Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/w5xPWhqFdwFh_QwMbMBb1UN-lLg.roa
File: w5xPWhqFdwFh_QwMbMBb1UN-lLg.roa (raw, json)
Hash identifier: Em+xpIBhOz9aTXRyIuzaeLoW8hpdAuRpbW83QtHSjJU=
Subject key identifier: C3:9C:4F:5A:1A:85:77:01:61:FD:0C:0C:6C:C0:5B:D5:43:7E:94:B8
Certificate issuer: /CN=47bcd770f8ea3d48ecbb4c3eab895f422ffac90d
Certificate serial: 018CC6B7F94B689030728EC3007290B7D083
Authority key identifier: 47:BC:D7:70:F8:EA:3D:48:EC:BB:4C:3E:AB:89:5F:42:2F:FA:C9:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/w5xPWhqFdwFh_QwMbMBb1UN-lLg.roa
Signing time: Mon 01 Jan 2024 20:29:54 +0000
ROA not before: Mon 01 Jan 2024 20:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31438
IP address blocks: 83.137.64.0/21 maxlen: 21
212.89.192.0/19 maxlen: 19
2a0d:5f00::/30 maxlen: 30
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:f9:4b:68:90:30:72:8e:c3:00:72:90:b7:d0:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47bcd770f8ea3d48ecbb4c3eab895f422ffac90d
Validity
Not Before: Jan 1 20:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c39c4f5a1a85770161fd0c0c6cc05bd5437e94b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5a:ec:ec:1f:fd:90:30:eb:eb:ee:bc:8d:4c:
7e:50:f2:4b:3f:b3:09:11:0d:e3:13:62:7b:e8:7d:
5e:1a:f2:b7:e6:32:26:12:1f:47:f7:42:32:64:e4:
00:58:6e:9f:a4:5c:3e:00:1b:bb:ab:8f:2c:17:f3:
e1:3b:59:fa:85:16:f7:58:b5:79:f8:e8:ef:35:b5:
c7:ce:2a:80:af:d5:cb:1b:8b:f9:af:d6:24:28:88:
32:7a:d7:76:35:b1:57:98:c4:ef:be:99:28:a3:35:
6d:e2:a6:94:6f:26:ad:9d:f6:d7:90:99:46:58:a5:
b6:31:61:62:47:3a:e7:ee:10:9d:f3:2a:36:7f:16:
34:cd:e0:44:4a:09:ba:06:a8:2c:e7:08:e3:6c:75:
fb:c8:1c:72:04:2c:cf:69:69:16:44:ca:61:65:d0:
f2:71:d1:b8:e3:47:5d:22:de:c3:b0:6b:32:5b:a1:
ae:3c:fe:fc:96:fc:37:dd:6b:e9:2c:c9:a5:f4:f8:
1b:92:19:fc:5c:a9:31:ca:aa:79:a1:24:d3:70:e8:
e4:84:3d:0c:78:ce:42:53:17:f9:63:7b:d0:1c:5d:
6d:3b:8e:c8:b0:61:38:12:95:ac:5a:47:51:50:e4:
3d:e9:40:8d:ec:db:27:48:66:0e:a1:1a:0d:28:39:
1e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:9C:4F:5A:1A:85:77:01:61:FD:0C:0C:6C:C0:5B:D5:43:7E:94:B8
X509v3 Authority Key Identifier:
keyid:47:BC:D7:70:F8:EA:3D:48:EC:BB:4C:3E:AB:89:5F:42:2F:FA:C9:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/w5xPWhqFdwFh_QwMbMBb1UN-lLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.64.0/21
212.89.192.0/19
IPv6:
2a0d:5f00::/30
Signature Algorithm: sha256WithRSAEncryption
89:2b:e3:fd:26:bf:dc:21:8b:a6:dc:9b:35:af:5a:46:5b:c6:
bd:62:f7:f8:6e:4e:2c:ef:36:a5:08:c0:00:a1:ce:8a:c9:0e:
74:be:8e:75:6f:b0:8d:6e:e8:aa:a6:de:8d:07:82:f8:1b:29:
98:73:25:3e:6c:81:5b:22:29:f0:4f:8d:98:70:75:b8:4e:99:
93:7c:01:a0:81:2a:26:65:de:14:08:1a:13:69:f7:d5:75:3a:
45:a0:72:8c:f3:09:55:b9:c6:29:0a:c5:79:34:e7:d2:21:18:
f9:d8:a3:23:6d:b8:eb:d3:7f:b0:90:de:49:8c:dc:a7:68:4c:
9e:5e:7b:f1:53:ab:9a:c9:f5:44:25:e8:1d:42:84:e5:98:12:
7b:8a:b7:1f:63:20:49:b8:f3:dc:17:fa:4a:c4:51:18:a2:cf:
94:19:7f:73:3d:02:c7:cd:8a:9d:9c:0d:5b:d6:cc:b4:54:54:
d2:9a:b2:7d:4d:a9:c9:cb:89:2e:8a:32:c5:4c:97:7f:f5:5c:
dc:dc:58:70:f1:cb:51:25:44:cc:b9:da:e3:ea:2a:98:90:cb:
00:9d:62:02:13:9b:9e:b4:21:cb:ba:dc:40:3d:00:ae:e7:10:
d4:0c:e6:da:3e:c2:c2:f5:78:3c:1b:66:34:67:2b:29:35:ee:
d7:ee:e1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:35:26 2025 by rpki-client