Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/WbLiAleVROtGtnK93iJZArtrZkQ.roa
File: WbLiAleVROtGtnK93iJZArtrZkQ.roa (raw, json)
Hash identifier: kL7e8a/dJ6L6/Z6+e31j7iP67mYQZDdpOrXkxPh5YaQ=
Subject key identifier: 59:B2:E2:02:57:95:44:EB:46:B6:72:BD:DE:22:59:02:BB:6B:66:44
Certificate issuer: /CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d
Certificate serial: 018CC500EC2FC743951CC226F89103141E4F
Authority key identifier: 25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/WbLiAleVROtGtnK93iJZArtrZkQ.roa
Signing time: Mon 01 Jan 2024 12:30:21 +0000
ROA not before: Mon 01 Jan 2024 12:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60134
IP address blocks: 149.62.182.0/24 maxlen: 24
5.158.82.0/24 maxlen: 24
5.158.86.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:50:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:ec:2f:c7:43:95:1c:c2:26:f8:91:03:14:1e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d
Validity
Not Before: Jan 1 12:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59b2e202579544eb46b672bdde225902bb6b6644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:19:04:5a:ce:09:aa:ef:85:20:52:28:b2:d0:
ef:77:ac:a7:34:82:c4:bc:49:18:2e:f0:1e:98:53:
ad:5b:f4:b6:1c:3e:ba:c4:3e:78:cc:a2:a9:f4:1c:
3a:33:e8:ca:7c:2e:e7:2f:97:b1:31:69:1a:48:ea:
8d:04:43:39:e5:fe:d5:87:c1:c9:23:ac:1e:6e:47:
11:c8:ad:4a:1c:14:6e:a1:80:cd:34:5d:d8:d3:2f:
42:63:86:48:3a:67:d8:01:9c:13:a2:fb:c5:1b:84:
7f:f9:31:b0:1b:43:8a:de:5d:29:81:2a:e5:fa:48:
c5:ce:3e:40:59:17:62:97:f2:12:82:2a:e4:46:b7:
ed:5c:11:7d:b0:9e:04:91:7f:2b:06:6e:bc:91:4f:
0a:3f:f6:dc:b4:69:b6:68:70:62:6b:1c:7c:34:b3:
c3:a0:8e:dc:de:18:81:ff:aa:0b:1f:e3:43:d6:3c:
d1:c7:9c:0e:34:94:ed:b6:1a:06:ba:5b:a6:c8:c1:
2c:45:3f:2e:fa:83:3f:5f:c6:94:10:5c:9e:4a:a9:
fa:96:ce:a7:77:64:bc:a6:60:f0:2a:4c:f2:59:81:
66:fd:59:9f:c7:34:ae:03:eb:12:4a:50:de:3f:b9:
9c:70:20:a7:ff:78:5e:4d:4a:2c:31:9c:16:7a:25:
2d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B2:E2:02:57:95:44:EB:46:B6:72:BD:DE:22:59:02:BB:6B:66:44
X509v3 Authority Key Identifier:
keyid:25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/WbLiAleVROtGtnK93iJZArtrZkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.158.82.0/24
5.158.86.0/24
149.62.182.0/24
Signature Algorithm: sha256WithRSAEncryption
10:77:2c:39:a5:a7:88:e4:ad:70:7f:96:1b:8d:00:98:67:4d:
f6:ae:00:dc:79:88:ad:8d:83:d1:85:52:ab:df:71:ce:c9:38:
d6:d3:96:5b:15:6f:12:f4:47:df:ca:c5:08:8c:d0:06:fd:dc:
ec:b8:55:e5:7a:2e:81:fc:c6:82:4a:58:32:0d:7e:f9:49:1f:
f7:41:fb:d4:c8:a1:39:ed:c0:9a:53:2d:6c:b9:e4:1e:83:55:
eb:6c:a5:2a:a3:8f:d9:d8:a9:fd:98:c0:a5:4e:26:5e:cb:d9:
33:03:42:2e:1a:26:bc:4e:4b:6e:ba:d3:4b:26:39:4e:17:9c:
98:cb:bc:47:04:dc:c1:8b:68:4b:05:86:3f:6c:07:88:bd:b1:
84:69:f8:9d:42:e5:2f:21:80:59:13:89:6b:22:12:ca:bc:2e:
93:0b:dd:1f:55:32:7f:63:23:46:bd:d4:f4:12:8e:8f:60:67:
98:5c:2d:cc:bd:e0:ec:2c:9e:88:96:86:d7:b6:d0:61:e9:d8:
04:61:c0:81:68:0f:29:04:49:6d:28:f3:16:3f:83:97:e8:16:
c1:49:b7:8f:0f:b0:9b:f9:ad:c9:d9:95:e3:36:0b:88:d7:7e:
79:76:f4:fe:72:d0:02:8c:4b:cb:11:c8:67:d0:b3:71:cf:24:
15:76:fa:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:51:18 2025 by rpki-client