Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/WtfoZL2A6z23uRJcX3uUminsnNY.roa
File: WtfoZL2A6z23uRJcX3uUminsnNY.roa (raw, json)
Hash identifier: FazqPNLFhGOf0XFZ30geussQQh8GwRQGJ810ErTU9xg=
Subject key identifier: 5A:D7:E8:64:BD:80:EB:3D:B7:B9:12:5C:5F:7B:94:9A:29:EC:9C:D6
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0194258F8031BDCBCAB3F02227CFDC133D9E
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/WtfoZL2A6z23uRJcX3uUminsnNY.roa
Signing time: Thu 02 Jan 2025 05:49:08 +0000
ROA not before: Thu 02 Jan 2025 05:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3319
IP address blocks: 77.47.143.0/24 maxlen: 24
77.47.148.0/22 maxlen: 24
77.47.156.0/22 maxlen: 24
77.47.212.0/23 maxlen: 24
77.47.240.0/23 maxlen: 24
77.47.243.0/24 maxlen: 24
77.47.244.0/22 maxlen: 24
185.143.56.0/22 maxlen: 24
195.178.132.0/24 maxlen: 24
195.178.133.0/24 maxlen: 24
195.178.134.0/24 maxlen: 24
195.178.135.0/24 maxlen: 24
195.178.144.0/23 maxlen: 23
195.178.146.0/24 maxlen: 24
195.178.147.0/24 maxlen: 24
195.178.152.0/22 maxlen: 22
195.178.156.0/24 maxlen: 24
212.111.207.0/24 maxlen: 24
212.111.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Jan 2025 19:49:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:80:31:bd:cb:ca:b3:f0:22:27:cf:dc:13:3d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 2 05:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ad7e864bd80eb3db7b9125c5f7b949a29ec9cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:38:1b:52:01:ba:32:1d:2f:7d:43:5a:fd:28:
27:05:3b:30:d8:2e:ed:f3:c4:17:20:bf:49:cf:13:
27:e2:6f:20:cb:4c:39:96:05:c9:6f:fe:de:9d:cc:
8b:9b:7f:c2:32:eb:6b:d6:4e:4e:78:df:8b:50:65:
c1:9b:81:4a:56:5a:1f:5a:e0:e4:56:35:d8:32:c2:
16:64:66:89:7d:a9:e0:08:1c:89:e4:28:86:40:f5:
e6:96:b9:f3:2e:9a:0d:ce:08:95:32:05:b0:19:0b:
17:b0:d3:54:bb:59:b7:62:0e:b6:bd:21:51:20:7d:
2f:67:92:59:43:30:73:fa:94:83:3f:84:ca:0e:66:
4e:ee:29:a4:46:48:02:7e:e2:11:73:3d:d3:f3:82:
05:12:20:8d:06:ba:10:c6:5f:38:b7:7e:4f:e6:d4:
e5:f2:15:b6:09:99:34:51:63:d9:b0:29:1c:ea:5e:
be:4d:3c:2b:2d:8f:32:07:9a:c8:f0:93:a6:c0:d7:
3d:a9:dd:99:2a:bb:0f:c2:de:9b:11:fa:c9:47:e0:
79:d4:d1:85:13:02:0c:b9:bf:53:f9:3e:77:1f:c4:
e1:30:83:9c:3e:39:c9:92:b1:f2:b1:11:93:78:17:
3c:5b:66:4a:3c:f6:60:04:3f:13:8c:01:2a:06:75:
ed:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D7:E8:64:BD:80:EB:3D:B7:B9:12:5C:5F:7B:94:9A:29:EC:9C:D6
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/WtfoZL2A6z23uRJcX3uUminsnNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.143.0/24
77.47.148.0/22
77.47.156.0/22
77.47.212.0/23
77.47.240.0/23
77.47.243.0-77.47.247.255
185.143.56.0/22
195.178.132.0/22
195.178.144.0/22
195.178.152.0-195.178.156.255
212.111.207.0/24
212.111.217.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:fb:75:d9:7c:7d:e5:67:b2:b6:74:f0:ec:cd:d3:35:47:85:
f5:28:d0:dd:ce:87:13:0b:45:e0:3b:e8:32:68:eb:d0:e0:00:
02:65:4a:2b:65:1a:88:d8:30:53:30:18:c6:09:23:b2:fc:81:
a5:3b:f7:c4:bf:e7:05:e4:f7:c9:a9:b4:2e:bc:fe:5d:19:0f:
8b:0c:e7:34:e3:f0:24:fe:0c:df:5c:86:c3:79:ac:ff:35:0c:
01:ae:70:42:87:42:31:97:f9:7c:45:db:93:bd:3c:24:5b:5f:
0d:36:38:88:64:7a:e3:c6:cc:7b:d4:41:b3:b1:19:7d:86:78:
a5:79:42:2a:2f:fc:27:13:88:16:b6:eb:dd:d0:04:ab:d6:64:
14:5e:a2:1e:8a:f1:a5:ba:c7:02:6c:b2:40:85:3c:99:82:ca:
f2:87:4f:27:5e:3b:2a:94:08:19:98:a2:f4:68:8d:21:f6:31:
98:e0:a8:86:23:6b:ce:e2:33:fa:0e:1f:59:8c:d0:5d:06:61:
8b:58:a7:d9:8b:ab:62:8a:b4:f5:a1:b3:14:9d:ea:51:9f:dd:
83:f7:f5:72:62:2f:7d:44:0c:90:bb:e6:9d:8a:7a:6b:70:23:
4b:c2:c6:3d:ab:67:54:f1:d6:7c:b1:78:dd:08:10:7e:eb:51:
37:f2:1f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:14:27 2025 by rpki-client