Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/wmOkCE172fU_oAU4H2II4mwO5b4.roa
File: wmOkCE172fU_oAU4H2II4mwO5b4.roa (raw, json)
Hash identifier: KVne/7WKHUNQaJF6p5/2YI+cw3YrrgdTeTB2E6Mw8tg=
Subject key identifier: C2:63:A4:08:4D:7B:D9:F5:3F:A0:05:38:1F:62:08:E2:6C:0E:E5:BE
Certificate issuer: /CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Certificate serial: 0194F10BF59309B631D0E67F66798B69375E
Authority key identifier: BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/wmOkCE172fU_oAU4H2II4mwO5b4.roa
Signing time: Mon 10 Feb 2025 18:08:00 +0000
ROA not before: Mon 10 Feb 2025 18:08:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 78.143.253.0/24 maxlen: 24
194.33.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 23 Feb 2025 10:06:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f1:0b:f5:93:09:b6:31:d0:e6:7f:66:79:8b:69:37:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Validity
Not Before: Feb 10 18:08:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c263a4084d7bd9f53fa005381f6208e26c0ee5be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:00:0f:46:8b:f6:3f:1d:3c:33:d0:d8:36:5c:
63:6c:7e:6c:cd:82:41:fd:97:10:ec:23:c7:54:11:
ef:cf:6a:9f:ed:32:60:b6:ce:33:53:49:d6:25:a3:
1d:a6:f9:a6:88:bc:0f:fd:1f:bb:b4:2f:53:a4:5d:
8a:03:bc:d1:50:d6:6f:86:cd:e9:a1:cf:d7:e3:83:
3f:fa:bb:a6:b5:49:09:9f:0a:d2:0e:87:d0:de:83:
70:e8:5d:5e:36:ee:07:49:43:51:98:eb:ac:41:7c:
7d:3f:d9:b1:00:22:98:c0:40:44:60:f5:5e:35:b5:
37:41:bc:8e:4d:37:84:1c:29:5f:50:ee:43:bb:23:
f3:bb:8b:28:03:1e:d6:c4:01:cc:c6:cf:d8:96:73:
d0:e6:c4:86:42:a9:b1:f5:d9:cc:b0:c6:b6:f7:7a:
01:db:7e:f1:57:9e:65:95:ef:64:fe:39:93:e5:7c:
a3:6e:c7:b9:fd:59:45:9a:04:8e:b3:9d:13:bf:cd:
4c:5f:ca:66:e7:24:5b:30:ec:83:e9:f5:df:53:de:
7a:d6:e2:19:4f:2f:9c:dd:4f:7a:3b:3b:44:68:f7:
98:d5:8d:90:75:67:9f:ca:94:69:6b:a3:7c:b7:a5:
0c:70:b5:26:4f:95:30:d5:2e:14:a5:4c:8a:91:72:
bf:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:63:A4:08:4D:7B:D9:F5:3F:A0:05:38:1F:62:08:E2:6C:0E:E5:BE
X509v3 Authority Key Identifier:
keyid:BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/wmOkCE172fU_oAU4H2II4mwO5b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.143.253.0/24
194.33.150.0/24
Signature Algorithm: sha256WithRSAEncryption
84:83:f6:f5:60:49:78:c0:b6:67:3a:c3:da:09:76:80:14:c6:
18:bf:fa:d3:98:72:a9:0d:ce:63:f1:1d:d5:7c:37:05:00:68:
fc:cc:4e:c2:d3:05:8a:7f:e4:91:0b:fc:2c:80:ed:c9:be:e7:
53:71:c6:5f:2a:55:04:82:0f:85:d8:02:69:d4:5d:09:8d:72:
ff:c2:85:ee:fc:5f:09:a7:7a:01:c7:ac:d4:61:6f:8a:65:66:
70:8a:32:3f:0b:6f:75:2e:08:4b:e2:2d:15:97:d7:b9:c4:d0:
08:d9:f7:73:2b:70:c2:1b:d8:6a:6f:5f:08:ea:c2:bf:7b:57:
17:37:c2:e6:c3:55:2b:04:c3:46:54:ab:05:52:9e:db:94:30:
21:ec:f2:25:32:c8:59:9d:48:a8:0f:72:35:45:79:8e:c6:a5:
15:66:65:77:1c:31:05:97:7f:02:b9:27:cf:d6:73:fd:d6:14:
fe:9f:28:ae:ea:d6:c9:f3:89:1a:34:79:7f:c8:60:67:29:38:
fd:b2:e9:d0:a4:eb:d4:68:c9:86:ad:7e:5e:37:a8:ee:32:c4:
e0:bb:56:96:d3:18:2e:11:40:b5:14:c0:bc:42:65:eb:4e:67:
33:c6:30:ed:2d:0a:d3:1e:1d:e6:50:8b:8e:e7:ee:c2:e5:5a:
f3:96:12:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:34:49 2025 by rpki-client