Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/W-Bb76OX4oSix5BYAaOBWyt2yWQ.roa
File: W-Bb76OX4oSix5BYAaOBWyt2yWQ.roa (raw, json)
Hash identifier: sFRWx8dp+cubVUHjk3d67ANsGSPx8DGxdYcJdm38dg4=
Subject key identifier: 5B:E0:5B:EF:A3:97:E2:84:A2:C7:90:58:01:A3:81:5B:2B:76:C9:64
Certificate issuer: /CN=ffb2627672877d0f6de9bc4e7e186eedd1356110
Certificate serial: 0196DA3073C9EE7461422323B9D06B714021
Authority key identifier: FF:B2:62:76:72:87:7D:0F:6D:E9:BC:4E:7E:18:6E:ED:D1:35:61:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/W-Bb76OX4oSix5BYAaOBWyt2yWQ.roa
Signing time: Fri 16 May 2025 17:42:10 +0000
ROA not before: Fri 16 May 2025 17:42:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216341
IP address blocks: 185.147.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Jun 2025 18:16:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:da:30:73:c9:ee:74:61:42:23:23:b9:d0:6b:71:40:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffb2627672877d0f6de9bc4e7e186eedd1356110
Validity
Not Before: May 16 17:42:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5be05befa397e284a2c7905801a3815b2b76c964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e6:b0:ae:c3:6d:a8:bd:44:bf:92:f5:85:d5:
6f:6b:a4:50:ee:15:62:e4:0c:f6:53:33:1c:af:a6:
bd:a9:b5:d0:de:9a:a9:28:74:54:75:27:f5:33:77:
14:46:0d:37:0f:59:b5:40:27:06:cc:66:59:db:ce:
33:c1:b4:e9:24:04:70:8d:8d:f0:0a:e5:0e:6c:35:
42:5c:ad:cb:57:2f:df:22:b8:a4:c2:6d:e5:0e:9e:
c1:7b:7d:94:ae:8d:e1:0c:22:f1:8f:7d:fd:51:98:
fe:92:e0:3d:78:2f:70:da:a3:65:91:91:f4:65:5f:
c5:10:38:02:a4:a3:97:e9:02:43:f5:74:43:da:c4:
1a:e5:67:6b:dc:89:39:75:50:0d:36:16:9e:37:c5:
aa:eb:b5:30:07:79:f6:e0:b9:66:7e:a7:56:23:f9:
ff:a2:b4:11:ca:ca:86:71:3c:b5:b7:e3:1a:34:f5:
46:45:bf:b3:ac:80:d8:0b:56:2f:5a:54:9d:55:d8:
cb:71:09:77:58:08:b7:b7:1e:ef:e6:e1:d8:1b:b1:
a3:c6:03:ad:ab:7f:64:7d:1a:bd:4f:64:2b:eb:10:
b8:fa:30:0f:ca:12:98:2c:77:b8:8e:86:68:1e:6e:
b0:b0:2d:91:18:0e:5e:99:80:e4:bb:bd:3d:36:b0:
dd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E0:5B:EF:A3:97:E2:84:A2:C7:90:58:01:A3:81:5B:2B:76:C9:64
X509v3 Authority Key Identifier:
keyid:FF:B2:62:76:72:87:7D:0F:6D:E9:BC:4E:7E:18:6E:ED:D1:35:61:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/W-Bb76OX4oSix5BYAaOBWyt2yWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.124.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:7e:3b:96:d1:11:1b:50:5a:4a:80:de:da:23:8b:e4:1e:7e:
b5:57:05:62:76:4c:35:3c:67:45:34:77:4d:4a:a2:77:b6:cc:
6e:86:bd:b8:bb:d1:8f:19:02:6e:3c:6a:8c:60:3e:88:09:dc:
8c:5a:80:71:48:bd:dc:75:81:5e:5f:ec:82:e0:14:e2:22:31:
5b:5e:66:d2:f8:47:98:3e:2d:22:58:0b:80:b4:e2:10:1c:94:
6b:1b:0d:3a:af:00:bd:1a:03:fc:fc:d6:4b:d5:00:db:a8:fa:
ce:f3:2c:d2:0a:d7:54:57:6c:c3:ba:8c:51:a1:b9:4e:a2:87:
82:dc:96:d0:56:61:6f:c8:e2:ad:f5:64:42:66:1d:7c:99:03:
0c:15:c8:02:9a:8c:00:01:c1:0e:c9:c9:8f:3e:1a:e5:54:9e:
c9:82:59:15:2e:ee:60:a5:12:dc:6e:d9:3c:22:16:f8:1c:8d:
21:c5:d1:39:fc:fa:26:86:ba:1a:ac:bb:4e:bb:c1:f5:01:3d:
e0:e7:4e:9f:07:16:bd:d4:20:c2:f0:22:e5:fe:89:54:b1:45:
bf:48:27:b7:da:bb:d3:ad:9c:ff:39:fa:fd:3b:a2:87:86:71:
01:b2:4b:98:ea:ce:a8:c5:9b:35:7e:60:f5:e1:b3:88:e7:75:
5e:e3:f6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 17:45:12 2025 by rpki-client