Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Wg9lLXvTBfwqcBk3bxqklYj2Oyw.roa
File: Wg9lLXvTBfwqcBk3bxqklYj2Oyw.roa (raw, json)
Hash identifier: zskSbVU6WfA75vHl44+2oUh6c/PV7rm/4VO5WZ66GZo=
Subject key identifier: 5A:0F:65:2D:7B:D3:05:FC:2A:70:19:37:6F:1A:A4:95:88:F6:3B:2C
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0195F80546615E30381DCAEC363691DEA2B0
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Wg9lLXvTBfwqcBk3bxqklYj2Oyw.roa
Signing time: Wed 02 Apr 2025 19:40:49 +0000
ROA not before: Wed 02 Apr 2025 19:40:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 5.83.129.0/24 maxlen: 24
5.175.138.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
94.249.195.0/24 maxlen: 24
94.249.215.0/24 maxlen: 24
95.215.32.0/24 maxlen: 24
95.215.34.0/24 maxlen: 24
178.18.144.0/24 maxlen: 24
185.13.156.0/24 maxlen: 24
217.69.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Apr 2025 04:14:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f8:05:46:61:5e:30:38:1d:ca:ec:36:36:91:de:a2:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 2 19:40:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a0f652d7bd305fc2a7019376f1aa49588f63b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b5:07:f3:f3:c2:b0:49:6f:5d:8d:4a:29:64:
a0:89:54:8a:5c:e4:3b:ba:27:1a:f1:68:73:a2:da:
6c:7e:25:9e:7e:c9:38:5b:f6:12:ab:cc:90:d5:6c:
43:3a:a7:cb:7c:61:92:21:02:e2:3b:02:ff:f5:76:
cb:08:5e:39:0c:d2:e7:53:45:2f:9d:3a:e3:96:9a:
36:2c:9e:96:86:59:64:5e:d3:ba:9f:ce:f8:34:1f:
6f:c2:fd:d5:4c:f5:94:01:02:3b:c6:7c:e2:d5:6d:
29:9c:bf:dd:a0:1e:b4:33:4a:80:d7:be:db:af:da:
77:c6:e7:17:42:01:8a:28:f1:af:f2:f6:b4:5d:ad:
1e:f1:27:2e:b7:40:21:4c:4b:bd:84:97:34:39:db:
47:40:be:1f:f3:5c:55:b8:5d:de:f9:fb:ad:27:5a:
75:ec:50:69:35:8b:f8:4f:88:d3:8b:21:f2:e0:fe:
5e:03:9c:23:c7:59:d6:eb:ef:18:1e:a7:62:33:6e:
3e:88:a4:9c:2f:42:ec:7e:8b:cb:9e:3a:8a:8b:b0:
3b:74:10:9c:c9:a1:8e:c2:4a:da:71:f2:b2:6c:d0:
b9:18:14:7c:5a:82:f1:c1:3d:61:a4:60:bf:6f:eb:
42:38:81:63:7a:26:97:6c:8b:08:5d:2e:69:59:95:
fd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:0F:65:2D:7B:D3:05:FC:2A:70:19:37:6F:1A:A4:95:88:F6:3B:2C
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Wg9lLXvTBfwqcBk3bxqklYj2Oyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
5.175.138.0/24
77.90.54.0/24
87.239.131.0/24
94.249.195.0/24
94.249.215.0/24
95.215.32.0/24
95.215.34.0/24
178.18.144.0/24
185.13.156.0/24
217.69.166.0/24
Signature Algorithm: sha256WithRSAEncryption
18:e1:6e:67:88:9d:c9:f7:97:78:a0:eb:18:2d:d8:ba:73:6a:
f6:fd:8b:8c:1b:79:8d:bf:f3:fd:f0:f2:12:db:01:99:a0:7f:
d1:b9:f9:60:4c:0d:b3:03:65:ed:f9:63:d7:51:e2:f2:73:51:
d2:6f:31:d8:bf:27:db:58:5f:18:a2:24:e0:f4:8a:d9:bb:c6:
36:d5:b1:e7:39:e5:27:bf:07:b3:42:75:a1:15:4d:62:ac:d1:
fc:d7:9d:14:c3:e2:bd:92:0c:af:f8:47:f1:76:9a:e0:83:e5:
1a:7c:15:16:db:06:38:ff:af:09:0d:da:2f:8e:03:b8:99:7e:
e8:f8:8f:05:0e:e6:eb:c1:00:b3:d4:37:4a:45:9d:c9:f9:c5:
e9:52:76:1a:73:24:88:f7:26:ea:97:12:8c:95:b9:7f:d1:4e:
b7:24:b8:a1:78:36:d6:3f:81:22:aa:d9:32:4f:30:8a:03:3c:
d2:da:dc:ec:04:92:3e:1a:22:48:d6:ce:37:5d:2f:6b:b4:cb:
c4:28:13:72:65:cc:1b:82:87:c4:cd:c9:71:d8:a6:c4:ea:f0:
64:21:30:d7:92:0e:dc:57:ad:17:33:aa:07:7e:7e:78:f8:ac:
81:13:18:ae:38:e7:d4:fd:51:f7:b4:1a:ac:80:d0:dd:f4:1b:
f2:e3:c9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:22:56 2025 by rpki-client