Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WsXKwM-1F7CgHW3z9kT5-ViVehA.roa
File: WsXKwM-1F7CgHW3z9kT5-ViVehA.roa (raw, json)
Hash identifier: QHMOyyKD+nyvvy+6xsXTObao2VOnWMYK0LWiNUHGfBI=
Subject key identifier: 5A:C5:CA:C0:CF:B5:17:B0:A0:1D:6D:F3:F6:44:F9:F9:58:95:7A:10
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194C27F8E01A7272B210093FC5138306F17
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WsXKwM-1F7CgHW3z9kT5-ViVehA.roa
Signing time: Sat 01 Feb 2025 17:12:06 +0000
ROA not before: Sat 01 Feb 2025 17:12:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214417
IP address blocks: 2.59.253.0/24 maxlen: 24
45.66.230.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
141.98.6.0/24 maxlen: 24
176.125.254.0/24 maxlen: 24
194.48.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Feb 2025 10:19:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c2:7f:8e:01:a7:27:2b:21:00:93:fc:51:38:30:6f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 1 17:12:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ac5cac0cfb517b0a01d6df3f644f9f958957a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ec:76:0c:b3:4c:27:2c:83:af:c8:b6:0d:52:
a3:1e:44:79:d6:20:2e:c8:71:26:5b:16:ba:05:1b:
3b:6f:ae:94:75:67:4f:66:19:19:b5:43:3d:11:e1:
c7:88:b9:54:47:c7:2a:7e:c0:b3:8f:2e:a8:83:b4:
b7:47:d6:ef:34:5b:c5:a2:16:62:a6:c6:11:93:be:
7f:71:54:7b:17:7e:ad:98:4e:5c:fc:d7:54:75:cd:
2d:2d:fe:b3:a7:ba:fc:0c:5f:9e:ab:f8:d3:3e:77:
bf:cd:7d:62:e6:20:40:30:d1:90:2f:14:f7:98:aa:
71:4e:76:ca:35:95:32:87:86:80:c2:1b:6a:d2:1e:
9b:0f:31:e6:79:f3:cc:33:cd:61:9c:b7:d1:b1:d8:
ef:b0:63:9e:22:3c:6a:43:8b:18:69:bb:65:43:cd:
b7:33:3e:0d:4b:4c:eb:24:e2:fe:49:14:27:11:5f:
e8:38:ec:9d:cb:da:02:c4:05:a4:7c:53:70:43:61:
fb:e6:34:76:ed:2a:4c:f9:d1:4d:45:3d:84:d7:a4:
0b:36:4f:e3:ef:71:de:f3:90:f9:fb:91:02:2c:62:
00:b2:f9:13:37:ab:43:e1:a0:90:27:21:ff:dc:51:
0c:96:52:70:24:58:b1:75:9e:5b:db:27:27:00:84:
e7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C5:CA:C0:CF:B5:17:B0:A0:1D:6D:F3:F6:44:F9:F9:58:95:7A:10
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WsXKwM-1F7CgHW3z9kT5-ViVehA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.253.0/24
45.66.230.0/24
83.219.97.0/24
87.121.221.0/24
141.98.6.0/24
176.125.254.0/24
194.48.250.0/24
Signature Algorithm: sha256WithRSAEncryption
06:09:2e:46:77:df:ef:31:79:11:e5:31:0f:61:5a:22:b9:9c:
0c:f5:7d:7c:ba:08:5c:85:11:b5:e1:0c:98:89:9a:76:1f:96:
66:ae:a4:46:0d:65:4e:78:86:0f:8b:30:51:4f:d3:7c:a4:38:
83:df:19:ba:21:83:0a:df:ed:ed:7e:dc:31:7b:99:16:b9:17:
23:d4:83:f7:08:7a:93:62:a7:97:35:d2:31:1b:29:90:74:06:
79:96:d7:bc:8c:d9:b8:7c:02:58:f9:4b:28:ed:74:a3:c5:41:
ba:ba:80:c3:66:ff:c2:23:b3:0e:a7:c7:45:01:0e:f5:52:1b:
75:23:ea:4e:be:86:23:bf:12:e0:ca:1b:5d:08:41:36:f9:66:
ed:10:3d:ef:5c:eb:4f:40:4d:8b:a1:d1:cb:b4:b6:64:49:48:
6a:4a:a3:f6:ad:ec:86:12:e9:58:26:7b:7f:a7:0f:4e:fc:19:
4d:70:b0:5e:ee:6c:75:01:48:bf:17:cb:51:aa:4a:83:77:81:
97:3e:31:4f:f0:8c:ac:24:80:88:0c:84:a8:36:41:ae:8d:89:
85:13:a5:c9:5c:73:ae:bb:31:87:b8:90:b1:38:bb:95:e0:0e:
94:68:84:99:42:71:64:7f:75:4c:fa:96:a4:24:54:7e:9d:4f:
aa:2d:42:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:22:31 2025 by rpki-client