Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/wcdLl_7zGPcLBhmh7rG-uynxcLU.roa
File: wcdLl_7zGPcLBhmh7rG-uynxcLU.roa (raw, json)
Hash identifier: vNAXxx+PXxWD/WOIEy+Rt3/lzpAnzMR0mMRloNg7Kyc=
Subject key identifier: C1:C7:4B:97:FE:F3:18:F7:0B:06:19:A1:EE:B1:BE:BB:29:F1:70:B5
Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a
Certificate serial: 0197E1DA3A1F4147434241AEC0DB915653C1
Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/wcdLl_7zGPcLBhmh7rG-uynxcLU.roa
Signing time: Sun 06 Jul 2025 22:27:44 +0000
ROA not before: Sun 06 Jul 2025 22:27:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208392
IP address blocks: 45.132.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Jul 2025 16:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e1:da:3a:1f:41:47:43:42:41:ae:c0:db:91:56:53:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a
Validity
Not Before: Jul 6 22:27:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1c74b97fef318f70b0619a1eeb1bebb29f170b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e0:fe:de:fa:4a:62:2d:e1:f3:e8:65:3a:b9:
c8:63:67:d3:a8:39:2a:6c:e8:4c:ab:43:04:b1:cb:
55:54:f4:0e:ba:77:c1:02:56:6c:36:32:78:5f:81:
b7:6a:c7:75:58:95:d9:10:0e:7c:46:cc:6f:21:76:
3f:51:89:61:46:2b:5f:dd:9e:ba:bd:fd:8e:8a:8a:
32:61:25:71:f9:86:1b:25:80:a7:05:6d:1f:05:5d:
94:24:d9:13:5a:de:dd:da:d5:df:31:26:b1:58:ab:
e6:44:8f:a5:61:b6:75:b8:f5:f6:e6:cb:0a:09:73:
63:d0:7a:ea:70:10:54:03:6c:8d:f8:ce:b9:ca:1a:
1c:85:47:0d:ba:90:6a:2f:40:33:5f:91:ef:d4:d9:
6b:83:de:e7:a2:c9:4c:6a:e8:69:6d:c8:5a:d5:0d:
d2:a8:d5:ed:44:76:b6:80:35:db:26:f2:23:8d:47:
30:c4:d1:79:6c:d1:1d:98:fc:ff:52:e5:17:6e:38:
de:3e:6b:c7:96:20:c0:ce:4b:46:a5:be:02:42:3e:
6a:1c:9e:26:f6:74:06:b1:cc:04:d5:12:5b:d1:2a:
9d:44:ad:86:a6:7d:fb:e9:8b:55:31:4a:29:1e:55:
95:d0:62:4e:20:fc:f4:a5:ac:fc:76:49:87:fd:c7:
e2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C7:4B:97:FE:F3:18:F7:0B:06:19:A1:EE:B1:BE:BB:29:F1:70:B5
X509v3 Authority Key Identifier:
keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/wcdLl_7zGPcLBhmh7rG-uynxcLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.253.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:ad:8d:1a:57:6f:71:37:ec:16:0d:bc:95:9c:75:b4:d3:07:
03:12:48:60:52:b2:82:ae:68:2d:8a:f8:bb:dd:e6:83:9c:43:
6d:ba:32:8f:01:d4:71:92:ec:58:a6:e6:c1:d3:0b:cb:e0:d4:
99:7a:86:ab:94:d2:49:e6:7e:a1:04:fd:cc:29:8e:d5:99:4d:
bf:0e:ea:83:3e:f4:aa:24:d4:6e:f4:30:01:da:9d:9c:d4:a6:
7f:b6:af:27:aa:5f:bf:ed:28:a4:27:6b:d5:a3:bb:82:6a:08:
ba:52:a3:80:ea:09:fa:f7:8a:90:b6:00:f9:72:82:6c:43:99:
84:f2:d9:e8:8e:85:ce:44:ac:76:34:d8:da:6f:cc:23:4e:b7:
e8:ab:ef:8a:fb:20:86:2f:7c:f7:82:9b:3e:c4:7f:d4:96:c5:
4f:bd:6b:c8:21:b9:3e:b7:5c:1d:e4:9c:e9:fb:3f:3e:db:b4:
df:e0:65:e4:83:ad:71:b8:85:fb:81:65:b3:71:ab:83:85:3a:
fe:56:2a:fc:ca:ce:2c:94:ef:9d:72:8f:4a:e8:5c:b1:40:53:
25:1c:49:b7:ff:c1:a7:94:3d:90:eb:58:0d:59:15:b6:1a:45:
3e:9c:76:06:7e:31:e4:39:c4:4b:86:c7:ad:d7:bb:fe:e7:c7:
05:b8:f8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:11:09 2025 by rpki-client