Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/w6e-Q1fqNiD_bFk9kTleQxenMDg.roa
File: w6e-Q1fqNiD_bFk9kTleQxenMDg.roa (raw, json)
Hash identifier: zfz6pG8JD6b0T/ci8MD8jFc0da6LSGEbCt/JNADBdss=
Subject key identifier: C3:A7:BE:43:57:EA:36:20:FF:6C:59:3D:91:39:5E:43:17:A7:30:38
Certificate issuer: /CN=74a59b7fb4e034f67775f2875efbfc9eff247e8e
Certificate serial: 018FB8EA6F2FCDB86B51EE82371DDB7B722B
Authority key identifier: 74:A5:9B:7F:B4:E0:34:F6:77:75:F2:87:5E:FB:FC:9E:FF:24:7E:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/w6e-Q1fqNiD_bFk9kTleQxenMDg.roa
Signing time: Mon 27 May 2024 07:18:42 +0000
ROA not before: Mon 27 May 2024 07:18:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210318
IP address blocks: 94.156.75.0/24 maxlen: 24
185.37.232.0/24 maxlen: 24
185.37.233.0/24 maxlen: 24
185.37.234.0/24 maxlen: 24
185.37.235.0/24 maxlen: 24
194.55.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 May 2024 08:10:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b8:ea:6f:2f:cd:b8:6b:51:ee:82:37:1d:db:7b:72:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a59b7fb4e034f67775f2875efbfc9eff247e8e
Validity
Not Before: May 27 07:18:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3a7be4357ea3620ff6c593d91395e4317a73038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d2:bd:c2:71:4d:91:15:96:2f:c9:4f:3c:30:
12:63:d0:74:3d:4b:d1:7b:82:1a:ed:e0:52:78:d9:
28:ae:38:d5:68:2a:14:20:45:32:d6:1e:de:b6:93:
81:96:3e:dd:52:1c:04:2b:da:1d:1c:02:7c:03:1a:
fe:ba:18:2d:8e:88:c2:30:6f:2b:1d:0d:5a:83:fa:
47:2d:56:63:65:f5:d1:c1:cb:91:bf:4c:9b:95:ed:
f8:a8:b4:b8:1f:36:d4:57:b9:95:4d:4f:3d:1b:46:
96:b7:d3:58:7a:ee:f0:5d:9d:2f:38:85:a2:a8:47:
ad:5a:66:ba:d8:42:85:ed:df:50:52:39:45:c8:a3:
ee:89:86:a2:c3:a5:10:77:10:9d:11:15:35:b2:16:
30:38:cb:d1:7e:88:d1:56:6e:6a:db:bd:22:d4:5e:
e5:25:8a:07:e3:be:55:ab:b7:06:a5:e1:42:94:6e:
8a:a5:13:05:ee:f9:5b:c0:6b:a7:09:51:48:0e:42:
3c:88:c6:cb:ad:70:32:10:a7:d4:a5:68:88:ed:ef:
b0:da:d4:ac:23:5a:58:cb:83:af:c9:74:43:60:f2:
2f:25:35:b0:e2:c2:68:75:dd:9a:3b:f8:bd:26:46:
a8:c0:24:5f:87:7d:ab:a2:7d:14:24:bf:c8:9e:22:
33:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A7:BE:43:57:EA:36:20:FF:6C:59:3D:91:39:5E:43:17:A7:30:38
X509v3 Authority Key Identifier:
keyid:74:A5:9B:7F:B4:E0:34:F6:77:75:F2:87:5E:FB:FC:9E:FF:24:7E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/w6e-Q1fqNiD_bFk9kTleQxenMDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.75.0/24
185.37.232.0/22
194.55.187.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:56:23:e9:83:ae:a2:d3:ae:92:e8:0a:3a:7d:f0:fd:48:9f:
7b:66:d4:21:64:b9:ac:47:ea:79:4a:6f:ce:bd:91:4a:6e:70:
ec:1b:9c:b1:ee:b8:1e:01:19:83:8e:27:88:21:52:d4:47:9c:
21:43:ef:38:11:94:e2:b3:e6:be:44:01:e0:82:c4:9b:ca:b1:
f3:5d:c3:bd:ee:46:27:33:57:e0:df:1b:b1:52:bc:d6:a1:6c:
83:cb:f6:2d:45:e2:92:cd:6c:c3:4e:38:47:77:62:72:69:13:
df:89:d9:6b:d0:41:89:49:7d:cc:74:49:b4:a3:1d:30:fd:15:
79:b4:f6:09:15:68:4f:7d:82:7b:f3:23:7b:a1:f0:24:75:cf:
1a:91:ee:f8:ae:d7:05:29:80:61:d0:f6:a8:e8:96:10:50:77:
df:5a:a0:4e:f4:53:63:63:7f:d5:07:e2:62:b2:40:66:25:38:
80:f8:a3:7c:ed:68:e6:08:ee:1f:84:03:1d:2b:24:c7:36:9b:
fd:43:05:ce:ad:75:31:6e:8c:90:84:9b:bb:fb:ad:62:84:70:
c0:17:29:8f:93:5a:b0:f8:5c:47:92:17:33:fe:e2:81:e3:12:
71:6a:24:1c:a4:94:c8:de:65:19:d4:9c:8f:53:c8:f3:47:e0:
a3:ab:92:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:58:22 2025 by rpki-client