Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/weSaSbS38KXATqI7_UV5wIfpjIw.roa
File: weSaSbS38KXATqI7_UV5wIfpjIw.roa (raw, json)
Hash identifier: wT8rcddAH3ON6Z8Mo9g+ljEI6z6hKgYQ9IOWVlrJSlY=
Subject key identifier: C1:E4:9A:49:B4:B7:F0:A5:C0:4E:A2:3B:FD:45:79:C0:87:E9:8C:8C
Certificate issuer: /CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Certificate serial: 0197DEE3388694D093D73B1F7AA0E4D47A09
Authority key identifier: A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/weSaSbS38KXATqI7_UV5wIfpjIw.roa
Signing time: Sun 06 Jul 2025 08:38:42 +0000
ROA not before: Sun 06 Jul 2025 08:38:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152179
IP address blocks: 46.236.204.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sun 06 Jul 2025 10:39:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:de:e3:38:86:94:d0:93:d7:3b:1f:7a:a0:e4:d4:7a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Validity
Not Before: Jul 6 08:38:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1e49a49b4b7f0a5c04ea23bfd4579c087e98c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2f:d3:66:5a:5e:f6:e4:f6:ef:5f:29:61:84:
df:28:60:97:7c:39:c0:3d:39:e3:3f:8d:cb:e0:01:
8b:c4:25:8e:20:1f:76:99:8b:c9:9f:31:ee:9a:a6:
5b:a4:5c:69:96:2b:19:e8:93:ec:c9:fd:5c:ac:3f:
5d:05:7c:d1:12:50:59:a5:72:e1:2f:c2:7f:49:3b:
fc:fa:42:6b:9e:03:9f:70:aa:78:a2:5d:18:0c:19:
b5:f5:89:7a:ac:9b:ab:15:71:93:da:c6:bf:d2:55:
90:4c:84:ae:28:77:59:15:87:9e:b7:95:a8:07:3b:
31:5e:15:42:e8:fd:1a:9a:93:7b:fd:39:6d:92:2f:
f6:d2:52:d7:11:8f:27:26:c3:02:16:ee:bc:f2:f7:
f2:73:d9:6c:49:2d:ce:26:4b:46:ad:38:e1:12:99:
46:ae:82:a6:04:ed:76:c4:a4:0a:2a:cf:02:7b:75:
e8:9a:4f:c4:28:57:db:fb:f6:56:89:9f:04:0f:df:
ee:90:47:ac:1d:2d:cc:03:fc:aa:50:14:b2:25:d4:
d8:1f:c9:1a:ea:2e:c8:6c:30:f6:d7:a7:a5:92:bf:
4b:2a:6f:c0:34:ca:1b:23:8e:3a:f7:81:3e:ba:37:
90:93:8b:46:92:02:76:fb:8a:e9:0c:c7:a5:36:14:
5d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E4:9A:49:B4:B7:F0:A5:C0:4E:A2:3B:FD:45:79:C0:87:E9:8C:8C
X509v3 Authority Key Identifier:
keyid:A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/weSaSbS38KXATqI7_UV5wIfpjIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.204.0/23
Signature Algorithm: sha256WithRSAEncryption
56:28:85:44:c3:e0:85:02:32:ca:92:bf:32:b5:65:ed:04:a6:
b3:f7:75:78:f2:a4:31:a3:ee:35:59:ef:40:8c:88:d1:2c:cd:
55:61:88:2c:f6:06:c3:65:fd:ab:c7:87:bc:f2:9a:3f:00:c8:
eb:ef:3f:14:50:bf:dd:32:c6:87:a2:4f:c3:36:61:47:23:9a:
77:c0:86:5c:b3:d6:54:d5:2b:28:32:c5:80:35:22:5b:71:d4:
c6:05:64:81:96:dd:83:84:f3:d7:28:d8:e3:e5:86:ae:12:0f:
9c:d2:f3:ae:d0:83:38:f1:5d:a9:62:af:57:e0:db:8f:b9:48:
21:74:99:ae:db:0a:ec:83:7c:dc:ce:1b:f3:62:f0:df:34:a9:
3d:7e:d9:4b:80:01:1c:b3:9e:cd:26:c8:cd:03:75:e5:b9:b2:
37:58:32:87:2a:d9:7b:09:3f:67:21:10:f1:93:39:2b:b8:7c:
9c:c4:17:1a:31:f2:05:9f:63:50:c0:b8:d0:f7:25:05:3a:0f:
47:7f:c5:2c:81:18:d0:64:b8:9c:1d:98:7c:26:ab:6b:ca:98:
ae:cf:4a:ec:6e:e7:83:42:62:7b:ec:93:4e:19:95:d1:3d:43:
0f:d2:9f:25:7a:dd:1a:e4:9d:50:ad:f1:65:72:8c:ef:f4:c2:
e2:b1:13:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 17:24:14 2025 by rpki-client