Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/wWoag5fPBKoDd3_8hbqhgqubcZw.roa
File: wWoag5fPBKoDd3_8hbqhgqubcZw.roa (raw, json)
Hash identifier: 7RFcBHOgoZfP3EBsj2N16T8NuAx6Rj8FGargdrK/Tdg=
Subject key identifier: C1:6A:1A:83:97:CF:04:AA:03:77:7F:FC:85:BA:A1:82:AB:9B:71:9C
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 019423D705AEFAAAE32517861CF44BA437E2
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/wWoag5fPBKoDd3_8hbqhgqubcZw.roa
Signing time: Wed 01 Jan 2025 21:48:01 +0000
ROA not before: Wed 01 Jan 2025 21:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 43.239.88.0/22 maxlen: 22
45.43.88.0/22 maxlen: 22
45.43.92.0/22 maxlen: 22
91.210.64.0/22 maxlen: 22
103.206.232.0/22 maxlen: 22
107.181.156.0/22 maxlen: 22
155.254.40.0/22 maxlen: 22
155.254.44.0/22 maxlen: 22
155.254.50.0/23 maxlen: 23
155.254.52.0/22 maxlen: 22
155.254.56.0/22 maxlen: 22
185.135.212.0/22 maxlen: 22
198.105.96.0/22 maxlen: 22
198.105.104.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 05 Feb 2025 20:04:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:05:ae:fa:aa:e3:25:17:86:1c:f4:4b:a4:37:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Jan 1 21:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c16a1a8397cf04aa03777ffc85baa182ab9b719c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d5:1b:bb:a6:0f:24:83:16:26:9d:06:52:76:
fc:40:7d:e9:30:1c:88:ed:0e:42:b2:58:5d:cc:58:
ff:07:e1:8d:4f:69:d7:57:68:54:17:0f:bb:6e:1e:
16:09:2a:99:62:82:c3:05:cf:6e:21:b2:b5:41:d7:
d5:66:04:92:40:57:69:7e:50:6e:ee:ab:f4:8e:09:
b2:cc:10:8a:f2:c0:41:59:25:24:53:87:09:35:bb:
c0:bb:00:30:d9:96:8e:a4:0a:ab:49:47:c4:dd:89:
73:92:dc:26:7d:fe:30:37:41:e2:fc:54:d1:a1:d2:
54:31:b6:3f:97:bc:7c:3b:85:30:84:47:80:d4:bf:
79:8e:1e:db:ab:d6:e0:4a:29:0b:2d:07:89:5f:ad:
8b:40:f4:59:35:50:c6:01:98:56:bf:2c:c9:d7:59:
1e:08:a5:27:a0:85:63:22:5d:45:8c:1c:d7:be:95:
72:b6:56:37:eb:58:27:77:f8:37:67:d0:4e:4e:b5:
50:47:7a:7a:da:40:04:8c:fd:f7:ea:a3:7a:42:51:
27:42:2a:e2:87:e3:4b:d5:88:ad:ea:10:73:b4:9e:
fd:bf:08:86:57:ab:d3:f8:e9:42:f2:98:c4:c7:da:
bc:44:51:bf:ec:c1:6c:e5:b5:04:0a:f5:46:3b:f0:
05:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6A:1A:83:97:CF:04:AA:03:77:7F:FC:85:BA:A1:82:AB:9B:71:9C
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/wWoag5fPBKoDd3_8hbqhgqubcZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.239.88.0/22
45.43.88.0/21
91.210.64.0/22
103.206.232.0/22
107.181.156.0/22
155.254.40.0/21
155.254.50.0-155.254.59.255
185.135.212.0/22
198.105.96.0/22
198.105.104.0/22
Signature Algorithm: sha256WithRSAEncryption
68:d9:94:15:e8:48:cb:7d:6b:31:71:8d:1f:98:06:55:81:d1:
ac:0b:f6:d0:14:ea:91:0c:53:50:74:0b:4e:25:f8:e6:78:48:
41:b7:c4:fa:69:e0:5c:c4:0d:94:f3:74:b4:46:2e:74:a8:a1:
d0:d3:16:52:c6:36:36:51:13:64:32:65:66:ca:00:22:17:03:
b3:83:d5:97:4a:86:84:ba:e7:ba:ae:71:56:83:a7:b7:44:ff:
49:a2:2c:ee:db:0c:51:06:c4:27:8f:6b:42:e2:01:b2:60:ac:
15:50:b6:48:24:ee:a7:b0:0f:c7:9b:fb:38:23:42:5c:99:b5:
fa:b7:53:c2:b9:79:92:6f:26:b1:37:e1:a0:d1:72:ff:76:8f:
75:1f:12:f1:9a:f0:df:f8:3c:91:8b:28:4d:ef:51:c7:3a:07:
e9:c5:97:e0:ae:f0:2e:5e:72:53:21:2a:e6:bf:91:e0:d3:7a:
0b:b1:00:4b:ae:b2:e5:a1:5b:c7:fc:f9:65:ff:9f:2c:06:a1:
65:e9:d8:32:3f:62:86:48:e8:45:7f:94:01:8f:92:bb:14:11:
41:e3:88:16:90:38:c6:1b:86:a4:3d:9a:e7:76:dd:ab:97:c3:
d8:9d:3b:cf:c8:b2:80:5e:fc:90:67:aa:13:ba:83:28:65:1f:
4d:ab:6f:cb
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgISAZQj1wWu+qrjJReGHPRLpDfiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NTRjMzQ3ZDY4ZDE1NDkzZGU3MWJiOTYyZjBhNTY3ZTEz
NGQ2MDMwHhcNMjUwMTAxMjE0ODAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTZhMWE4Mzk3Y2YwNGFhMDM3NzdmZmM4NWJhYTE4MmFiOWI3MTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNUbu6YPJIMWJp0GUnb8QH3pMByI
7Q5CslhdzFj/B+GNT2nXV2hUFw+7bh4WCSqZYoLDBc9uIbK1QdfVZgSSQFdpflBu
7qv0jgmyzBCK8sBBWSUkU4cJNbvAuwAw2ZaOpAqrSUfE3Ylzktwmff4wN0Hi/FTR
odJUMbY/l7x8O4UwhEeA1L95jh7bq9bgSikLLQeJX62LQPRZNVDGAZhWvyzJ11ke
CKUnoIVjIl1FjBzXvpVytlY361gnd/g3Z9BOTrVQR3p62kAEjP336qN6QlEnQiri
h+NL1Yit6hBztJ79vwiGV6vT+OlC8pjEx9q8RFG/7MFs5bUECvVGO/AF6QIDAQAB
o4ICRzCCAkMwHQYDVR0OBBYEFMFqGoOXzwSqA3d//IW6oYKrm3GcMB8GA1UdIwQY
MBaAFOdUw0fWjRVJPecbuWLwpWfhNNYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2It
MzdiNjJkMjIzOTI0LzEvd1dvYWc1ZlBCS29EZDNfOGhicWhncXViY1p3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2ItMzdiNjJkMjIzOTI0
LzEvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQCK+9YAwQD
LStYAwQCW9JAAwQCZ87oAwQCa7WcAwQDm/4oMAwDBAGb/jIDBAKb/jgDBAK5h9QD
BALGaWADBALGaWgwDQYJKoZIhvcNAQELBQADggEBAGjZlBXoSMt9azFxjR+YBlWB
0awL9tAU6pEMU1B0C04l+OZ4SEG3xPpp4FzEDZTzdLRGLnSoodDTFlLGNjZRE2Qy
ZWbKACIXA7OD1ZdKhoS657qucVaDp7dE/0miLO7bDFEGxCePa0LiAbJgrBVQtkgk
7qewD8eb+zgjQlyZtfq3U8K5eZJvJrE34aDRcv92j3UfEvGa8N/4PJGLKE3vUcc6
B+nFl+Cu8C5eclMhKua/keDTeguxAEuusuWhW8f8+WX/nywGoWXp2DI/YoZI6EV/
lAGPkrsUEUHjiBaQOMYbhqQ9mud23auXw9idO8/IsoBe/JBnqhO6gyhlH02rb8s=
-----END CERTIFICATE-----
Generated at Mon Apr 7 05:50:01 2025 by rpki-client