Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/Wrg7xW6KWGdsVpCqvVkZ6RzKBqs.roa
File: Wrg7xW6KWGdsVpCqvVkZ6RzKBqs.roa (raw, json)
Hash identifier: o0ILIbCEh+d3jIB3IlZWP/9txCeGj7bA3JIVbi+UOv4=
Subject key identifier: 5A:B8:3B:C5:6E:8A:58:67:6C:56:90:AA:BD:59:19:E9:1C:CA:06:AB
Certificate issuer: /CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Certificate serial: 019423D70D9E1ABA417DD8027728EAF0FF26
Authority key identifier: E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/Wrg7xW6KWGdsVpCqvVkZ6RzKBqs.roa
Signing time: Wed 01 Jan 2025 21:48:03 +0000
ROA not before: Wed 01 Jan 2025 21:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202940
IP address blocks: 89.208.0.0/21 maxlen: 21
89.208.4.0/22 maxlen: 24
89.208.56.0/21 maxlen: 21
89.208.128.0/21 maxlen: 21
89.208.134.0/23 maxlen: 24
141.226.120.0/22 maxlen: 24
147.234.23.0/24 maxlen: 24
147.236.104.0/21 maxlen: 23
147.236.116.0/23 maxlen: 24
147.236.120.0/21 maxlen: 21
147.236.125.0/24 maxlen: 24
147.236.144.0/20 maxlen: 24
147.236.176.0/20 maxlen: 24
147.236.183.0/24 maxlen: 24
185.108.80.0/22 maxlen: 24
185.149.252.0/22 maxlen: 24
185.167.108.0/22 maxlen: 24
185.175.32.0/22 maxlen: 23
185.180.100.0/22 maxlen: 24
185.180.100.0/24 maxlen: 24
185.180.102.0/24 maxlen: 24
185.180.103.0/24 maxlen: 24
185.182.76.0/22 maxlen: 24
185.184.244.0/22 maxlen: 23
188.191.224.0/21 maxlen: 21
188.191.224.0/22 maxlen: 22
188.191.224.0/24 maxlen: 24
188.191.228.0/22 maxlen: 22
217.175.80.0/20 maxlen: 20
217.175.84.0/22 maxlen: 22
217.175.88.0/21 maxlen: 23
2a00:7c40::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 07 Jan 2025 19:38:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:0d:9e:1a:ba:41:7d:d8:02:77:28:ea:f0:ff:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Validity
Not Before: Jan 1 21:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ab83bc56e8a58676c5690aabd5919e91cca06ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:25:48:8e:07:08:39:df:3a:6b:31:80:7e:35:
70:f4:c8:b3:d8:51:b5:f9:02:bb:b2:48:d3:f6:b3:
2c:1c:bb:78:d1:66:2a:75:6a:59:f2:b6:34:45:d8:
a5:30:69:2f:3e:4a:9b:21:bf:f3:57:b5:93:63:38:
52:a2:6c:3b:62:6d:af:82:b7:a3:fa:98:ba:26:f8:
2c:03:41:70:33:b6:48:a7:43:ef:f1:bc:81:0a:b3:
a4:4d:d7:f1:cf:fc:d2:b4:cc:da:17:2f:fa:d2:70:
cb:d4:8d:54:fe:f8:0f:8e:64:79:dc:04:c0:62:e8:
da:96:fe:f8:31:1a:c3:a9:4e:a7:df:16:05:09:f3:
f4:f9:3e:07:a1:59:f7:d3:23:58:6a:88:b1:03:bf:
93:36:c3:e1:c6:0d:86:cc:05:c9:79:03:26:ac:ce:
7b:ce:a7:b8:c3:b6:60:f8:8c:99:ab:f5:26:28:15:
e1:7b:7b:8f:7c:cf:e8:87:65:84:e4:e8:cc:8a:bf:
10:4d:26:d3:64:73:72:ab:3f:7d:53:62:84:38:a2:
90:af:8c:7e:c7:ee:5f:20:64:fa:b8:6e:ab:b3:f5:
7e:fd:fb:05:08:a9:ac:de:cc:31:b6:c4:af:8f:24:
31:65:cd:3b:c1:b8:5c:ac:e7:d1:bf:bc:79:45:a4:
09:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B8:3B:C5:6E:8A:58:67:6C:56:90:AA:BD:59:19:E9:1C:CA:06:AB
X509v3 Authority Key Identifier:
keyid:E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/Wrg7xW6KWGdsVpCqvVkZ6RzKBqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.208.0.0/21
89.208.56.0/21
89.208.128.0/21
141.226.120.0/22
147.234.23.0/24
147.236.104.0/21
147.236.116.0/23
147.236.120.0/21
147.236.144.0/20
147.236.176.0/20
185.108.80.0/22
185.149.252.0/22
185.167.108.0/22
185.175.32.0/22
185.180.100.0/22
185.182.76.0/22
185.184.244.0/22
188.191.224.0/21
217.175.80.0/20
IPv6:
2a00:7c40::/29
Signature Algorithm: sha256WithRSAEncryption
5e:b7:c6:b9:85:5a:66:5b:de:32:88:a4:08:23:c2:4a:8c:b2:
61:ad:78:e7:c2:84:81:43:46:86:9e:33:c7:ea:95:88:96:bb:
39:8e:4b:9a:9d:1b:43:8b:82:49:7e:8f:af:0b:51:6f:7e:83:
4b:66:4e:0e:4a:f6:62:06:fb:32:82:d0:76:76:3c:6a:64:ce:
5c:5a:65:77:85:67:dd:3f:64:84:51:0c:6e:9a:5b:1f:4a:da:
31:ed:3b:fb:bd:bd:b6:1d:ea:b6:0a:d0:8c:ea:b5:33:87:1b:
c7:ab:f3:55:1f:55:50:6a:8f:69:e2:0c:99:fc:b7:e9:bd:b4:
d0:94:fe:02:22:3b:e7:70:de:74:71:f8:03:0a:5a:bd:c3:83:
70:c2:01:ff:a1:87:d6:2c:de:84:03:6e:16:cd:4c:5b:5a:07:
03:5c:c2:d4:68:9f:d1:b1:26:44:46:17:f2:22:24:42:64:93:
f0:3d:af:9e:9e:c3:eb:0f:82:e2:4b:cc:36:70:4f:e5:09:c7:
04:fb:12:42:a6:42:10:d0:a1:29:bf:ed:41:a1:de:6d:37:35:
dc:39:a9:7e:d3:d9:41:8f:b2:6b:0b:4d:99:d0:21:9a:95:cf:
03:97:2c:b8:a4:28:2b:c2:dd:11:06:61:1e:50:4c:d3:00:87:
d5:b6:74:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:09:40 2025 by rpki-client