Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/W35TZ50eM6oQ-UYCNbrnqjc7VK4.roa
File: W35TZ50eM6oQ-UYCNbrnqjc7VK4.roa (raw, json)
Hash identifier: q4jLUv7CdAQ0qcNyoNGt36sPQbUMEQa1sZwHs4Iev34=
Subject key identifier: 5B:7E:53:67:9D:1E:33:AA:10:F9:46:02:35:BA:E7:AA:37:3B:54:AE
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 0193AAC5A24FC1751E1CBC46CB2391A920A2
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/W35TZ50eM6oQ-UYCNbrnqjc7VK4.roa
Signing time: Mon 09 Dec 2024 09:34:58 +0000
ROA not before: Mon 09 Dec 2024 09:34:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51264
IP address blocks: 94.131.125.0/24 maxlen: 24
95.164.90.0/24 maxlen: 24
95.164.92.0/24 maxlen: 24
95.164.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:49:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:aa:c5:a2:4f:c1:75:1e:1c:bc:46:cb:23:91:a9:20:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Dec 9 09:34:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b7e53679d1e33aa10f9460235bae7aa373b54ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c7:ed:44:1f:ca:fc:51:a8:ea:0e:1f:86:86:
1a:68:50:01:f8:ba:94:55:f5:c4:c7:50:3e:90:f7:
60:be:7f:de:93:4d:3b:a3:af:19:24:8a:4b:ef:6d:
46:19:2c:64:c8:04:86:23:7e:08:99:e9:53:64:61:
3e:af:d0:4a:08:ca:d0:86:73:1a:c3:a3:b6:61:2d:
a9:be:15:5b:1f:9c:12:a1:0e:ee:89:f0:b6:ac:dc:
31:e0:76:d6:3f:b2:1e:fc:8d:47:f4:dc:7c:c8:c5:
ec:ac:6d:b6:74:e1:e3:63:0d:ce:7b:0b:21:03:c9:
31:87:2b:f7:6a:ef:ad:f6:14:4a:9e:4d:7f:58:d8:
04:e2:d5:33:54:48:9e:2f:57:8d:5d:28:43:7f:94:
bf:fd:32:13:5c:1f:c0:d4:59:7b:3d:de:2e:2b:af:
79:2e:15:41:cb:dc:0c:92:56:db:f1:ba:68:c9:2f:
41:93:7f:36:20:0b:72:9e:98:03:b7:6a:2e:13:a0:
be:a6:c9:8f:1f:e3:be:b5:5b:25:5f:f2:52:3c:d7:
3f:72:a4:35:67:f7:9f:21:83:3e:06:a7:b9:45:e0:
ca:50:f0:90:67:43:4d:41:4c:ca:6d:23:24:fd:e4:
d3:c8:fb:a8:78:db:ff:e4:d6:ac:b0:3d:00:93:26:
dc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:7E:53:67:9D:1E:33:AA:10:F9:46:02:35:BA:E7:AA:37:3B:54:AE
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/W35TZ50eM6oQ-UYCNbrnqjc7VK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.125.0/24
95.164.90.0/24
95.164.92.0/23
Signature Algorithm: sha256WithRSAEncryption
30:ed:cd:a9:72:2d:fb:c9:8b:2b:8d:5b:2c:38:ff:6f:bf:3a:
24:c4:8f:37:37:5f:66:4e:a1:b1:08:04:20:ba:5b:71:da:db:
a5:6d:c9:7b:09:17:29:c0:c6:29:76:70:d3:d1:90:1a:46:cb:
63:fd:8f:90:ef:8a:e6:0d:7f:5b:ea:a3:b6:fe:bd:de:71:71:
eb:b0:e9:e8:ec:43:a8:54:46:35:a0:be:8d:68:66:77:6b:d6:
2a:c9:8e:45:c6:57:d8:02:3a:73:1d:ac:dc:be:c1:08:27:62:
e3:24:07:7d:fa:d8:0f:47:06:f4:0f:c3:e0:d3:d1:77:33:75:
38:29:1a:38:0e:fa:cf:e0:53:32:bc:90:9c:6b:b4:31:72:27:
6a:3a:1c:81:cb:bf:31:28:02:dd:8c:f1:3c:0b:ed:9b:bc:bb:
60:1b:0d:87:ad:ec:f2:38:e9:4d:92:d7:ce:1e:c6:4f:17:49:
de:7f:ba:ec:2d:bc:ce:85:92:a6:ab:48:ff:f1:11:80:3d:c2:
45:5b:56:a7:9b:7d:b1:71:ea:22:bf:f7:86:fa:15:d2:2d:86:
8d:f8:76:c2:d5:b2:b2:06:4f:15:72:b8:03:14:36:95:f2:ff:
ea:12:ad:02:8a:a3:bb:72:d6:e3:e4:bc:b6:f4:22:2e:a4:ae:
a1:83:c0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:23:14 2025 by rpki-client