Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/WUeewnW6CF_HsQkNSXmxvgquEQE.roa
File: WUeewnW6CF_HsQkNSXmxvgquEQE.roa (raw, json)
Hash identifier: q7E4lRP4ACN4kNQFSKgzL5RtpA0YYn9Fkr2ys2dKYy4=
Subject key identifier: 59:47:9E:C2:75:BA:08:5F:C7:B1:09:0D:49:79:B1:BE:0A:AE:11:01
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 019423D70C73B144827DF5321BF47A4AE8BE
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/WUeewnW6CF_HsQkNSXmxvgquEQE.roa
Signing time: Wed 01 Jan 2025 21:48:03 +0000
ROA not before: Wed 01 Jan 2025 21:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207459
IP address blocks: 213.238.167.0/24 maxlen: 24
213.238.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Jan 2025 11:15:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:0c:73:b1:44:82:7d:f5:32:1b:f4:7a:4a:e8:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 21:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59479ec275ba085fc7b1090d4979b1be0aae1101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5b:79:9e:c2:eb:31:b1:cb:8b:b4:33:9c:a9:
26:93:2d:80:b5:a1:49:f5:68:23:22:53:64:16:7f:
8b:cc:47:1d:e6:8c:95:33:9c:b8:0e:c5:32:bd:fd:
75:87:9f:03:8d:a3:c8:36:ee:88:ec:a1:42:20:6a:
3c:0a:f1:3f:cf:e6:21:57:50:be:c4:f8:78:90:0e:
e1:4e:98:ac:40:cb:44:26:b6:be:82:83:0d:5d:17:
86:f9:39:a1:ae:59:14:e8:a4:e9:85:4f:67:74:1b:
67:b0:f9:69:9c:c3:31:35:c9:bb:75:aa:7d:e8:f5:
4a:7f:0a:d3:35:1d:7b:07:6b:1f:ec:39:57:a9:2e:
09:cc:d5:3c:1a:1c:cc:fc:30:94:dd:ad:f7:0d:9c:
01:09:40:0a:60:b9:7b:79:70:72:70:69:08:61:f2:
35:a7:9f:be:21:b9:ae:32:58:1a:b8:ad:9d:ca:a2:
39:7f:b3:78:6c:b7:bc:72:26:a7:c8:4b:91:b3:73:
c4:01:3a:ba:40:db:0d:0a:97:80:a4:1e:c6:05:51:
f3:4a:77:c4:ee:32:a3:db:db:1e:28:5d:1a:83:0f:
a9:ed:8d:d8:e4:6c:ff:73:e6:9e:ee:40:3c:f7:92:
99:52:46:f0:d4:d3:85:3b:57:aa:af:9b:b1:f7:54:
31:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:47:9E:C2:75:BA:08:5F:C7:B1:09:0D:49:79:B1:BE:0A:AE:11:01
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/WUeewnW6CF_HsQkNSXmxvgquEQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.167.0/24
213.238.182.0/24
Signature Algorithm: sha256WithRSAEncryption
72:53:eb:db:55:49:48:8d:b9:2e:0b:02:d0:eb:64:4a:85:19:
42:9a:ec:56:21:46:5b:79:03:99:a2:97:96:0c:65:93:65:2f:
92:0f:85:a7:48:8a:a5:04:32:da:01:a3:47:55:0c:8d:bb:c9:
89:ed:14:32:55:4b:ca:59:6f:f6:79:35:0f:9e:2b:af:61:90:
8f:ff:d5:37:eb:fd:83:59:6a:f5:cf:18:c0:c0:39:08:0a:17:
74:d0:5b:51:dd:f5:07:3b:0a:ec:c5:c5:d1:d1:c6:a9:df:5e:
cd:8e:90:6a:b8:63:1b:a4:9e:2f:5f:b5:50:b6:f4:ba:08:6c:
53:92:29:86:90:dc:76:65:de:2b:2f:3c:c7:bd:73:7b:26:47:
c1:eb:d4:04:21:e3:63:74:d7:76:5e:36:1e:15:c7:6d:a1:87:
21:26:02:ba:84:f2:ad:97:d7:c8:c4:b2:c5:62:af:c0:c5:89:
9f:02:07:6b:30:91:45:48:80:07:76:26:4d:eb:0b:90:b1:ae:
11:5a:71:b6:98:40:3b:16:fc:09:40:0b:6c:68:52:79:c5:7c:
16:32:3e:ac:39:77:f8:83:ef:66:f0:07:96:9f:7f:c9:bc:c3:
db:6a:e4:2d:b3:4e:99:ea:23:5f:58:a0:c2:99:82:5e:72:31:
1e:86:20:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:28:04 2025 by rpki-client