Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/bV2b6lXcDB9ps09XH9Bej1kSXrw.roa
File: bV2b6lXcDB9ps09XH9Bej1kSXrw.roa (raw, json)
Hash identifier: 5RxlbNDL/sM/9fqYtHbAUaIN+Fnf40FAUuOAQ2f+Zhg=
Subject key identifier: 6D:5D:9B:EA:55:DC:0C:1F:69:B3:4F:57:1F:D0:5E:8F:59:12:5E:BC
Certificate issuer: /CN=59e4d6fab77ac779f49bf6fc8ab81e23ad467576
Certificate serial: 0194F75DBBEDFCDE356D4DAF3E5863083050
Authority key identifier: 59:E4:D6:FA:B7:7A:C7:79:F4:9B:F6:FC:8A:B8:1E:23:AD:46:75:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WeTW-rd6x3n0m_b8irgeI61GdXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/bV2b6lXcDB9ps09XH9Bej1kSXrw.roa
Signing time: Tue 11 Feb 2025 23:35:02 +0000
ROA not before: Tue 11 Feb 2025 23:35:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59787
IP address blocks: 62.233.41.0/24 maxlen: 24
185.31.156.0/22 maxlen: 22
185.31.156.0/24 maxlen: 24
185.31.157.0/24 maxlen: 24
185.31.158.0/24 maxlen: 24
185.31.159.0/24 maxlen: 24
185.90.56.0/22 maxlen: 22
185.90.56.0/24 maxlen: 24
185.90.57.0/24 maxlen: 24
185.90.58.0/24 maxlen: 24
185.90.59.0/24 maxlen: 24
185.204.111.0/24 maxlen: 24
185.248.35.0/24 maxlen: 24
2a00:bc20::/32 maxlen: 32
2a05:df40::/29 maxlen: 29
2a0c:c2c0::/29 maxlen: 29
2a10:7b40::/29 maxlen: 29
2a10:a4c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 12 Feb 2025 10:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f7:5d:bb:ed:fc:de:35:6d:4d:af:3e:58:63:08:30:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59e4d6fab77ac779f49bf6fc8ab81e23ad467576
Validity
Not Before: Feb 11 23:35:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d5d9bea55dc0c1f69b34f571fd05e8f59125ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a0:df:69:8c:79:6b:9f:ac:13:9c:73:43:3e:
2b:03:99:8d:11:d9:2b:57:8b:4f:df:62:4d:fc:06:
cf:a8:6b:71:f3:bf:2c:a7:a7:91:9b:96:b5:02:c3:
73:c7:c0:9b:69:56:bd:1e:3e:3c:c5:08:c4:2c:1d:
3e:47:f1:33:b5:ea:5a:f3:aa:59:24:3e:ad:a8:af:
f9:b2:81:3f:b4:3b:0f:1f:55:5f:5e:c0:9c:1a:f3:
7a:a9:70:32:41:58:b3:d5:3e:75:de:5c:83:50:aa:
3c:0c:e8:c1:b4:a3:db:0e:1d:71:b0:78:8b:44:8c:
4a:b1:78:0b:44:14:42:9a:aa:c9:40:4f:82:cd:a4:
fa:2e:20:54:d9:67:c6:b7:62:fd:eb:8e:0b:3b:ec:
9f:da:70:08:55:d1:34:2e:7e:34:30:54:44:2e:29:
fe:32:5e:e0:bb:e7:3f:b8:80:c7:1a:b6:67:ca:0f:
51:d3:dc:57:53:4d:45:3d:5f:d8:30:77:b4:94:9c:
a7:ba:d6:14:de:b2:32:87:a2:e1:94:76:5a:5a:5c:
ea:6d:8b:f9:d0:86:d2:d5:41:c0:a9:f1:67:b8:20:
d6:c8:a7:ac:70:65:12:48:a7:19:5e:94:fc:5e:63:
12:5e:8c:fe:0f:75:e9:29:f5:fe:c3:92:dc:86:04:
43:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5D:9B:EA:55:DC:0C:1F:69:B3:4F:57:1F:D0:5E:8F:59:12:5E:BC
X509v3 Authority Key Identifier:
keyid:59:E4:D6:FA:B7:7A:C7:79:F4:9B:F6:FC:8A:B8:1E:23:AD:46:75:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WeTW-rd6x3n0m_b8irgeI61GdXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/bV2b6lXcDB9ps09XH9Bej1kSXrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/WeTW-rd6x3n0m_b8irgeI61GdXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.41.0/24
185.31.156.0/22
185.90.56.0/22
185.204.111.0/24
185.248.35.0/24
IPv6:
2a00:bc20::/32
2a05:df40::/29
2a0c:c2c0::/29
2a10:7b40::/29
2a10:a4c0::/29
Signature Algorithm: sha256WithRSAEncryption
54:58:41:1d:0f:ee:a2:ae:53:0b:6e:fd:46:01:2a:a8:de:91:
78:89:b7:a8:72:00:93:ff:bb:51:68:f2:63:c4:80:40:2e:58:
0c:b8:9f:e8:53:b3:bf:af:40:4b:a5:b1:a0:af:3d:d2:90:db:
b7:84:93:13:70:59:07:23:be:1e:32:64:f6:68:6f:4c:c9:dd:
69:7a:2b:3e:40:f3:61:e4:ef:0c:8f:23:9b:64:7a:7b:ab:c9:
fd:8a:fd:df:59:c4:b2:7a:80:96:69:07:b8:ef:45:c4:94:6d:
3e:fa:28:c5:e9:46:26:f9:89:9e:85:cd:71:fc:fb:95:8c:c6:
90:b0:ab:51:3a:14:eb:b4:24:86:0f:71:7f:04:5c:89:ad:d0:
fd:28:59:9d:a8:3c:3a:ad:d7:6f:cc:f8:31:10:42:0c:e5:ff:
ad:54:1d:54:05:5b:33:43:09:ec:7c:9a:96:c6:1a:ad:63:2d:
ec:5e:89:d1:b2:26:08:0c:c0:e3:c4:ee:e1:92:6c:d5:e1:86:
42:70:05:c8:4d:0b:dd:e2:de:40:4b:3e:82:f7:96:88:76:60:
9f:e5:04:28:a4:27:05:ff:7d:28:f1:18:0d:90:80:e1:d0:18:
56:f7:6e:6e:63:a3:96:b3:ad:33:79:7c:fc:b2:f7:07:53:08:
14:b3:bc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 11:50:23 2025 by rpki-client