Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/WCWfgMxt2BqlJwYNBGsqcZrtv4U.roa
File: WCWfgMxt2BqlJwYNBGsqcZrtv4U.roa (raw, json)
Hash identifier: rpjOyO5+uxqI1gdVS8FglS4hUBTaT+tCdVJZGlIjZdA=
Subject key identifier: 58:25:9F:80:CC:6D:D8:1A:A5:27:06:0D:04:6B:2A:71:9A:ED:BF:85
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0194F19BB4B8C75E8A1E928226BA580861E6
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/WCWfgMxt2BqlJwYNBGsqcZrtv4U.roa
Signing time: Mon 10 Feb 2025 20:45:00 +0000
ROA not before: Mon 10 Feb 2025 20:45:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212150
IP address blocks: 80.244.15.0/24 maxlen: 24
212.46.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Feb 2025 22:50:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f1:9b:b4:b8:c7:5e:8a:1e:92:82:26:ba:58:08:61:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Feb 10 20:45:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58259f80cc6dd81aa527060d046b2a719aedbf85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:33:89:ab:c5:2a:0d:0b:14:08:f7:4a:10:f1:
e3:03:42:94:13:61:e1:e1:59:e5:c6:7f:8c:98:b8:
98:da:2d:f6:07:1f:f8:1c:0f:c7:61:a6:f5:4a:44:
54:cb:80:81:d5:45:03:ab:b4:b5:1f:02:6e:37:10:
21:46:16:e8:56:9b:31:85:f7:81:ef:f8:5c:c6:97:
49:67:b0:f6:d8:8e:df:df:9f:06:08:6a:74:e5:83:
29:47:fb:cb:0e:fe:bc:6b:3d:5f:88:56:da:60:3a:
93:8c:09:48:9c:f2:ef:ba:37:4b:47:6d:8c:b0:c4:
bd:72:08:a6:54:1a:a0:95:31:32:09:91:9a:b5:73:
be:71:c9:d2:d9:06:ef:90:e3:c5:57:2a:e5:69:c1:
5e:78:34:20:d9:fa:5f:3f:6a:37:b9:1b:5c:c8:0e:
31:4d:ce:9f:f8:d7:31:12:37:68:28:35:53:1e:bf:
0b:7a:83:a8:e5:cf:22:f2:50:a2:c9:02:03:01:fd:
5f:5b:77:4c:87:c5:ec:40:45:37:4d:e4:2e:66:a3:
6a:ac:8c:e5:e0:17:b1:cd:ce:81:e4:9f:b5:43:bd:
59:20:53:ee:28:1e:f2:37:9a:fb:a0:d5:bb:34:4b:
22:27:86:e1:eb:df:a5:a9:fd:a1:ce:dc:f4:c9:24:
87:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:25:9F:80:CC:6D:D8:1A:A5:27:06:0D:04:6B:2A:71:9A:ED:BF:85
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/WCWfgMxt2BqlJwYNBGsqcZrtv4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.15.0/24
212.46.37.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:71:f0:86:ff:bf:55:8b:58:89:b3:3c:03:c9:03:36:f4:c0:
2c:bf:1b:19:62:cd:59:49:09:95:b4:ca:eb:53:b7:93:55:9a:
d1:88:84:24:50:81:c0:88:df:cf:75:78:4e:6b:de:26:40:e3:
40:38:74:78:0a:9c:9a:a5:f8:30:4d:21:ae:bd:ae:f1:fc:2f:
90:5f:c0:06:ce:e5:98:be:3c:5b:99:5a:e2:2b:7f:13:3d:c6:
ed:b2:79:6d:c5:b0:8b:07:ff:87:99:6a:c1:c6:e0:3c:e9:a1:
57:c9:75:81:8d:d3:fb:c7:69:49:03:6c:56:3b:c9:b2:4b:4c:
53:fa:12:03:03:63:19:d0:34:65:2e:29:51:68:07:a9:4c:ec:
13:a2:3b:67:00:34:9e:c3:a7:0b:2d:bc:6d:bd:7c:29:02:b1:
4d:54:d9:72:21:82:e2:3c:70:cf:d5:f6:59:7f:a8:ae:42:12:
eb:db:2b:fe:d5:57:a1:7b:c6:31:0b:ec:fe:a5:ec:7d:93:22:
e2:d7:90:c6:62:70:da:fb:5c:e0:b2:fc:9c:7f:6d:11:59:b7:
5e:c9:40:5e:9c:e3:63:79:a5:c4:1a:86:11:90:0d:a2:43:b4:
cb:06:50:94:b3:aa:5a:18:f5:80:7f:17:a6:c7:5d:87:e8:b9:
89:96:f3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:44:43 2025 by rpki-client