Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/Wjj8gOzg1da1b1CmP06pBBENHBA.roa
File: Wjj8gOzg1da1b1CmP06pBBENHBA.roa (raw, json)
Hash identifier: mWgkt+RIVXwEI8cF3WBZj7dRaqJifhXyEEqYZIkj2Qs=
Subject key identifier: 5A:38:FC:80:EC:E0:D5:D6:B5:6F:50:A6:3F:4E:A9:04:11:0D:1C:10
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 01960EF1CD2F9EF46EEC02068FE5690EC07A
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/Wjj8gOzg1da1b1CmP06pBBENHBA.roa
Signing time: Mon 07 Apr 2025 06:30:49 +0000
ROA not before: Mon 07 Apr 2025 06:30:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34837
IP address blocks: 85.15.12.0/24 maxlen: 24
85.15.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Apr 2025 09:44:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0e:f1:cd:2f:9e:f4:6e:ec:02:06:8f:e5:69:0e:c0:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Apr 7 06:30:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a38fc80ece0d5d6b56f50a63f4ea904110d1c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5e:55:12:f3:47:f8:3c:3b:0e:dd:d8:da:a2:
48:24:06:ba:5e:af:20:09:9f:74:8b:51:d0:28:c3:
32:fc:a5:e9:c7:08:03:8b:02:c3:92:15:d3:2e:ad:
2f:26:31:e4:b6:8a:9b:6c:da:d9:09:7c:77:30:17:
ea:cf:28:af:57:ce:33:ad:16:d1:86:8d:fe:b2:4f:
b4:7d:c8:94:25:e2:9a:5b:9b:98:73:cd:c2:f6:e6:
c9:b6:0e:10:96:d5:43:32:4a:f8:c3:1c:73:d0:fe:
43:61:43:e9:64:0f:09:b7:7e:91:8c:d9:a1:cb:c9:
11:92:d1:9f:b4:64:dc:c1:e5:9d:46:c3:ca:72:00:
3e:da:f3:d7:de:e8:87:58:2d:66:23:1c:dc:4c:a4:
0b:7f:43:fe:20:d3:56:6e:14:d3:db:61:a5:d3:26:
78:2b:6e:20:d7:f1:be:aa:8f:61:a6:b2:4f:38:12:
5c:38:d8:d7:df:ea:cc:d9:6a:a0:c2:91:cd:e2:71:
9e:5c:a4:05:63:b0:5f:08:6e:95:0f:24:4a:13:76:
23:30:59:d8:31:95:db:d5:a2:74:2e:a6:00:d9:37:
eb:13:2a:a8:2b:e1:64:3e:4c:22:69:76:37:70:a0:
73:e3:c1:20:23:da:9f:24:b9:67:26:31:08:8c:8f:
36:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:38:FC:80:EC:E0:D5:D6:B5:6F:50:A6:3F:4E:A9:04:11:0D:1C:10
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/Wjj8gOzg1da1b1CmP06pBBENHBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.15.12.0/24
85.15.25.0/24
Signature Algorithm: sha256WithRSAEncryption
16:1e:6e:0d:fb:67:68:b9:05:c3:a1:f5:9b:74:6f:bd:ab:d4:
33:f7:95:9b:44:8b:10:a7:9e:ae:85:a5:24:36:32:ec:db:1c:
84:27:a0:4b:9f:73:ac:61:e4:a8:80:c2:15:fa:41:94:a3:08:
87:23:08:0d:3c:41:07:62:ce:4d:e2:14:ca:ac:c5:87:3d:f6:
e3:77:fc:6a:14:82:5d:ed:d5:50:a8:80:34:8f:81:d2:66:d5:
39:4d:6d:9a:3d:a9:21:de:85:00:e1:0e:db:04:40:24:bd:7d:
8b:c0:51:30:e5:f1:a2:72:15:fc:7d:3b:59:f8:a1:79:ed:f4:
c9:38:10:87:f4:85:42:25:3c:0d:d0:15:cc:70:c6:12:23:4c:
4d:54:0a:b3:b1:37:17:c2:45:20:8b:61:d6:17:58:8c:38:86:
af:d9:2a:e5:de:56:f1:f7:7f:ef:20:a2:ca:88:23:c9:eb:e2:
fe:4f:ff:d0:e3:4d:79:e4:68:77:c0:35:02:1a:60:63:58:e3:
1f:06:45:0e:d6:52:e0:ea:62:88:6e:b9:67:5f:47:52:f6:63:
f9:f8:c9:8a:3b:36:95:28:85:fd:a7:63:f8:fa:04:08:9f:3f:
02:c1:5f:18:8a:6f:81:a5:fe:c8:c1:3f:3e:8c:79:ea:b3:df:
80:b4:29:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:12:14 2025 by rpki-client