Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/wDIdsR7VyVVcE4PoSJSTu7ppX3g.roa
File: wDIdsR7VyVVcE4PoSJSTu7ppX3g.roa (raw, json)
Hash identifier: Pty0tlFOZLL0hOV7MZfHpCPFQW/2WbEmyrriZPHzmN0=
Subject key identifier: C0:32:1D:B1:1E:D5:C9:55:5C:13:83:E8:48:94:93:BB:BA:69:5F:78
Certificate issuer: /CN=ceb86983547113359bade1f3f38104091e3a6439
Certificate serial: 0196F89884A6E5A67C655E54E5BE284D195A
Authority key identifier: CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/wDIdsR7VyVVcE4PoSJSTu7ppX3g.roa
Signing time: Thu 22 May 2025 15:24:27 +0000
ROA not before: Thu 22 May 2025 15:24:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8612
IP address blocks: 82.84.0.0/15 maxlen: 24
82.85.26.128/26 maxlen: 26
82.85.53.0/26 maxlen: 26
82.85.53.64/26 maxlen: 26
94.32.0.0/19 maxlen: 24
94.32.64.0/18 maxlen: 24
94.32.115.0/24 maxlen: 24
94.32.128.0/17 maxlen: 24
193.207.24.0/23 maxlen: 23
193.207.26.0/24 maxlen: 24
193.207.48.0/20 maxlen: 24
193.207.64.0/18 maxlen: 24
193.207.96.0/20 maxlen: 21
193.207.128.0/17 maxlen: 22
195.130.224.0/19 maxlen: 19
212.123.64.0/19 maxlen: 19
213.205.0.0/18 maxlen: 18
213.205.0.251/32 maxlen: 32
2a01:7d0::/32 maxlen: 32
2a01:7d0:4800:1::/64 maxlen: 64
2a01:7d0:4811::/64 maxlen: 64
Validation: Failed, certificate revoked on Mon 26 May 2025 09:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f8:98:84:a6:e5:a6:7c:65:5e:54:e5:be:28:4d:19:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceb86983547113359bade1f3f38104091e3a6439
Validity
Not Before: May 22 15:24:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0321db11ed5c9555c1383e8489493bbba695f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fd:de:f3:cf:36:00:da:0b:1e:7a:6e:90:1e:
ef:38:63:bf:08:84:9b:2f:fb:df:d6:e4:ff:9b:c7:
a3:d2:5e:b9:bb:06:97:f2:82:f6:eb:73:8a:6e:19:
97:96:e3:1c:80:88:44:64:9f:f9:95:8d:40:3b:e6:
71:4e:31:57:93:ef:58:76:15:3a:d0:83:f7:0f:e8:
30:20:9d:18:41:79:fd:94:23:75:a3:8a:42:11:82:
aa:b1:0a:fc:d0:ce:80:84:e9:2c:3f:9a:a9:7f:25:
9c:b3:57:c6:6d:af:3b:48:9d:66:95:51:ab:6d:1e:
e0:59:73:07:a1:ac:c3:d5:7f:05:7c:df:3e:35:c5:
d0:0a:11:fa:2a:c6:e8:3f:0d:a8:ec:ef:ef:87:c8:
d8:d4:3b:7f:9f:69:b7:3c:35:71:81:fc:fc:7e:5d:
08:87:a9:5d:33:71:5c:13:1b:08:1d:26:73:fb:d2:
37:b5:2c:fd:02:b7:e7:3c:7f:af:b8:79:51:84:89:
47:a6:cc:06:28:a0:63:a2:49:bd:99:1d:fa:5f:07:
e8:42:74:3f:ee:fc:dd:14:a8:6c:9b:21:c6:b6:66:
1e:25:76:23:33:09:63:dc:20:2d:b9:1e:a5:95:2f:
fa:e1:6f:96:cc:cf:98:9d:0b:36:78:97:cb:f2:22:
9f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:32:1D:B1:1E:D5:C9:55:5C:13:83:E8:48:94:93:BB:BA:69:5F:78
X509v3 Authority Key Identifier:
keyid:CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/wDIdsR7VyVVcE4PoSJSTu7ppX3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.84.0.0/15
94.32.0.0/19
94.32.64.0-94.32.255.255
193.207.24.0-193.207.26.255
193.207.48.0-193.207.255.255
195.130.224.0/19
212.123.64.0/19
213.205.0.0/18
IPv6:
2a01:7d0::/32
Signature Algorithm: sha256WithRSAEncryption
95:a8:8c:ef:fb:9d:3f:1b:97:3e:6a:74:ce:02:10:26:e6:c1:
b6:7e:77:36:68:bf:3d:9e:6e:c1:46:cb:cb:af:d0:6e:56:a3:
bf:61:54:7a:80:39:2b:c2:ed:20:8f:56:57:be:ff:87:63:b3:
06:5b:62:4f:f7:de:de:fb:45:78:1f:f6:83:81:38:cb:29:59:
e4:07:0e:7a:86:48:64:23:35:38:5c:19:9b:23:10:f5:8a:42:
c3:5f:f7:c3:c9:33:e3:dc:be:97:d8:11:06:4e:dd:68:95:46:
58:7c:17:21:5c:f8:7e:b2:e9:e0:02:4b:d2:c2:5b:fe:6e:6f:
86:7c:34:19:61:f7:12:33:f8:e2:62:d8:80:c3:a7:51:5a:ff:
d1:62:de:5f:e8:50:b1:b8:a6:77:e0:65:70:a6:5c:44:d2:30:
49:db:83:40:66:7f:27:a5:1c:c6:35:f2:21:1d:98:e0:b0:67:
8c:f4:67:88:69:64:c0:bb:10:57:88:f2:0c:b0:f4:d1:7a:ec:
bc:51:56:21:b5:46:fe:b5:ac:5e:2b:d4:2c:54:b0:46:dc:ac:
34:28:2b:7e:c0:64:80:1d:8c:db:87:0a:87:5a:51:36:36:e9:
f6:c2:3f:1b:95:eb:f9:78:0c:4a:4c:b5:e3:16:72:29:5e:72:
73:06:04:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:26:41 2025 by rpki-client