Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/WmQPEVNGjOLAg4C3v2FLPe0reFY.roa
File: WmQPEVNGjOLAg4C3v2FLPe0reFY.roa (raw, json)
Hash identifier: gEa6mIb4dmz6XlCMjyROL1qdlTaDab0GfqUdzrbLUm0=
Subject key identifier: 5A:64:0F:11:53:46:8C:E2:C0:83:80:B7:BF:61:4B:3D:ED:2B:78:56
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01942220025D7FCC25F5C46B854562DACE14
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/WmQPEVNGjOLAg4C3v2FLPe0reFY.roa
Signing time: Wed 01 Jan 2025 13:48:30 +0000
ROA not before: Wed 01 Jan 2025 13:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49697
IP address blocks: 185.121.69.0/24 maxlen: 32
Validation: Failed, certificate revoked on Wed 29 Jan 2025 20:31:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:02:5d:7f:cc:25:f5:c4:6b:85:45:62:da:ce:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 13:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a640f1153468ce2c08380b7bf614b3ded2b7856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cf:03:2c:98:38:84:81:8a:e2:30:84:34:a6:
51:13:b2:39:5c:4c:0e:b2:00:1d:95:55:c0:a0:f8:
c3:a5:fc:ef:22:a5:93:c4:69:eb:47:09:8f:df:f1:
a3:88:33:f8:0b:ba:25:d1:5c:3b:57:39:10:67:79:
6c:45:a1:b8:ea:98:fc:2f:68:f7:55:01:2c:58:ef:
6e:92:31:4e:12:2a:91:92:4e:bb:c3:a5:3b:81:63:
f3:ff:18:6d:22:79:42:39:07:57:a3:af:6b:0e:26:
f0:a2:c2:bb:47:79:2a:80:ad:b3:b5:6d:a4:ae:e3:
c7:67:2d:d4:91:3e:cc:c1:10:58:9f:ba:17:91:f6:
90:94:01:f2:1b:f6:79:0e:5f:42:32:fe:9b:48:f8:
0d:96:11:d4:cd:ea:3f:44:9f:dc:ac:08:38:d0:30:
f2:4a:3d:52:87:3d:1d:33:4f:31:33:2e:2c:b4:8c:
d0:7b:70:72:45:2c:31:7d:36:87:a3:c2:7e:01:5f:
d5:09:46:55:61:89:4f:63:77:20:21:97:45:54:93:
2a:92:00:9f:47:bb:05:ca:b7:d4:5a:a0:44:d1:ca:
e4:0f:c9:d2:37:25:2e:28:2e:8f:78:eb:33:69:2b:
61:dd:d9:af:f6:b4:bb:3e:e3:f1:7a:a7:e1:90:18:
cf:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:64:0F:11:53:46:8C:E2:C0:83:80:B7:BF:61:4B:3D:ED:2B:78:56
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/WmQPEVNGjOLAg4C3v2FLPe0reFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.69.0/24
Signature Algorithm: sha256WithRSAEncryption
01:2b:c5:46:f3:80:bb:f3:ee:e1:6c:32:df:59:f7:a8:86:83:
c7:65:7f:a1:67:bb:c3:15:fe:34:af:d5:c4:8b:02:43:45:df:
7d:46:f1:da:22:dc:12:69:24:b6:2c:79:43:2f:ac:3b:25:9c:
4d:90:2d:0e:b9:6c:56:7a:68:0d:37:da:1e:a6:a1:35:05:b3:
80:8a:aa:b4:94:be:40:02:04:4c:e5:81:63:91:83:10:3e:70:
18:2d:67:50:b3:fb:51:f1:39:3a:ba:55:e5:52:35:cc:e5:ae:
a2:49:72:0a:09:40:57:20:b5:35:79:cf:c8:2b:32:f7:7c:18:
f1:08:af:bd:27:bc:c9:d2:4c:1e:a0:3f:32:02:93:1a:f5:0d:
c6:6d:03:0d:55:53:ce:e8:a5:0a:84:06:a8:2d:6c:cb:2a:b0:
a4:3c:9e:04:fa:22:46:0b:55:db:f3:6f:ea:cc:53:60:ff:df:
1e:b0:30:0f:fc:33:95:6c:1a:0a:7f:46:ec:75:d3:96:4c:47:
0f:56:d2:0d:5e:4e:d4:83:9d:0f:6c:c3:f6:18:e7:4c:79:6c:
cf:98:3a:20:dd:ba:7c:ed:f3:16:65:b2:69:3f:e3:9b:4a:9e:
8d:ae:c2:20:fb:d6:e1:39:6a:86:84:5f:00:1b:36:01:7e:d7:
01:29:c5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:32:12 2025 by rpki-client