Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/WX_p1dX-qP_qja_VXz3O0vL_gFU.roa
File: WX_p1dX-qP_qja_VXz3O0vL_gFU.roa (raw, json)
Hash identifier: YJnqCfy+k6/Vcb4oVfzPVjOCfa9Ab7OG94Dxl2ANdlw=
Subject key identifier: 59:7F:E9:D5:D5:FE:A8:FF:EA:8D:AF:D5:5F:3D:CE:D2:F2:FF:80:55
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0195138A78B0C89DAA7A820B57E37BE4CE5C
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/WX_p1dX-qP_qja_VXz3O0vL_gFU.roa
Signing time: Mon 17 Feb 2025 10:53:16 +0000
ROA not before: Mon 17 Feb 2025 10:53:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205570
IP address blocks: 188.132.190.0/24 maxlen: 24
188.132.193.0/24 maxlen: 24
188.132.206.0/24 maxlen: 24
188.132.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Feb 2025 20:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:13:8a:78:b0:c8:9d:aa:7a:82:0b:57:e3:7b:e4:ce:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Feb 17 10:53:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=597fe9d5d5fea8ffea8dafd55f3dced2f2ff8055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a2:47:37:0e:68:41:3d:27:d8:ec:43:e7:26:
85:3b:0b:21:5f:64:9b:3f:b8:c7:af:63:db:c4:32:
cb:87:ea:90:65:ba:49:ec:47:ca:36:13:a5:b7:db:
5c:f6:79:5b:d6:c7:11:7c:39:74:52:95:c7:5b:e3:
f0:5c:8b:b9:ef:af:b5:7c:c6:d1:1d:f2:0d:b8:c0:
c6:74:1b:42:7b:5a:56:7b:7e:a1:1f:f7:7b:85:de:
8d:c0:54:f5:b7:1e:c6:93:bd:5b:31:e0:94:c1:65:
6c:73:b9:73:56:6b:70:86:bc:8a:9a:d2:c3:48:30:
f4:c5:bf:f3:7b:62:3f:e3:64:27:69:2a:ae:b3:dd:
d6:34:b5:fe:dd:e5:16:8b:99:35:4c:e8:39:f1:c6:
ef:8d:af:21:0f:e6:14:1c:c8:2e:a2:b2:57:56:a6:
2e:22:3f:b4:25:80:73:3b:da:7a:49:6a:43:be:3b:
c5:38:ce:7d:54:1e:5b:52:f5:c7:62:bc:c5:79:ef:
5e:c4:cd:d7:cc:54:19:a3:dd:ad:2b:e5:a0:62:84:
4c:f0:51:8e:83:1b:c3:91:99:32:c6:c1:2d:55:44:
60:b4:9e:3a:cc:96:26:31:a1:4e:44:8a:38:bc:01:
29:55:32:31:b2:d5:92:fc:de:5d:3a:38:42:0e:17:
bb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7F:E9:D5:D5:FE:A8:FF:EA:8D:AF:D5:5F:3D:CE:D2:F2:FF:80:55
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/WX_p1dX-qP_qja_VXz3O0vL_gFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.190.0/24
188.132.193.0/24
188.132.206.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:47:bc:fa:08:a2:21:73:21:59:a4:bf:59:ec:60:af:7d:c0:
e6:3e:d4:57:06:9d:3f:fe:23:7e:01:1e:fe:5e:c7:7e:d1:9c:
86:db:88:17:f0:d2:08:f4:4d:4b:b2:3a:b7:e4:72:ec:90:6d:
74:a5:51:0e:6d:5a:5f:80:b1:2b:08:53:69:75:e1:a4:3c:38:
84:d0:7f:bb:87:a7:1b:e6:d8:6b:eb:31:dc:8b:e8:6d:22:3d:
93:98:4a:ef:41:91:38:5a:62:a4:e4:20:6b:30:dc:f9:f1:bd:
46:f0:a8:02:50:6c:d8:ea:10:fd:a1:ad:40:85:dc:15:7b:d8:
38:e7:9f:50:eb:15:7c:ad:47:96:15:7b:80:07:a9:71:45:9e:
1c:cb:e6:3e:b6:e6:35:44:07:f9:b7:46:30:f2:97:34:99:91:
38:50:87:cd:c7:82:e6:10:6e:8b:b6:20:e8:15:73:6a:9f:60:
d3:b9:2a:3c:0c:70:a7:ed:9c:d8:65:f0:96:68:71:b0:6a:10:
0f:82:99:64:0e:5d:ae:2f:37:66:1b:dd:1a:de:50:fe:4b:ec:
7a:2a:73:90:f7:7e:1b:51:17:5a:b5:30:ed:48:96:74:cb:65:
b6:f5:a3:55:1e:55:d9:e4:7f:1f:ef:b3:ea:b6:e9:fa:cd:48:
b8:9f:c2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 06:55:49 2025 by rpki-client