Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/wsbBDb4p2cN_-jHJ4UX8vRM6dEU.roa
File: wsbBDb4p2cN_-jHJ4UX8vRM6dEU.roa (raw, json)
Hash identifier: crWECRcd/8BxBVRW5HA9rzDM3GkmoiDEMx9Y3hWofY0=
Subject key identifier: C2:C6:C1:0D:BE:29:D9:C3:7F:FA:31:C9:E1:45:FC:BD:13:3A:74:45
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 019553712902F9FAE366141678BE16CB01D1
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/wsbBDb4p2cN_-jHJ4UX8vRM6dEU.roa
Signing time: Sat 01 Mar 2025 20:41:19 +0000
ROA not before: Sat 01 Mar 2025 20:41:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.65.114.0/24 maxlen: 24
45.154.156.0/22 maxlen: 24
185.83.200.0/22 maxlen: 24
188.209.131.0/24 maxlen: 24
188.209.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 02 Mar 2025 19:52:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:53:71:29:02:f9:fa:e3:66:14:16:78:be:16:cb:01:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: Mar 1 20:41:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2c6c10dbe29d9c37ffa31c9e145fcbd133a7445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ba:08:6f:d2:a4:f6:12:b7:e6:85:c4:3f:0f:
30:95:38:9f:80:a5:f1:36:97:73:1d:67:a3:0b:3a:
56:9d:a2:a6:31:33:ef:95:18:d0:a4:ac:26:47:6f:
93:df:5f:6f:65:73:06:8e:5c:7a:88:f1:8f:bb:ac:
92:52:89:88:c9:00:e9:12:c7:e2:a4:7e:7b:a5:fa:
e1:54:20:cc:77:81:d2:a6:bb:c8:35:61:3f:b5:15:
95:45:a7:d1:c1:70:ce:e0:e4:47:4c:d7:86:4a:4a:
34:09:22:d0:a4:cb:53:39:d9:74:67:5b:b0:75:28:
49:2e:51:5a:65:df:c7:57:60:d7:56:34:d0:78:e0:
b7:6f:e4:12:d3:f4:94:77:0a:48:83:6c:ae:de:57:
95:66:32:5e:3a:5a:aa:87:c0:c4:f4:ed:ab:de:fb:
cf:2f:16:0e:1c:bb:89:d6:b1:b5:f1:3f:a0:23:b8:
66:4e:a7:68:fc:f3:a4:03:51:cd:bc:68:c1:3c:6c:
37:cc:10:29:cc:68:ac:f2:45:05:09:31:6b:ec:04:
a3:c4:c1:74:ba:3c:3f:f6:a0:c8:38:77:f0:9a:00:
b5:da:62:06:29:3a:cc:3c:8e:a6:3b:4a:10:01:b6:
73:ca:bf:47:eb:ff:47:3b:05:4a:1e:29:d8:5a:f3:
04:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C6:C1:0D:BE:29:D9:C3:7F:FA:31:C9:E1:45:FC:BD:13:3A:74:45
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/wsbBDb4p2cN_-jHJ4UX8vRM6dEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.114.0/24
45.154.156.0/22
185.83.200.0/22
188.209.131.0/24
188.209.139.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:bc:26:fa:54:60:d5:b4:69:32:02:24:bf:b7:41:c3:5b:b0:
14:5e:65:f2:09:84:2b:3c:37:78:d6:0b:c1:dd:35:a7:db:ee:
9f:be:3b:e2:a7:46:79:7e:e6:85:f6:4b:40:e0:af:39:0c:26:
71:82:a3:b4:9b:f7:9c:d3:c1:78:de:8d:6f:84:56:b3:32:db:
7c:5e:59:ec:8b:0a:9c:63:e8:26:82:c9:aa:da:62:1f:e7:b3:
f3:33:75:56:0a:2c:bd:a7:7a:a5:2c:ea:56:42:4b:23:81:25:
bf:1a:07:2e:bb:95:18:bd:f5:be:b5:c3:6c:8a:cc:07:db:74:
18:23:1c:18:19:78:8e:e8:de:a7:d8:c8:05:89:1f:1b:ce:c4:
b7:23:3f:5c:4c:55:cd:4d:38:e8:d9:9e:11:9f:32:49:62:44:
6f:ec:67:07:49:ce:ca:2f:46:2f:46:37:53:ef:ec:56:23:54:
1e:0c:f4:e8:11:fb:10:cb:8d:70:36:3f:fa:61:44:0f:b1:9a:
ae:c2:77:88:9b:77:1c:03:14:61:c5:98:7a:b5:cc:11:c6:aa:
a0:be:29:61:ce:df:fe:e5:61:26:49:a8:46:e6:0d:e9:8f:ce:
85:c1:44:5e:af:0f:12:f0:09:7c:9f:5c:f0:40:10:66:17:ba:
7f:dc:f1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:28:36 2025 by rpki-client