Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/WoyVDNPgm8pbUi8SsgFPf71O3Xo.roa
File: WoyVDNPgm8pbUi8SsgFPf71O3Xo.roa (raw, json)
Hash identifier: NCb/v1EDxel/NgPWI0OBlmLhbRd10lVY6Qn9eNU5gKU=
Subject key identifier: 5A:8C:95:0C:D3:E0:9B:CA:5B:52:2F:12:B2:01:4F:7F:BD:4E:DD:7A
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01946B203ADACF261844E370E6D1B4CEE245
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/WoyVDNPgm8pbUi8SsgFPf71O3Xo.roa
Signing time: Wed 15 Jan 2025 18:01:01 +0000
ROA not before: Wed 15 Jan 2025 18:01:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12325
IP address blocks: 85.204.241.0/24 maxlen: 24
188.212.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Jan 2025 09:36:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6b:20:3a:da:cf:26:18:44:e3:70:e6:d1:b4:ce:e2:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 15 18:01:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a8c950cd3e09bca5b522f12b2014f7fbd4edd7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ae:13:1d:c0:68:3d:c5:dc:55:2e:32:60:88:
75:c0:2e:39:49:ca:4a:5a:7f:c6:3e:9b:16:08:d0:
cf:ce:f8:c7:26:48:c9:44:f5:a6:74:5c:89:74:96:
13:72:c7:68:42:0f:cf:9a:67:2f:52:47:89:90:d3:
62:d5:24:90:c4:58:6e:3f:6f:45:cf:4c:2b:35:fb:
b0:9a:ba:c5:e6:7c:b0:86:52:b3:2f:ac:51:16:4d:
c8:56:e9:a7:aa:ee:3b:15:12:33:95:8e:a0:eb:f2:
f5:c8:73:ba:a1:35:cc:84:14:20:e7:9a:44:88:16:
c0:8e:5e:47:2a:70:dd:42:5d:36:a1:ec:a6:c8:79:
e7:df:ab:fe:57:99:5f:9e:f0:bb:a4:28:83:96:14:
49:02:d1:8b:1a:e3:f4:d7:00:6b:0d:97:91:82:26:
00:38:34:75:84:e8:1d:7a:58:0f:e5:33:94:9e:c4:
df:57:ba:38:06:f7:64:bf:11:16:6f:ec:bc:21:f3:
6e:06:34:ee:e7:19:94:ce:dc:9c:b3:62:d0:b3:bb:
11:21:fb:fb:0e:04:3c:df:1a:d0:37:53:2c:c3:68:
06:b6:a9:57:b4:e2:13:be:cb:1b:7b:1d:93:49:dc:
eb:8d:5d:b1:0d:98:48:d2:89:fc:41:03:0b:98:e9:
9c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8C:95:0C:D3:E0:9B:CA:5B:52:2F:12:B2:01:4F:7F:BD:4E:DD:7A
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/WoyVDNPgm8pbUi8SsgFPf71O3Xo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.241.0/24
188.212.131.0/24
Signature Algorithm: sha256WithRSAEncryption
44:50:02:ad:be:94:84:62:da:66:63:8b:ef:1e:27:f6:ee:a1:
2f:5d:d7:b8:dd:80:91:a8:10:6c:40:67:49:ef:21:c5:ca:c1:
19:38:34:a0:48:d2:23:87:d1:a9:55:5c:82:49:66:70:2a:be:
16:df:ab:8d:35:5a:df:d0:d0:a0:df:35:da:fd:bc:c9:96:29:
d7:a1:c3:a5:87:aa:62:b3:6c:34:6f:e6:41:91:ab:0e:48:f4:
a1:c0:ad:fc:a0:7a:44:4e:a3:e8:3c:8d:bd:a5:37:5d:66:b9:
98:fc:55:67:5e:4d:34:df:be:09:85:98:08:2b:77:00:82:a9:
4c:47:48:e8:0c:f6:ab:4a:d4:ba:95:44:9b:1c:09:0c:34:b2:
e2:44:1b:e7:50:7d:52:ce:6a:2b:ed:2f:79:40:47:33:14:a8:
03:c1:67:07:39:3d:dc:ff:83:d7:19:ea:fe:8f:ab:52:83:c5:
b2:38:03:a6:b0:bb:90:18:99:72:25:e6:c0:e9:8b:26:59:b2:
57:20:29:c1:bd:38:22:e0:b5:80:dc:8c:25:39:3f:74:f9:9c:
e7:26:08:da:ad:3f:e8:65:19:7e:22:5e:14:85:8d:e4:ab:bb:
9c:26:0b:bd:b6:c0:b1:2e:cb:8e:0e:3f:35:b1:55:74:ab:10:
07:48:ca:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:06 2025 by rpki-client