Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/WnvJXTgbuKK3GhGaBHdWfZ5dmYw.roa
File: WnvJXTgbuKK3GhGaBHdWfZ5dmYw.roa (raw, json)
Hash identifier: OKYoby9csRBEZRtTWEClRZaPvfOhhSQNeVMrScDUSv4=
Subject key identifier: 5A:7B:C9:5D:38:1B:B8:A2:B7:1A:11:9A:04:77:56:7D:9E:5D:99:8C
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 019420D61CBB0B66507A0738F879BF9D6537
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/WnvJXTgbuKK3GhGaBHdWfZ5dmYw.roa
Signing time: Wed 01 Jan 2025 07:48:10 +0000
ROA not before: Wed 01 Jan 2025 07:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211895
IP address blocks: 85.204.127.0/24 maxlen: 24
89.33.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Jan 2025 18:43:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:1c:bb:0b:66:50:7a:07:38:f8:79:bf:9d:65:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 1 07:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a7bc95d381bb8a2b71a119a0477567d9e5d998c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a6:30:c6:d9:e0:96:f7:53:0c:21:f3:f6:31:
10:b9:47:8a:fc:d7:90:9b:59:4d:f3:4d:2b:33:70:
c9:38:2d:1a:3c:92:fe:bc:65:94:e6:dd:44:c1:40:
49:bd:6f:0b:9a:a7:95:34:2b:9e:c1:60:53:70:28:
9b:44:d0:a3:e8:62:41:e5:b3:02:c6:e9:1a:be:e5:
8b:95:96:d3:d1:e0:46:57:23:05:fb:db:3c:c7:ec:
87:98:df:15:09:e6:6a:d9:d3:4b:54:8e:1e:64:a4:
e3:31:48:4d:4c:5e:d3:d5:32:da:ad:22:7f:e9:fc:
2d:ec:8b:9c:d0:91:a4:18:a8:bb:1e:7c:cf:49:17:
d1:3e:a7:52:aa:25:1c:ca:41:f6:54:ec:13:2e:01:
34:d4:a6:53:25:97:1b:60:fb:95:1a:0c:ad:a9:3a:
7e:12:16:11:11:26:7a:53:a8:c8:24:1a:a0:f6:75:
86:94:06:fc:46:ef:d3:ff:c2:25:ba:d9:04:e0:34:
48:05:c8:7f:71:45:9f:1c:ff:14:15:d8:17:b9:13:
d5:b4:ed:cd:b0:f7:8d:aa:7f:05:c1:37:7b:3d:d7:
95:2c:59:6e:63:fe:05:55:e0:fc:49:87:94:14:7c:
4e:62:64:df:e4:e9:bc:c6:5c:cd:e4:13:1a:ed:7a:
f0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7B:C9:5D:38:1B:B8:A2:B7:1A:11:9A:04:77:56:7D:9E:5D:99:8C
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/WnvJXTgbuKK3GhGaBHdWfZ5dmYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.127.0/24
89.33.163.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:1b:b7:1a:9b:fd:f7:2e:73:bc:71:19:94:34:4b:c1:a3:55:
06:86:51:ab:b9:38:02:82:46:7b:ba:be:7a:a0:17:b0:20:d4:
f3:93:2a:76:42:c5:bb:24:10:b8:8a:10:4a:89:49:8c:9b:ce:
ea:37:9f:f2:83:01:76:d8:92:38:83:e3:fa:72:e6:66:77:71:
95:5c:42:73:92:2b:b0:6b:e5:84:34:d6:2b:a0:66:24:5c:34:
96:87:cb:04:75:19:af:81:c6:0e:49:9d:f1:d5:e8:4a:c7:6d:
86:c9:1a:4d:df:af:64:c3:06:87:6d:04:1c:ce:cf:1d:83:fa:
f6:4e:af:0e:19:3c:e7:22:21:63:ff:c0:bf:af:c6:b2:96:8f:
8d:10:9e:b0:0a:f7:60:01:24:2f:78:1c:c1:8d:83:d8:3f:dc:
92:e1:9d:ce:6e:6e:4d:e9:e0:49:b6:a8:3e:04:35:29:8f:2f:
d8:ec:c2:62:30:9e:52:61:ff:44:4d:32:a2:ea:0f:74:e7:2b:
1e:64:c9:22:b7:45:e0:84:d8:07:37:5e:b1:5a:fa:90:4e:0d:
07:9c:5c:a0:56:e8:32:05:f1:6e:26:21:82:84:ca:a4:e9:9c:
bd:00:27:e6:c9:8a:83:9c:fd:ec:e8:de:63:09:27:b8:77:46:
d3:83:a3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:00:51 2025 by rpki-client