Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/WYmCuIGgC4NA6mdIKuSKl3h8uWg.roa
File: WYmCuIGgC4NA6mdIKuSKl3h8uWg.roa (raw, json)
Hash identifier: CBXS4Z+kFZUq8waLaAL7pMP2i/kFCxmOW4XQ0zgrN1s=
Subject key identifier: 59:89:82:B8:81:A0:0B:83:40:EA:67:48:2A:E4:8A:97:78:7C:B9:68
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 0194B9AC0C75D7CEE7C5E5F6797A81C6DF07
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/WYmCuIGgC4NA6mdIKuSKl3h8uWg.roa
Signing time: Fri 31 Jan 2025 00:04:07 +0000
ROA not before: Fri 31 Jan 2025 00:04:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197649
IP address blocks: 83.147.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Feb 2025 05:44:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b9:ac:0c:75:d7:ce:e7:c5:e5:f6:79:7a:81:c6:df:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Jan 31 00:04:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=598982b881a00b8340ea67482ae48a97787cb968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5c:dc:66:17:68:51:46:12:68:9f:fe:e8:01:
e9:ef:5d:0c:95:53:b6:6b:83:0b:92:71:a2:04:96:
f6:39:41:33:8d:5c:74:a9:56:ba:d8:31:01:02:99:
a0:ff:c6:32:2f:76:4b:a9:e5:78:01:b2:1b:43:eb:
f7:ae:9c:57:1c:6d:56:ed:6e:b1:61:b8:76:e7:4e:
d4:02:9c:8c:71:1c:46:1b:c5:ba:a5:c3:cf:65:8f:
fb:dd:ec:30:47:c4:be:73:ff:da:e8:d6:96:f2:ac:
9d:f7:c7:01:5c:79:90:2e:7b:f0:61:cb:ea:0d:ab:
96:68:0f:52:8c:a7:59:d2:6f:96:be:17:bc:e0:c7:
a6:f6:27:ad:60:bb:8e:49:f2:36:6b:b8:3c:53:5f:
f5:28:7a:ae:ce:b1:bb:f0:5e:0d:b8:90:14:66:b1:
d4:de:26:9b:65:48:87:82:2a:aa:d9:50:00:8d:80:
92:57:e3:4f:6a:03:f7:be:1c:21:70:9e:49:d2:19:
b8:08:72:3f:5e:bb:ed:f3:b7:d2:fb:ff:f3:9f:93:
0b:71:a9:a4:13:0b:09:03:50:44:56:28:e4:0a:c9:
75:1e:de:89:62:8a:1d:9c:13:8d:68:6c:34:4a:a3:
a8:df:60:78:85:ba:e8:07:6b:51:8b:b0:26:0c:8e:
aa:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:89:82:B8:81:A0:0B:83:40:EA:67:48:2A:E4:8A:97:78:7C:B9:68
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/WYmCuIGgC4NA6mdIKuSKl3h8uWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.222.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:eb:3f:71:02:ea:97:6b:d3:09:78:fd:c0:d8:59:c8:5c:90:
84:00:60:13:cb:49:7c:c3:bc:b1:38:4b:6c:72:a5:82:06:c2:
45:66:ec:75:72:c1:76:5a:6f:81:16:4e:2a:70:ee:b6:14:e0:
98:94:d3:e1:e6:85:fe:18:fa:84:f4:cf:f4:24:4e:e6:94:0b:
07:e3:71:17:d0:18:c6:aa:bc:b6:f5:95:43:60:a7:57:8a:83:
1e:b7:6e:d1:0e:a1:a6:43:2b:3f:bd:13:b2:78:a0:06:63:c1:
e8:a0:0c:7e:99:15:59:81:b2:7d:af:6f:d7:b1:5e:10:85:64:
68:65:a3:11:88:38:27:6c:bb:53:93:3f:61:41:51:f3:a4:46:
1a:a4:29:38:dc:22:2e:2c:a2:94:77:ff:c9:9f:c6:8e:77:bd:
c3:d1:d3:5c:9a:cf:9c:09:7c:ac:28:2a:7b:59:3b:a8:d8:e1:
a6:7d:b5:fa:22:66:24:fc:22:1e:75:7c:d1:cf:e5:44:80:5f:
62:03:97:6b:6e:d0:20:93:72:a7:da:60:d7:77:06:05:1e:a7:
71:57:fd:e9:ba:4c:eb:ea:1b:b9:f4:27:01:81:65:b7:ea:d7:
a7:f8:f3:5e:e4:64:31:cc:48:08:8a:b8:e4:4a:01:9f:51:d5:
28:97:a9:06
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZS5rAx1187nxeX2eXqBxt8HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1YmFmMjY5Njc1MTBiM2M1MmU0NmQxZGM1OTM5NjdjZGYy
OWY5YzkwHhcNMjUwMTMxMDAwNDA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTg5ODJiODgxYTAwYjgzNDBlYTY3NDgyYWU0OGE5Nzc4N2NiOTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlzcZhdoUUYSaJ/+6AHp710MlVO2
a4MLknGiBJb2OUEzjVx0qVa62DEBApmg/8YyL3ZLqeV4AbIbQ+v3rpxXHG1W7W6x
Ybh2507UApyMcRxGG8W6pcPPZY/73ewwR8S+c//a6NaW8qyd98cBXHmQLnvwYcvq
DauWaA9SjKdZ0m+Wvhe84Mem9ietYLuOSfI2a7g8U1/1KHquzrG78F4NuJAUZrHU
3iabZUiHgiqq2VAAjYCSV+NPagP3vhwhcJ5J0hm4CHI/Xrvt87fS+//zn5MLcamk
EwsJA1BEVijkCsl1Ht6JYoodnBONaGw0SqOo32B4hbroB2tRi7AmDI6qgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFmJgriBoAuDQOpnSCrkipd4fLloMB8GA1UdIwQY
MBaAFFW68mlnUQs8UuRtHcWTlnzfKfnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAt
NDlmOTgxZWU1OTgxLzEvV1ltQ3VJR2dDNE5BNm1kSUt1U0tsM2g4dVdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAtNDlmOTgxZWU1OTgx
LzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU5PeMA0G
CSqGSIb3DQEBCwUAA4IBAQB96z9xAuqXa9MJeP3A2FnIXJCEAGATy0l8w7yxOEts
cqWCBsJFZux1csF2Wm+BFk4qcO62FOCYlNPh5oX+GPqE9M/0JE7mlAsH43EX0BjG
qry29ZVDYKdXioMet27RDqGmQys/vROyeKAGY8HooAx+mRVZgbJ9r2/XsV4QhWRo
ZaMRiDgnbLtTkz9hQVHzpEYapCk43CIuLKKUd//Jn8aOd73D0dNcms+cCXysKCp7
WTuo2OGmfbX6ImYk/CIedXzRz+VEgF9iA5drbtAgk3Kn2mDXdwYFHqdxV/3pukzr
6hu59CcBgWW36ten+PNe5GQxzEgIirjkSgGfUdUol6kG
-----END CERTIFICATE-----
Generated at Tue Apr 22 01:27:38 2025 by rpki-client