Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/WqmTZ4m41hvTlRmViTPXUbHm2Sg.roa
File: WqmTZ4m41hvTlRmViTPXUbHm2Sg.roa (raw, json)
Hash identifier: xKBMJIJh5raQvQfdRg85d1f2E/l7FH4ANZ47yFzBD4E=
Subject key identifier: 5A:A9:93:67:89:B8:D6:1B:D3:95:19:95:89:33:D7:51:B1:E6:D9:28
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 019420D628A022F7E944058337E494D143D3
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/WqmTZ4m41hvTlRmViTPXUbHm2Sg.roa
Signing time: Wed 01 Jan 2025 07:48:13 +0000
ROA not before: Wed 01 Jan 2025 07:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 93.177.114.0/23 maxlen: 24
185.212.204.0/23 maxlen: 24
185.212.206.0/24 maxlen: 24
185.251.80.0/24 maxlen: 24
185.251.81.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Feb 2025 07:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:28:a0:22:f7:e9:44:05:83:37:e4:94:d1:43:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: Jan 1 07:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5aa9936789b8d61bd39519958933d751b1e6d928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fa:3c:80:1b:bf:b1:a4:4e:40:68:24:83:9e:
3f:4a:ce:f8:95:31:d1:de:66:bb:77:ed:fb:8c:e0:
bb:16:b4:dc:52:8e:66:57:5d:8b:04:4c:e2:9f:18:
4c:1c:ac:fc:fe:22:df:8f:64:ce:06:0a:bb:86:13:
de:75:9c:7e:11:52:7c:79:fe:cd:98:b1:21:67:ab:
23:f5:9e:28:26:37:7a:7e:46:98:82:1f:4d:6d:29:
85:98:d3:ba:a2:1a:18:49:3b:42:5a:ef:cc:af:0f:
c0:7f:df:06:11:58:c1:cb:b9:c0:f6:05:dc:ce:ba:
6a:36:79:2d:74:fd:84:00:1b:c6:64:e7:ce:77:4f:
44:c8:6a:9c:05:ee:e8:44:d3:fc:75:0e:a4:1b:e9:
ab:f5:b6:7f:4f:e9:30:d4:8b:03:b3:6f:26:75:75:
16:73:35:98:de:79:93:e8:6a:dd:0b:cd:50:8f:d1:
85:1a:89:bc:61:61:f5:34:2f:a8:2e:24:60:0f:b4:
78:7d:d9:9f:57:f4:5e:5d:1a:64:87:58:f3:e6:6a:
0e:c4:37:a4:0d:60:5c:8c:9d:39:05:06:14:1e:51:
e6:9e:61:f3:e6:8d:ae:28:35:26:41:1a:ed:cd:8c:
31:40:90:10:c6:6d:f0:b0:d3:30:78:f4:03:5d:04:
13:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A9:93:67:89:B8:D6:1B:D3:95:19:95:89:33:D7:51:B1:E6:D9:28
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/WqmTZ4m41hvTlRmViTPXUbHm2Sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.114.0/23
185.212.204.0-185.212.206.255
185.251.80.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:08:9a:69:e2:33:1a:33:89:0a:0b:93:2a:76:6e:03:c6:5b:
20:c1:18:cc:41:7a:0c:2b:a1:b4:c6:64:a4:58:9f:2e:ff:e2:
da:d4:47:7e:a4:1a:14:7b:92:bf:e9:af:05:db:16:2c:0f:8d:
e9:31:b9:4b:9f:06:39:72:bb:65:81:7a:7a:44:ee:29:32:e8:
43:fe:d8:19:c7:40:5b:d1:3e:39:f0:85:36:af:42:fc:b0:9a:
95:b6:2f:77:18:17:7b:34:98:95:1c:d7:17:44:e9:1d:d5:44:
1b:8e:48:bb:87:c6:36:87:31:8c:8d:56:3e:f1:bc:fd:34:96:
8a:55:71:29:1f:5a:a5:fc:3f:42:3b:dd:17:1f:9a:83:89:14:
8b:c1:eb:c0:a6:d3:fc:c3:12:ca:3c:71:51:91:89:1c:ad:e1:
20:67:b4:16:e8:66:b8:04:64:e1:e1:84:1b:de:36:96:eb:1e:
e9:25:a6:63:4e:bc:e4:fb:43:c0:7e:f7:7d:b2:26:0b:1f:70:
35:4c:ec:0f:89:82:75:17:35:5c:90:1d:86:07:19:1f:bc:f5:
55:8e:8e:92:25:d5:b4:ac:95:b2:07:4f:d6:8a:f9:4b:be:9b:
a0:bb:94:ac:8c:ec:4c:03:10:92:51:a9:39:b0:d0:0d:1a:1a:
eb:8d:b2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 16:48:55 2025 by rpki-client