Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/WR0fO1-gSXLb7rF3Dz6czaMxzkU.roa
File: WR0fO1-gSXLb7rF3Dz6czaMxzkU.roa (raw, json)
Hash identifier: fP1IS/JN4A+LcZKtLWXl/RsAa0fp+NNxh8PwC0Zorxk=
Subject key identifier: 59:1D:1F:3B:5F:A0:49:72:DB:EE:B1:77:0F:3E:9C:CD:A3:31:CE:45
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 01961F4A673A6ED4F51F0AFF6165F417F41A
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/WR0fO1-gSXLb7rF3Dz6czaMxzkU.roa
Signing time: Thu 10 Apr 2025 10:41:31 +0000
ROA not before: Thu 10 Apr 2025 10:41:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.186.180.0/22 maxlen: 24
82.163.52.0/23 maxlen: 24
92.114.40.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Apr 2025 10:42:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1f:4a:67:3a:6e:d4:f5:1f:0a:ff:61:65:f4:17:f4:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Apr 10 10:41:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=591d1f3b5fa04972dbeeb1770f3e9ccda331ce45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:32:6c:56:5a:45:15:17:67:8d:00:a6:04:e1:
60:67:b0:03:58:76:c9:89:fc:cb:aa:45:7c:40:e4:
fc:41:4b:27:aa:81:f3:ef:7d:2d:eb:58:48:43:4f:
be:85:1d:26:b6:40:e8:3e:8b:ca:69:8b:c0:bf:07:
f5:42:47:f5:27:e9:2b:e7:63:39:39:45:8e:50:8a:
1f:0e:d9:96:76:09:41:58:ae:5b:93:17:c8:30:3c:
90:0c:7b:06:b6:ba:7e:17:a4:89:50:fd:68:b5:f6:
a1:bd:11:dc:f8:fa:be:dd:8a:89:19:99:a6:34:55:
7b:05:80:46:df:f0:3a:4f:71:dd:e8:eb:54:87:c3:
f1:ac:f1:51:a6:b7:03:35:94:a1:bb:db:d2:8e:b6:
6e:dd:7c:64:2c:7d:c8:09:1b:73:29:dd:c4:af:db:
d6:1c:22:1f:56:ca:06:14:7f:d2:6a:4f:35:c9:31:
6f:d4:1f:a8:f8:e9:78:f8:4e:d3:82:8b:6f:08:0c:
17:c2:13:53:41:71:5c:1d:46:21:b0:3d:f7:9e:ed:
16:8e:45:50:42:eb:ec:c9:82:6e:6d:26:97:67:cb:
87:5e:06:de:fe:6c:cc:d3:f5:5d:bf:e6:93:28:06:
93:ee:b8:12:e3:4e:11:71:4a:c8:c6:ea:fc:d4:6d:
1b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1D:1F:3B:5F:A0:49:72:DB:EE:B1:77:0F:3E:9C:CD:A3:31:CE:45
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/WR0fO1-gSXLb7rF3Dz6czaMxzkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.180.0/22
82.163.52.0/23
92.114.40.0/22
Signature Algorithm: sha256WithRSAEncryption
72:79:47:cd:4d:02:a9:e0:22:0c:0c:1b:40:50:45:91:da:76:
e0:e2:2d:f4:0c:1a:c2:43:21:0c:9d:d4:03:25:67:aa:b2:e0:
72:a6:08:b9:af:30:d3:f5:11:c4:31:0a:26:b7:53:81:12:82:
a3:41:2b:34:ca:40:09:88:86:2a:25:33:96:e7:4c:b9:bf:56:
fd:46:05:fa:d5:dc:b3:27:be:e5:a0:98:78:88:25:10:39:5d:
5d:bf:99:47:f8:c7:2d:6a:a4:ff:b7:1e:e4:83:9d:3b:fc:ed:
02:2d:6b:a9:15:77:d6:cc:29:ab:9c:14:fc:8f:26:8e:57:54:
c9:ed:d5:53:a3:6f:f5:ab:41:60:be:92:57:7c:c0:9a:66:95:
e8:1d:69:f8:c4:25:5c:c0:7f:e5:39:62:4f:54:c5:cc:a6:82:
c3:66:e3:f3:18:b2:f7:f3:71:e4:dc:db:37:32:9c:56:8c:ee:
38:f6:73:e1:cd:a3:4b:b7:60:65:b0:bb:50:c7:64:e4:94:d9:
4e:ed:7b:53:6a:cf:1c:c7:ff:5b:96:56:4b:1f:2e:ef:fb:cd:
61:7c:de:b5:79:d2:b9:b5:ac:4d:26:00:8d:c2:fc:be:27:b9:
52:d4:87:42:a3:68:cd:d4:28:06:bd:9c:39:ce:10:20:a2:87:
a4:0b:99:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:20:28 2025 by rpki-client