Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/olWjIhUfeh2n5OsEzfn1JrMWKk8.roa
File: olWjIhUfeh2n5OsEzfn1JrMWKk8.roa (raw, json)
Hash identifier: 5FDN1NdCEdlML6qCPqL/eaa0s3Y0bQlamSWsJAVlkSw=
Subject key identifier: A2:55:A3:22:15:1F:7A:1D:A7:E4:EB:04:CD:F9:F5:26:B3:16:2A:4F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F8C47AC6CE0FB968C9C338ED20F6816AB
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/olWjIhUfeh2n5OsEzfn1JrMWKk8.roa
Signing time: Thu 23 Jul 2026 00:02:15 +0000
ROA not before: Thu 23 Jul 2026 00:02:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219529
IP address blocks: 5.231.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Jul 2026 16:46:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8c:47:ac:6c:e0:fb:96:8c:9c:33:8e:d2:0f:68:16:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 23 00:02:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a255a322151f7a1da7e4eb04cdf9f526b3162a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b1:50:b0:49:b7:9c:08:55:97:38:e9:a3:36:
07:05:33:3f:01:1a:c3:0c:93:ad:e3:31:af:11:58:
1f:3c:85:d0:55:03:35:4c:0c:5c:11:f7:2d:1c:d6:
90:af:c5:f2:2a:67:e3:70:7c:1e:7a:5f:15:46:2c:
aa:d8:01:a9:d5:8f:cf:e1:26:96:f5:8f:47:ad:8a:
62:e3:a2:65:f9:8d:24:bd:41:ab:8d:43:96:02:d9:
73:0d:43:d0:87:15:67:e3:f8:2f:c8:0d:04:d9:c0:
39:fb:d3:3c:db:ad:47:53:4e:a5:d3:68:a4:b3:1f:
ce:31:e0:55:c6:cb:44:8d:cb:29:24:ab:2d:a0:e3:
f6:ec:e4:fb:58:3c:63:45:5d:0a:18:16:f3:12:d8:
b1:33:ae:24:bb:7b:e5:ab:ad:80:8a:d5:1d:c9:dd:
9b:76:d7:64:7f:d4:45:1c:73:4c:22:05:0b:07:63:
71:07:74:1e:4e:bc:59:df:fc:e6:7f:b5:93:98:36:
31:5e:06:2b:9b:a1:d6:1b:78:01:34:64:76:0a:a7:
b3:3c:f0:ff:71:a9:36:10:e0:d5:ca:49:a0:cd:ed:
9d:1a:a1:57:a1:85:91:b0:76:1b:d9:b7:79:78:00:
68:bc:c5:64:8e:e8:40:c4:36:76:c0:22:ca:8e:e0:
00:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:55:A3:22:15:1F:7A:1D:A7:E4:EB:04:CD:F9:F5:26:B3:16:2A:4F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/olWjIhUfeh2n5OsEzfn1JrMWKk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.94.0/24
Signature Algorithm: sha256WithRSAEncryption
02:b2:f1:57:4e:e5:71:31:ad:73:93:20:b3:7d:e3:f6:08:ac:
95:20:82:59:4e:41:7a:d0:0d:36:04:7a:32:b6:4d:b5:dd:b1:
ed:2f:2a:8c:67:1f:cc:eb:bd:d9:ea:90:05:b7:db:d3:41:6d:
e4:40:47:b7:7a:df:f1:41:99:c5:c4:10:c8:87:cf:c1:3d:df:
07:6c:35:eb:5c:2b:80:0a:69:6a:35:70:60:28:85:a1:79:76:
2b:66:32:47:03:18:a5:6d:0a:a9:55:52:27:3b:f6:df:8c:a3:
7f:df:c6:9a:bb:b3:3d:c4:e3:66:68:fb:a4:be:20:17:36:b7:
ff:7f:3c:f8:c7:01:38:a2:f0:d7:a5:07:c2:f6:70:b5:c6:f0:
0a:3b:05:3e:a7:14:f6:e5:9a:4c:c7:bf:55:3a:02:7e:13:40:
53:8e:4a:b5:c2:db:62:df:3b:32:52:50:f8:13:24:71:f5:fd:
87:a7:30:29:e4:f4:5c:a9:58:2c:55:a4:1a:f4:af:ce:93:4a:
8d:f5:80:9c:90:99:04:25:72:d9:4f:39:04:c4:0d:a3:ab:d1:
7b:d2:ef:86:62:09:29:f9:53:0e:85:97:00:1a:0c:82:9d:78:
dd:e8:a5:f2:07:d9:af:2b:14:34:37:c6:03:7b:9d:7a:fd:ba:
e3:4c:16:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 18:59:39 2026 by rpki-client