Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/WBbZav-HfnwGJiHAGzqjCTAay94.roa
File: WBbZav-HfnwGJiHAGzqjCTAay94.roa (raw, json)
Hash identifier: HEWApzJl2l++9QvfMVNqh0Wh7sLxnE4uwOEWW4sQjVg=
Subject key identifier: 58:16:D9:6A:FF:87:7E:7C:06:26:21:C0:1B:3A:A3:09:30:1A:CB:DE
Certificate issuer: /CN=182241c2a4cd1b08bf5ba5412d491c49c8eb878d
Certificate serial: 0194258EE3F1330DE109A2426C33B4C730E9
Authority key identifier: 18:22:41:C2:A4:CD:1B:08:BF:5B:A5:41:2D:49:1C:49:C8:EB:87:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GCJBwqTNGwi_W6VBLUkcScjrh40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/WBbZav-HfnwGJiHAGzqjCTAay94.roa
Signing time: Thu 02 Jan 2025 05:48:28 +0000
ROA not before: Thu 02 Jan 2025 05:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206957
IP address blocks: 91.222.140.0/22 maxlen: 22
91.222.140.0/24 maxlen: 24
91.222.141.0/24 maxlen: 24
91.222.142.0/24 maxlen: 24
91.222.143.0/24 maxlen: 24
176.112.72.0/21 maxlen: 21
185.79.240.0/22 maxlen: 22
185.79.240.0/24 maxlen: 24
185.79.241.0/24 maxlen: 24
185.79.242.0/24 maxlen: 24
185.79.243.0/24 maxlen: 24
195.128.135.0/24 maxlen: 24
195.246.224.0/23 maxlen: 23
195.246.224.0/24 maxlen: 24
195.246.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Feb 2025 10:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:e3:f1:33:0d:e1:09:a2:42:6c:33:b4:c7:30:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=182241c2a4cd1b08bf5ba5412d491c49c8eb878d
Validity
Not Before: Jan 2 05:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5816d96aff877e7c062621c01b3aa309301acbde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7b:2d:67:c4:b8:d4:9d:f5:e9:72:9d:9e:d8:
86:30:ac:38:ad:52:65:3b:06:c2:c1:94:00:05:0a:
0a:55:b1:3d:6e:10:43:87:79:43:b8:a7:a0:84:23:
e5:4d:b3:41:27:12:76:1b:cb:dc:3c:75:04:f8:53:
fc:92:26:d8:89:cf:7b:f6:36:aa:93:c1:03:6f:b9:
99:f0:4d:8e:0b:ca:5b:48:3e:8c:a0:3d:06:41:00:
27:33:12:63:36:ff:37:b0:61:3c:45:b7:e3:30:ec:
53:65:16:18:a2:8a:3b:ec:ea:f3:c0:55:b8:f9:60:
da:f6:ca:de:56:0b:58:59:0b:6a:67:21:43:ea:af:
15:2d:1b:a4:ea:a6:c3:08:70:a0:7c:4d:44:fb:1d:
ce:eb:93:31:ac:b8:23:c6:9a:c4:90:11:77:cc:b3:
ca:f2:f4:c1:92:d2:7a:31:13:ee:74:1f:c9:7b:51:
84:5a:26:7b:48:e7:d5:4e:42:b5:28:73:a7:48:9a:
97:36:c5:aa:14:47:bc:cf:af:17:3c:61:e7:39:12:
49:f2:e2:37:13:5b:1b:75:45:89:6e:42:93:8c:2e:
7e:06:d1:01:0d:e2:93:49:69:d8:43:da:8e:85:a6:
af:49:61:d2:79:31:d4:3b:46:2c:af:9c:c7:01:62:
24:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:16:D9:6A:FF:87:7E:7C:06:26:21:C0:1B:3A:A3:09:30:1A:CB:DE
X509v3 Authority Key Identifier:
keyid:18:22:41:C2:A4:CD:1B:08:BF:5B:A5:41:2D:49:1C:49:C8:EB:87:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCJBwqTNGwi_W6VBLUkcScjrh40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/WBbZav-HfnwGJiHAGzqjCTAay94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.222.140.0/22
176.112.72.0/21
185.79.240.0/22
195.128.135.0/24
195.246.224.0/23
Signature Algorithm: sha256WithRSAEncryption
26:75:ae:cb:ca:c2:e5:51:8c:b9:fa:e3:f4:d4:da:ac:2c:87:
ff:cb:35:b6:99:c2:fe:1d:a2:61:64:27:33:ff:43:12:08:e9:
db:e3:0b:74:bc:d4:60:0b:4f:1b:03:50:d9:54:e9:56:7e:7c:
e4:1e:ab:c9:cf:3f:15:41:04:d2:62:ed:9d:0b:c9:15:52:3c:
0e:34:f5:98:e6:11:7d:d7:c8:f3:42:14:4d:4f:6f:57:67:77:
f7:cf:02:45:3f:da:12:85:04:70:db:3c:de:37:0a:e4:8d:73:
0d:cd:4b:f2:70:36:35:86:9a:1c:1f:1c:ec:29:e0:50:51:58:
a5:dd:4e:01:41:e3:91:6c:c3:36:d6:3c:7e:7e:c0:51:9a:01:
e3:4f:98:4a:6d:8a:46:e9:71:25:40:66:ac:e0:57:a2:32:00:
22:fc:a5:61:c8:d9:b3:f0:dd:78:35:73:30:c4:20:6a:b1:50:
82:bc:f5:a8:79:44:89:57:bd:58:0f:85:68:b0:4d:9f:5a:74:
8e:80:60:31:0b:fd:84:c1:98:0e:75:65:1b:20:75:83:a2:f5:
83:64:78:07:3e:34:9e:78:f7:c3:dd:94:3d:1d:2c:82:9a:15:
2c:87:94:55:e0:92:07:e2:66:90:34:47:ce:1d:64:91:e2:d0:
9f:f4:f3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:42:25 2025 by rpki-client