Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/Wv9X7SUT7fsRnFtKBh66hlPA-Sk.roa
File: Wv9X7SUT7fsRnFtKBh66hlPA-Sk.roa (raw, json)
Hash identifier: E7RO1JnaPrqlQk/dsYeEc+0jtsauACsEcJ4TswK2RHY=
Subject key identifier: 5A:FF:57:ED:25:13:ED:FB:11:9C:5B:4A:06:1E:BA:86:53:C0:F9:29
Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Certificate serial: 019425FD5D3D2741C593E4AED6E6B80C3172
Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/Wv9X7SUT7fsRnFtKBh66hlPA-Sk.roa
Signing time: Thu 02 Jan 2025 07:49:08 +0000
ROA not before: Thu 02 Jan 2025 07:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61423
IP address blocks: 185.161.120.0/24 maxlen: 24
185.202.132.0/24 maxlen: 24
193.200.196.0/24 maxlen: 24
2a0a:d6c0::/48 maxlen: 48
2a0a:d6c0:2::/48 maxlen: 48
2a0a:d6c0:3::/48 maxlen: 48
2a0a:d6c0:4::/48 maxlen: 48
2a0a:d6c0:5::/48 maxlen: 48
2a0a:d6c0:6::/48 maxlen: 48
2a0a:d6c0:7::/48 maxlen: 48
2a0a:d6c0:8::/48 maxlen: 48
2a0a:d6c0:9::/48 maxlen: 48
2a0a:d6c0:10::/48 maxlen: 48
2a0a:d6c0:11::/48 maxlen: 48
2a0a:d6c0:13::/48 maxlen: 48
2a0a:d6c0:208::/45 maxlen: 45
2a0a:d6c0:208::/48 maxlen: 48
2a0a:d6c0:efef::/48 maxlen: 48
2a0a:d6c0:eff0::/48 maxlen: 48
2a0a:d6c0:eff1::/48 maxlen: 48
2a0a:d6c0:eff2::/48 maxlen: 48
2a0a:d6c0:eff3::/48 maxlen: 48
2a0a:d6c0:efff::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 29 Jan 2025 12:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:5d:3d:27:41:c5:93:e4:ae:d6:e6:b8:0c:31:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Validity
Not Before: Jan 2 07:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5aff57ed2513edfb119c5b4a061eba8653c0f929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5b:34:25:0e:d9:72:a6:a3:e5:70:58:d7:7f:
80:40:75:36:f4:61:6e:64:af:73:13:7d:d1:af:c3:
49:bc:dc:b2:e0:ef:41:ea:ce:1c:e7:7c:2b:28:c9:
b0:64:df:9b:ed:0a:97:3d:f9:d5:9d:27:50:eb:0e:
73:12:c9:93:ee:d2:3c:93:fb:09:1b:50:c6:ca:e7:
59:a7:00:3b:02:20:10:83:64:43:91:12:98:25:08:
91:ab:f6:61:31:e7:f4:7f:0e:6f:5a:e5:f2:42:e1:
ac:01:e0:15:1c:e8:e3:ff:c2:e5:66:ba:f6:51:c4:
0d:94:df:bb:9b:8f:48:52:e2:7b:b7:3a:d4:e6:fe:
f7:34:b8:ee:93:8a:0b:c2:f9:24:fb:cc:69:a8:61:
e7:03:09:ef:a6:cb:d5:ca:46:40:12:17:bb:4a:2a:
4e:4d:2a:a1:46:0c:16:c8:d6:01:80:95:77:c7:6e:
e8:c3:b2:a6:56:16:4e:75:0d:59:7a:d6:88:7f:24:
1c:67:94:5d:c3:87:49:07:84:83:a2:8c:51:2b:06:
a1:8e:b6:80:2e:e4:f2:e7:00:d5:61:1d:aa:1f:95:
ed:e9:b0:8a:b4:db:67:e0:c8:ab:00:92:f2:9d:40:
a9:99:10:3a:18:f3:ff:5d:af:e4:cf:0d:ef:7f:c3:
ec:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:FF:57:ED:25:13:ED:FB:11:9C:5B:4A:06:1E:BA:86:53:C0:F9:29
X509v3 Authority Key Identifier:
keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/Wv9X7SUT7fsRnFtKBh66hlPA-Sk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.120.0/24
185.202.132.0/24
193.200.196.0/24
IPv6:
2a0a:d6c0::/48
2a0a:d6c0:2::-2a0a:d6c0:9:ffff:ffff:ffff:ffff:ffff
2a0a:d6c0:10::/47
2a0a:d6c0:13::/48
2a0a:d6c0:208::/45
2a0a:d6c0:efef::-2a0a:d6c0:eff3:ffff:ffff:ffff:ffff:ffff
2a0a:d6c0:efff::/48
Signature Algorithm: sha256WithRSAEncryption
25:8d:30:38:95:fc:33:92:64:73:43:3c:e8:13:48:0c:4d:12:
71:e3:56:84:0c:91:00:4e:bc:56:ef:b8:87:dd:07:b1:27:2c:
0c:c6:b9:d8:04:ee:01:42:3d:d6:1e:2c:41:b5:7b:cd:20:e5:
80:72:ee:1c:ff:e7:51:ec:14:eb:15:1b:51:16:84:22:9f:fe:
6f:86:5c:2f:a2:4e:e4:81:cd:4e:9c:d1:d1:d8:8b:22:f9:82:
3a:29:a2:89:45:c8:a6:59:75:9a:45:98:e0:8d:09:ec:e8:e7:
08:4e:fc:3d:f5:d6:52:77:06:16:ba:e2:f1:00:5e:8f:a4:62:
07:fe:e0:97:56:07:09:7d:bb:32:be:3a:09:66:f2:40:f3:3c:
ad:ef:de:97:b1:ec:d5:74:15:48:50:9d:7c:cc:fb:dc:91:3a:
a0:07:a0:62:d1:63:7f:08:b5:52:09:29:9a:fb:04:44:c4:ad:
47:a4:24:26:31:88:07:b7:43:ae:cf:de:70:79:66:b8:0a:02:
14:03:a0:2d:1c:c4:66:01:b1:7d:71:c1:01:e3:f6:d5:97:53:
55:1b:02:e0:96:61:83:a1:bd:e8:93:52:48:8f:0b:d8:de:97:
e6:1f:0a:30:d2:3c:e2:a1:16:c7:01:42:5b:6f:df:52:08:a0:
2a:1f:13:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:03:10 2025 by rpki-client