Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/WaJD8WYS7WRipgsmMaFpAtSdvHw.roa
File: WaJD8WYS7WRipgsmMaFpAtSdvHw.roa (raw, json)
Hash identifier: GGQOpGxtuEBBdpFluvwf6DTBP6EET5foAOrUYoUdqVM=
Subject key identifier: 59:A2:43:F1:66:12:ED:64:62:A6:0B:26:31:A1:69:02:D4:9D:BC:7C
Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Certificate serial: 0194266C240925D04FDF54D48A3D816A46FA
Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/WaJD8WYS7WRipgsmMaFpAtSdvHw.roa
Signing time: Thu 02 Jan 2025 09:50:08 +0000
ROA not before: Thu 02 Jan 2025 09:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214238
IP address blocks: 138.124.5.0/24 maxlen: 24
138.124.79.0/24 maxlen: 24
138.124.80.0/24 maxlen: 24
138.124.81.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Jan 2025 03:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:24:09:25:d0:4f:df:54:d4:8a:3d:81:6a:46:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Validity
Not Before: Jan 2 09:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59a243f16612ed6462a60b2631a16902d49dbc7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1f:de:b1:a8:11:5c:e8:bf:59:ab:90:95:86:
f6:88:b6:67:ea:b5:24:63:43:22:fa:b3:f4:95:69:
c2:ca:01:08:77:c2:29:ce:cd:51:6e:19:73:fb:68:
73:2f:c6:a8:db:e5:c1:93:37:4e:80:89:82:a7:6a:
4d:ed:6e:96:75:90:fa:af:4c:a4:f5:7e:7d:80:9f:
5c:04:24:6e:9b:a2:fd:05:8b:12:fe:09:9f:7d:3a:
30:3f:b0:69:a7:d1:8f:d7:49:25:71:94:22:c2:66:
2c:ae:7c:5e:ca:25:8c:28:4c:a2:83:19:4e:44:8d:
68:e1:6e:73:5a:76:81:94:37:ce:67:99:78:1f:cf:
b6:73:4e:15:4d:56:5d:b7:f3:87:84:2e:df:73:01:
0f:fb:bd:f4:ec:91:cc:c6:0c:41:f2:f8:4f:f8:1a:
2b:06:e5:3d:ac:50:f7:d1:97:c1:c3:fa:ca:d9:d9:
76:0d:f3:6c:f4:da:a7:03:d1:f0:a9:bd:9e:e6:5a:
f9:5c:01:da:89:4e:c0:8e:47:90:97:59:8f:1e:98:
26:59:bf:e5:1d:2f:20:ce:3a:8e:77:68:34:82:7f:
db:8b:99:9c:f5:77:b2:20:e9:da:37:b0:df:0a:52:
92:4e:5a:d6:d1:86:47:27:6e:cb:da:a6:3d:28:96:
fc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A2:43:F1:66:12:ED:64:62:A6:0B:26:31:A1:69:02:D4:9D:BC:7C
X509v3 Authority Key Identifier:
keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/WaJD8WYS7WRipgsmMaFpAtSdvHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.5.0/24
138.124.79.0-138.124.81.255
Signature Algorithm: sha256WithRSAEncryption
cb:09:ca:1c:d0:1d:8c:fd:ae:d0:4c:82:09:78:06:e3:b4:e9:
a3:a9:c8:23:82:b1:56:66:37:b1:ce:7a:8b:2c:bb:15:06:9a:
92:bc:57:20:ca:e2:a0:99:4f:a2:10:82:1b:f3:ae:c7:12:f5:
ba:22:70:82:7d:d9:96:9d:11:e5:78:0a:eb:2a:d4:21:2f:57:
cc:98:62:24:ce:53:58:7a:80:63:2d:d3:ff:91:c4:31:69:69:
51:b8:63:c7:4e:fe:c1:31:05:a4:f2:48:c9:b9:6a:e3:31:22:
90:f0:be:d4:00:71:dd:19:fd:dd:e1:16:a9:ae:2a:53:4b:49:
ae:4d:87:a7:82:18:37:b0:2d:ba:f7:47:b8:6e:c5:59:fa:50:
56:a1:7a:59:9c:b7:98:ce:cf:25:62:67:68:03:98:c9:c4:c9:
e5:a9:69:0e:63:63:76:18:19:67:6e:c8:bd:a5:0f:a0:a5:69:
74:d1:71:2b:ff:8c:85:da:b0:09:da:c8:bc:05:ff:b9:08:99:
34:56:51:c3:8d:1c:3f:7a:81:08:20:d8:7e:3f:30:21:2a:41:
39:4c:ce:bc:33:ec:bc:d2:7a:77:c2:98:5e:c5:34:96:bc:96:
66:e5:0b:dd:3c:a1:57:71:00:8a:8c:31:38:bb:a6:d1:f9:55:
74:e3:71:89
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 17 15:50:58 2025 by rpki-client