Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WawROtmMNiUeRsk-kmsYdpd-VZU.roa
File: WawROtmMNiUeRsk-kmsYdpd-VZU.roa (raw, json)
Hash identifier: AW6BTnoztuXcGSHz0wyGy6b5nHBQeEBNk5c/u6NnyiI=
Subject key identifier: 59:AC:11:3A:D9:8C:36:25:1E:46:C9:3E:92:6B:18:76:97:7E:55:95
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0194B2A41A09FB35D4F6DD7CFF16B9BE5A4A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WawROtmMNiUeRsk-kmsYdpd-VZU.roa
Signing time: Wed 29 Jan 2025 15:18:06 +0000
ROA not before: Wed 29 Jan 2025 15:18:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 193.124.89.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
194.87.224.0/24 maxlen: 24
195.133.24.0/23 maxlen: 23
195.133.40.0/23 maxlen: 23
195.133.50.0/23 maxlen: 23
195.133.92.0/23 maxlen: 23
212.193.26.0/23 maxlen: 23
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 30 Jan 2025 15:51:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b2:a4:1a:09:fb:35:d4:f6:dd:7c:ff:16:b9:be:5a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 29 15:18:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59ac113ad98c36251e46c93e926b1876977e5595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a8:98:f6:aa:31:0b:ac:4a:34:41:dc:bc:4c:
e7:41:b5:f3:a2:1c:90:9c:4f:c1:b1:f7:d5:12:2b:
d5:26:15:ab:83:a1:48:23:64:e0:83:8b:82:48:17:
a5:06:e6:a6:36:4e:d1:17:0b:0e:24:28:21:59:0d:
3e:a8:56:89:9d:46:48:e1:bc:98:a8:dc:18:8d:b7:
09:54:9b:2e:eb:21:43:98:d3:dd:c5:cb:55:9b:97:
b7:07:3a:92:47:af:39:83:35:cc:97:8f:11:5a:84:
fb:11:ee:2a:fe:43:c3:85:1a:46:4c:53:f1:a3:80:
2a:db:e4:56:c8:7e:90:28:d0:b5:ce:9f:61:86:ae:
87:ce:f8:91:9c:ca:91:54:df:22:cb:8c:1c:18:57:
dc:ad:77:9e:41:45:6d:13:91:84:79:7d:21:07:84:
f9:98:db:04:01:a4:e6:cc:2d:41:98:ff:64:da:02:
c6:e4:e1:33:8f:10:8e:ab:96:44:d5:df:2b:d1:c0:
82:fe:03:de:b6:46:56:02:57:cc:39:88:13:0a:7d:
10:db:91:d3:19:f4:59:b5:c8:b1:1c:23:45:c8:3b:
46:e2:05:ad:21:07:e6:30:fe:85:c4:ec:c0:75:1e:
d1:3d:09:22:e7:73:66:97:8a:2e:8d:d5:57:8f:17:
23:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AC:11:3A:D9:8C:36:25:1E:46:C9:3E:92:6B:18:76:97:7E:55:95
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WawROtmMNiUeRsk-kmsYdpd-VZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.89.0/24
194.58.155.0/24
194.87.169.0/24
194.87.224.0/24
195.133.24.0/23
195.133.40.0/23
195.133.50.0/23
195.133.92.0/23
212.193.26.0/23
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
50:af:42:9d:20:62:fc:61:6b:ab:65:35:69:36:bd:3a:67:37:
24:48:ad:7a:8c:30:0f:4f:f1:db:b7:e6:dc:b1:cc:af:bb:5a:
8d:72:39:ac:d8:41:97:80:b5:9d:68:76:ac:6d:81:92:08:4e:
17:41:64:6c:bb:53:6e:a9:40:ec:94:1e:3f:f8:23:ce:76:02:
24:20:7a:a6:db:69:fe:df:e6:99:80:97:24:fd:aa:bb:2c:7c:
8f:5b:3d:a5:4b:d4:2e:d3:dd:52:f6:68:bd:b2:ec:be:df:14:
3e:9d:3b:13:8a:e3:e0:46:de:0f:90:72:8c:10:b5:93:bb:6f:
81:63:0a:51:5e:a6:09:6e:ff:c1:cf:02:44:60:a3:72:a1:47:
0e:08:e6:35:a8:1a:fc:b4:eb:70:f6:8f:30:f4:57:40:e5:06:
a5:a6:21:18:0b:75:51:5d:09:92:1b:8d:98:b9:7c:cf:11:51:
f6:4e:0f:74:bd:31:2d:19:90:62:bd:fc:cb:29:96:89:0f:5d:
b0:23:0d:16:20:fe:f2:92:09:60:d6:04:c9:a9:9f:fc:7b:55:
78:ee:16:93:ea:8e:5a:fe:e9:3a:6a:7a:54:c0:3f:09:41:30:
d0:63:bf:02:43:8f:ae:0a:02:a8:86:7b:b2:2a:f2:6b:63:a4:
44:ed:3b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:03:07 2025 by rpki-client