cf:ee:01:3b:c6:9b:5f:59:5c:44:ed:
35:76:cb:1d:c0:2a:a4:17:a5:d1:28:6e:a1:10:45:
b8:04:8f:26:46:13:89:6d:2e:19:37:6a:39:97:d2:
66:ca:61:1f:43:08:9f:40:2c:f4:a3:a1:87:a8:b5:
9e:77:e4:63:e5:4d:9e:ee:ea:69:6b:4a:1c:47:ac:
90:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:66:13:5C:21:F7:1C:35:52:72:EF:B1:E1:17:8B:83:2D:92:8C:E1
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/OGYTXCH3HDVScu-x4ReLgy2SjOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.204.0/24
Signature Algorithm: sha256WithRSAEncryption
75:7c:dc:df:af:24:48:e1:d8:61:20:16:04:ca:b8:af:25:97:
3c:5f:ba:3f:c4:85:7c:f1:87:eb:c7:2a:11:db:4f:5d:da:3b:
ba:0d:f0:fe:b1:90:0d:55:ce:dd:4e:54:69:7b:1f:8b:e9:22:
b4:61:bd:e0:8f:28:8e:9c:c5:ab:a0:37:70:60:49:df:9b:19:
d9:74:f3:49:e1:6e:0a:13:4f:c6:29:f0:ef:09:98:d6:c0:c4:
e1:d7:8e:83:7e:f1:f4:69:00:8e:71:47:00:48:d4:3a:de:15:
a9:22:e2:87:21:f4:66:3d:a5:86:f6:e3:e6:a1:63:e3:2a:4c:
c7:8e:de:65:7c:82:f9:9c:c5:13:30:5e:e2:ab:f0:2a:e7:e8:
79:ca:f5:51:c3:f9:44:65:b2:76:aa:77:d4:a0:b7:f8:3e:fd:
34:31:59:76:18:ec:c6:92:2b:4f:71:ee:22:4b:14:c2:8b:1a:
43:18:ba:78:aa:7e:8d:ee:44:2c:06:5e:fa:69:55:10:94:68:
73:ee:bb:3d:8b:44:36:8a:68:ff:41:6d:77:e1:1b:cc:91:98:
90:8d:a7:cf:60:f9:81:f4:c1:63:62:7b:a0:40:23:82:fd:de:
2a:60:cd:20:c5:18:03:c1:ed:e8:ae:b3:da:db:15:87:32:b0:
84:19:d6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 05:18:12 2025 by rpki-client