Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/wNQyX8u28NMlL1jfP-Wm2gY6l3s.roa
File: wNQyX8u28NMlL1jfP-Wm2gY6l3s.roa (raw, json)
Hash identifier: GhHjAjQhTF9z119XYqTK1iYqjOzeU5dwh9qeXZXeU/w=
Subject key identifier: C0:D4:32:5F:CB:B6:F0:D3:25:2F:58:DF:3F:E5:A6:DA:06:3A:97:7B
Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial: 0198137F648CE7F9431EBCDCD0FE6C260E72
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/wNQyX8u28NMlL1jfP-Wm2gY6l3s.roa
Signing time: Wed 16 Jul 2025 13:49:32 +0000
ROA not before: Wed 16 Jul 2025 13:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34879
IP address blocks: 212.193.144.0/24 maxlen: 24
212.193.145.0/24 maxlen: 24
212.193.146.0/23 maxlen: 23
212.193.148.0/23 maxlen: 24
212.193.148.0/24 maxlen: 24
212.193.149.0/24 maxlen: 24
212.193.150.0/23 maxlen: 24
212.193.150.0/24 maxlen: 24
212.193.151.0/24 maxlen: 24
212.193.152.0/23 maxlen: 23
212.193.152.0/24 maxlen: 24
212.193.153.0/24 maxlen: 24
212.193.155.0/24 maxlen: 24
212.193.156.0/23 maxlen: 24
212.193.156.0/24 maxlen: 24
212.193.157.0/24 maxlen: 24
212.193.158.0/24 maxlen: 24
212.193.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Jul 2025 13:51:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:13:7f:64:8c:e7:f9:43:1e:bc:dc:d0:fe:6c:26:0e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Validity
Not Before: Jul 16 13:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0d4325fcbb6f0d3252f58df3fe5a6da063a977b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a2:30:d5:b2:ad:1c:5e:b9:8d:c8:01:c8:b4:
19:3b:cc:f5:c5:2a:5c:65:50:a3:b7:37:11:ea:73:
7e:7a:e5:d4:39:d6:11:c4:fa:17:58:c2:7d:e9:bf:
65:fa:15:43:cc:f0:be:96:cc:20:da:91:d2:2e:83:
02:5b:03:d6:00:ee:39:8d:da:aa:03:8f:08:51:d1:
7a:7d:e7:14:62:01:e0:a5:d6:c8:64:7a:bc:1d:fb:
97:01:e5:56:0e:1a:04:2b:fa:82:72:ea:6f:55:4d:
87:38:85:38:2e:4e:6b:33:eb:b4:f9:e1:e1:fd:bb:
00:13:cf:60:a3:3f:8d:24:c1:8f:e8:97:ef:24:15:
d5:da:bd:3c:32:29:5c:02:ab:3d:16:49:98:89:e9:
90:62:11:2e:7e:07:cb:0d:17:2d:ae:31:a2:cb:79:
3c:0b:4a:f8:06:cb:34:a5:83:d1:1a:c8:78:cb:12:
1b:16:83:ca:09:18:89:01:c9:0e:37:85:3c:fc:0c:
86:cb:6c:c4:dd:6d:30:bb:99:f8:21:07:5c:30:2f:
94:d1:05:9b:d9:ca:3d:2e:2d:f4:4c:2a:90:5a:23:
bc:23:3c:33:1e:28:f1:56:7f:7e:7e:b4:fc:be:22:
9a:49:39:3c:40:6e:3b:32:8e:00:23:9a:92:76:0f:
a4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D4:32:5F:CB:B6:F0:D3:25:2F:58:DF:3F:E5:A6:DA:06:3A:97:7B
X509v3 Authority Key Identifier:
keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/wNQyX8u28NMlL1jfP-Wm2gY6l3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.193.144.0-212.193.153.255
212.193.155.0-212.193.159.255
Signature Algorithm: sha256WithRSAEncryption
7c:0a:c5:cd:25:95:3e:1f:f6:fd:af:11:01:e4:a1:15:a4:51:
99:bf:0a:21:10:1f:59:91:3d:83:ca:04:bb:8c:71:4f:7f:47:
66:b7:dd:8b:ee:2d:f1:6e:2f:bf:d5:a7:96:e4:71:7a:ed:3a:
93:7b:84:a1:80:02:39:ff:00:c5:a2:7b:de:67:0b:46:6b:ef:
f5:9f:20:1f:fc:19:f2:c3:7b:c6:63:d0:76:7f:54:6c:b2:a5:
d1:c0:6c:79:43:d4:2e:05:96:e7:63:cd:b7:7d:d7:5b:00:f3:
05:93:7f:aa:fa:4b:67:f0:ee:b0:86:74:d6:bb:11:c6:a4:82:
eb:ea:15:e1:63:42:c4:af:7d:2d:ca:9d:67:00:48:29:cd:51:
c9:2e:8b:f7:c1:2b:76:08:15:d1:16:42:dc:a6:80:4d:f7:a8:
af:bf:cb:8d:30:0e:bc:11:5c:3d:66:b0:9d:55:aa:f8:6b:7c:
35:cb:8b:06:1d:4c:13:ff:08:51:bb:0a:b9:5e:0b:03:9b:3e:
57:f4:98:4b:b4:39:f0:38:c2:14:cb:b8:72:47:7c:fb:6f:18:
bc:3d:a4:a0:8a:57:d3:cd:47:96:05:ab:81:f1:af:8c:b7:7b:
c6:34:ce:98:a6:d6:52:33:c8:19:97:43:4a:ee:d2:45:69:4f:
3c:6f:9b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:17:04 2025 by rpki-client