Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/WlOUHbCAETEFXmRvgUi3WgxEjvI.roa
File: WlOUHbCAETEFXmRvgUi3WgxEjvI.roa (raw, json)
Hash identifier: LwaP1rEozDQFRQ8wku6tDTCr/WHD422+58PAti0QmSw=
Subject key identifier: 5A:53:94:1D:B0:80:11:31:05:5E:64:6F:81:48:B7:5A:0C:44:8E:F2
Certificate issuer: /CN=6f5c5712fbbcd832419d4c5884ae3bc3c4a16e7b
Certificate serial: 0194214378F2D72DE36C0BA52A27A7A3BB99
Authority key identifier: 6F:5C:57:12:FB:BC:D8:32:41:9D:4C:58:84:AE:3B:C3:C4:A1:6E:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/WlOUHbCAETEFXmRvgUi3WgxEjvI.roa
Signing time: Wed 01 Jan 2025 09:47:37 +0000
ROA not before: Wed 01 Jan 2025 09:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38917
IP address blocks: 87.255.224.0/19 maxlen: 24
87.255.224.0/20 maxlen: 24
87.255.240.0/20 maxlen: 24
87.255.248.0/22 maxlen: 24
87.255.252.0/24 maxlen: 24
109.111.64.0/19 maxlen: 24
149.255.16.0/22 maxlen: 22
176.110.192.0/21 maxlen: 21
176.110.200.0/22 maxlen: 22
176.110.206.0/23 maxlen: 23
176.110.208.0/21 maxlen: 24
185.24.112.0/22 maxlen: 24
185.86.112.0/20 maxlen: 24
194.32.156.0/22 maxlen: 22
217.175.32.0/20 maxlen: 24
2a04:2cc0::/32 maxlen: 32
2a04:2cc1::/32 maxlen: 32
2a04:2cc2::/32 maxlen: 32
2a04:2cc3::/32 maxlen: 32
2a04:2cc4::/32 maxlen: 32
2a04:2cc5::/32 maxlen: 32
2a04:2cc6::/32 maxlen: 32
2a04:2cc7::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 20 Jan 2025 08:43:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:78:f2:d7:2d:e3:6c:0b:a5:2a:27:a7:a3:bb:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5c5712fbbcd832419d4c5884ae3bc3c4a16e7b
Validity
Not Before: Jan 1 09:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a53941db0801131055e646f8148b75a0c448ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:66:70:2b:fa:ee:85:37:ed:69:54:6f:f5:c2:
6e:9f:99:02:df:7c:55:d3:d7:43:ad:9c:0b:3d:9e:
2b:41:94:ab:9f:8d:b8:ac:95:fd:90:fa:e1:b5:7c:
1c:19:99:16:61:71:f5:50:1c:ea:a5:ea:68:61:91:
4f:5c:f0:31:3c:b1:00:e7:b5:b5:96:53:34:01:5f:
7b:eb:16:16:94:4f:78:98:e3:4b:c7:3f:92:e4:77:
13:90:ef:7d:35:c1:35:ba:3c:b5:ae:d0:36:e5:48:
f1:e1:d9:d0:9a:20:60:d7:a2:41:b9:fd:8e:da:51:
e6:e5:35:ac:8a:90:fd:bb:65:e7:3e:91:19:3c:cb:
b1:ba:bb:ad:d2:4e:32:fe:03:d6:14:21:79:20:76:
f4:67:74:5f:1e:bf:33:e4:ad:e4:98:b3:65:69:54:
ff:b3:b5:ef:68:39:00:3a:90:6b:68:54:b9:e2:a8:
91:ad:60:5f:25:91:58:d0:1b:4b:63:98:f0:24:69:
e3:91:91:74:fd:16:56:27:c2:1b:af:96:71:a2:c3:
f6:6f:59:68:a8:dd:b6:ec:6d:9e:49:5c:47:84:72:
6c:16:a9:b6:32:b7:d2:1b:1b:05:36:1a:14:26:53:
7d:8a:95:ab:af:fe:60:51:83:05:64:a6:23:74:52:
12:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:53:94:1D:B0:80:11:31:05:5E:64:6F:81:48:B7:5A:0C:44:8E:F2
X509v3 Authority Key Identifier:
keyid:6F:5C:57:12:FB:BC:D8:32:41:9D:4C:58:84:AE:3B:C3:C4:A1:6E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/WlOUHbCAETEFXmRvgUi3WgxEjvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.255.224.0/19
109.111.64.0/19
149.255.16.0/22
176.110.192.0-176.110.203.255
176.110.206.0-176.110.215.255
185.24.112.0/22
185.86.112.0/20
194.32.156.0/22
217.175.32.0/20
IPv6:
2a04:2cc0::/29
Signature Algorithm: sha256WithRSAEncryption
97:25:a9:de:04:87:6f:b8:a0:d2:9c:47:62:9c:e5:98:ee:b1:
59:a5:32:13:cf:ab:5d:8e:4c:81:cc:cd:2d:64:bc:2f:77:b6:
af:25:b4:82:e8:b0:b0:e0:eb:d7:dd:16:fb:3d:3f:07:5f:d0:
b5:95:cd:f6:c4:89:a8:5c:69:48:fb:e2:5c:22:e9:f0:61:0f:
2e:bc:9c:23:cc:db:bf:e4:7b:c4:9c:3e:c9:70:89:87:df:d1:
ec:cf:ef:11:63:74:49:ef:b0:cf:74:ad:79:4d:eb:a3:96:60:
c0:a9:62:3a:85:19:f1:6a:9b:c4:25:23:0c:78:ac:1e:bf:06:
2c:82:d5:69:8a:d2:70:6b:88:a6:ca:a7:ee:36:b8:2d:7e:ca:
16:5f:eb:e8:17:c6:42:9c:0d:99:bd:47:aa:a6:49:7a:fb:29:
09:3e:fe:07:01:63:4b:48:ab:ab:fb:64:78:53:8b:ba:33:d1:
bf:3c:52:43:3f:fb:27:81:56:2a:0e:40:67:a3:2f:5e:1a:e9:
55:3f:e6:ac:d1:39:2d:5d:cf:61:0a:a2:13:b5:33:94:4c:23:
8b:bf:88:43:8e:7f:b5:1e:79:fa:76:fe:de:e7:8e:59:df:38:
d6:22:83:dd:03:57:f3:20:96:cc:e6:c4:d0:bf:70:a9:82:15:
16:2e:8e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:23:17 2025 by rpki-client