Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/WDQkThKuZuAEBC8jEPmU9gil_VI.roa
File: WDQkThKuZuAEBC8jEPmU9gil_VI.roa (raw, json)
Hash identifier: GDia1dmuSp3+mGD0YsgU67fs/dS3S+fUcX4aB+Yp9qY=
Subject key identifier: 58:34:24:4E:12:AE:66:E0:04:04:2F:23:10:F9:94:F6:08:A5:FD:52
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 01946E94B3CEFDE9C3FA43C9C0384D2AE5CE
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/WDQkThKuZuAEBC8jEPmU9gil_VI.roa
Signing time: Thu 16 Jan 2025 10:07:06 +0000
ROA not before: Thu 16 Jan 2025 10:07:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36530
IP address blocks: 85.115.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Mar 2025 06:36:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6e:94:b3:ce:fd:e9:c3:fa:43:c9:c0:38:4d:2a:e5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Jan 16 10:07:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5834244e12ae66e004042f2310f994f608a5fd52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fc:f8:72:c9:ae:75:fe:a7:2a:3c:82:fc:fd:
c9:13:55:a5:0e:58:28:8f:43:e3:c4:41:ab:f3:65:
ea:8f:29:1f:f8:9e:20:a1:9a:63:d5:50:49:8c:bb:
98:78:07:f1:bc:48:a2:71:1f:67:16:c6:2a:cf:06:
6b:8b:ba:da:c4:b7:3e:31:44:18:fd:a6:be:e6:5e:
42:43:9e:0e:c7:35:62:5f:a7:dc:86:92:99:75:0a:
b9:94:2b:95:a1:fc:86:e9:d7:87:b1:36:20:f2:d8:
58:44:1f:d1:49:c6:72:f8:06:35:5d:ec:94:0f:86:
4b:28:aa:b8:37:13:b2:97:9d:fe:be:29:84:4d:aa:
5b:2f:d4:db:ba:4f:2f:99:1b:e4:8b:14:88:a1:0e:
07:03:4d:75:a0:9e:92:7a:ea:32:89:47:6d:ed:ff:
c0:fb:82:d8:e7:55:8f:fb:2b:89:f7:d6:fa:9d:3f:
39:41:ec:cd:49:48:a3:26:d1:37:74:23:9a:bd:06:
7d:bf:62:44:30:63:6b:3a:b3:c5:0d:e0:4a:df:cc:
98:1f:c1:1b:16:b3:48:06:f2:58:9a:c9:f9:a0:05:
51:cd:ab:49:c3:9b:a9:eb:ee:a9:77:11:c9:38:70:
16:dd:54:73:7d:cd:20:2e:db:a1:d4:23:aa:b3:c6:
32:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:34:24:4E:12:AE:66:E0:04:04:2F:23:10:F9:94:F6:08:A5:FD:52
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/WDQkThKuZuAEBC8jEPmU9gil_VI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.211.0/24
Signature Algorithm: sha256WithRSAEncryption
16:6e:55:87:ad:d8:f9:40:13:da:df:3a:49:b3:8e:47:3c:21:
d6:ce:e2:c5:f6:9b:96:fa:b8:19:97:09:3b:cd:dc:06:43:89:
80:c5:7a:cc:9c:2b:8a:f6:ff:9a:5c:fa:20:7e:3e:01:15:3a:
17:bd:d4:77:83:8f:2e:da:b3:2f:3b:83:82:8d:e7:ce:7d:2b:
4a:ca:41:08:7a:05:48:14:80:71:54:1e:33:88:4d:d3:44:62:
5f:ed:23:b6:9e:f1:56:7a:d6:2d:0e:cb:00:6b:e8:36:d9:d8:
2c:20:f5:04:3a:27:87:ca:00:94:9f:aa:a6:f1:01:87:21:34:
19:57:b8:63:fe:43:da:3e:57:f9:84:d2:a7:2c:54:5b:71:c2:
f4:60:ff:2d:7e:66:19:f7:45:04:1b:63:1f:c2:85:c1:b0:fc:
55:b5:6e:e4:8f:81:98:17:21:80:ff:c8:e5:44:58:cb:6e:a3:
cd:9b:6e:0f:e0:55:23:3d:e2:ab:26:60:1d:e3:9c:f3:98:89:
d0:d0:85:7c:da:c1:13:59:83:00:3f:21:6f:e4:8b:52:4d:af:
2d:f7:1c:7d:44:cf:d4:06:03:6a:d3:af:d4:e6:d4:6d:f6:cc:
9e:94:0b:e7:10:21:27:35:f2:b3:72:9d:d1:21:ac:f7:a4:a5:
be:34:52:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:34:36 2025 by rpki-client