Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/CWaw-XEV_7kblDhyqbKdcXioCTA.roa
File: CWaw-XEV_7kblDhyqbKdcXioCTA.roa (raw, json)
Hash identifier: Wv68Qn04Q4TeyzOEA0w/Vv0TcWMPvLucAtU0oQt3TH0=
Subject key identifier: 09:66:B0:F9:71:15:FF:B9:1B:94:38:72:A9:B2:9D:71:78:A8:09:30
Certificate issuer: /CN=90b8a15466c3ff1e915d780a10b0baa9ad694860
Certificate serial: 0194A7C3FBD385E3146284CF3386EED09565
Authority key identifier: 90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/CWaw-XEV_7kblDhyqbKdcXioCTA.roa
Signing time: Mon 27 Jan 2025 12:37:06 +0000
ROA not before: Mon 27 Jan 2025 12:37:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197979
IP address blocks: 37.130.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Jan 2025 16:29:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a7:c3:fb:d3:85:e3:14:62:84:cf:33:86:ee:d0:95:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b8a15466c3ff1e915d780a10b0baa9ad694860
Validity
Not Before: Jan 27 12:37:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0966b0f97115ffb91b943872a9b29d7178a80930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:04:12:31:29:ae:15:da:5a:7a:ac:7d:89:30:
59:d7:5b:d0:b3:57:49:e2:41:95:d0:1b:33:f7:b2:
a0:04:d2:8f:91:83:e6:53:9c:96:f6:8b:32:a8:9e:
c9:16:49:d7:02:42:0e:c1:86:ab:61:8b:40:df:49:
17:59:bc:b3:60:4f:02:f7:5f:9f:12:34:ed:02:73:
c2:02:99:2f:a5:80:36:70:19:4f:b8:02:81:63:92:
fa:0a:9f:14:ca:dc:11:24:ac:05:ac:4b:ea:b0:9e:
01:df:f8:fd:cc:6b:ce:25:b8:18:1e:52:18:fd:06:
7c:d7:53:b5:79:83:90:a6:16:1a:67:f4:9e:f9:7a:
39:f0:32:06:52:16:0b:ca:97:db:d3:53:9b:ff:45:
3a:fb:17:e3:6c:66:2e:5d:fa:c9:24:b6:e7:44:4d:
11:13:34:30:43:58:60:cf:5c:83:08:c0:72:87:ed:
77:87:11:96:91:ee:79:a5:6c:15:7e:1f:1c:0f:da:
de:fc:46:e5:c1:38:54:4a:33:ef:2a:20:ec:2b:07:
f5:59:42:2c:d9:be:ea:34:d9:b6:01:72:02:2a:cd:
91:6a:ba:b7:36:a1:67:d8:b3:8e:5e:8b:a7:00:62:
f3:f1:ed:e3:b2:1d:18:7b:1a:75:b6:9c:55:17:db:
b7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:66:B0:F9:71:15:FF:B9:1B:94:38:72:A9:B2:9D:71:78:A8:09:30
X509v3 Authority Key Identifier:
keyid:90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/CWaw-XEV_7kblDhyqbKdcXioCTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.130.49.0/24
Signature Algorithm: sha256WithRSAEncryption
69:78:2d:55:d7:32:5b:4c:35:1c:a2:8c:e5:1b:1a:15:be:4b:
3d:c9:18:43:15:be:f4:a8:31:c1:79:30:70:a5:00:c3:b4:f6:
31:9c:11:34:83:b7:aa:94:3e:56:21:06:60:8e:31:61:66:09:
16:c9:d3:99:42:62:b9:84:6a:fe:68:63:6a:c3:72:cb:26:23:
12:ec:e5:af:e9:82:6b:7d:be:b6:09:1f:c5:ba:60:7c:89:7a:
7c:0d:cd:1d:53:22:02:91:b1:f4:82:a4:6e:d2:ad:c7:54:1a:
13:77:e2:88:a6:2c:c0:ad:3d:4e:10:08:b9:f0:de:46:26:34:
f5:a1:f7:05:2a:d8:d6:3d:14:53:28:a1:4d:5b:91:99:73:11:
2c:df:d6:7b:d8:09:0c:23:8c:b9:e6:aa:f5:47:e1:77:02:65:
da:c3:22:fe:86:66:97:1a:60:1b:5c:d7:d1:d5:77:e5:4d:cc:
24:fe:42:e6:05:83:00:ad:19:87:dc:c8:8c:59:22:0a:9c:1d:
6e:36:9f:03:25:f9:96:8a:b4:17:41:6e:72:b3:73:63:e7:ef:
74:20:d2:d6:bf:7e:37:cb:ef:a4:b7:39:65:3e:8b:94:6b:dd:
99:4d:af:b1:f4:3b:4e:a2:a8:2f:57:0c:1d:aa:a0:95:e6:bb:
b7:d5:fe:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:12:26 2025 by rpki-client