Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/mWG-okM-fo1z93yqF5PE3-cqop0.roa
File: mWG-okM-fo1z93yqF5PE3-cqop0.roa (raw, json)
Hash identifier: 3G0a9OqK2l8+B77TK9L2b4ZADqAOD2sai6TlVFDtsjs=
Subject key identifier: 99:61:BE:A2:43:3E:7E:8D:73:F7:7C:AA:17:93:C4:DF:E7:2A:A2:9D
Certificate issuer: /CN=9052dec7b7617fe39c8550ee20c382201ab9af2a
Certificate serial: 018D041C2D59DCAD52B09A9F945A601A8FE2
Authority key identifier: 90:52:DE:C7:B7:61:7F:E3:9C:85:50:EE:20:C3:82:20:1A:B9:AF:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFLex7dhf-OchVDuIMOCIBq5ryo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/mWG-okM-fo1z93yqF5PE3-cqop0.roa
Signing time: Sat 13 Jan 2024 18:36:11 +0000
ROA not before: Sat 13 Jan 2024 18:36:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211492
IP address blocks: 5.8.249.0/24 maxlen: 24
2a06:f40::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:04:1c:2d:59:dc:ad:52:b0:9a:9f:94:5a:60:1a:8f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9052dec7b7617fe39c8550ee20c382201ab9af2a
Validity
Not Before: Jan 13 18:36:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9961bea2433e7e8d73f77caa1793c4dfe72aa29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6a:bb:b2:a8:40:e0:17:99:73:d6:03:ba:a8:
a8:e6:46:57:dc:c1:f4:26:ec:09:49:0e:e9:70:1a:
c0:eb:36:2e:5a:25:40:fb:23:36:23:55:fb:70:8e:
d7:dd:97:31:2a:53:fc:43:17:82:df:fd:55:7a:30:
42:a2:3c:fa:fe:9e:55:47:ea:71:fc:1d:4d:00:ad:
b5:98:72:d0:6c:92:b4:2e:6a:92:7a:9b:29:6b:46:
dc:0a:24:00:2c:28:47:2d:7b:44:58:a3:01:e6:fe:
44:de:c7:60:af:51:e9:56:6e:9b:1d:ff:68:b9:0f:
24:bf:e7:ed:f0:a3:a3:ef:40:7a:6b:97:4c:09:f2:
ec:4e:45:b5:62:3c:47:e5:b5:e7:be:a6:ea:7f:cb:
77:74:4b:f5:ba:80:a2:3f:d4:78:11:ee:64:81:4f:
4a:a0:e2:27:48:bb:e4:ba:75:a7:6f:be:a8:34:4a:
65:8d:ce:5b:ce:95:3b:49:19:f8:42:9d:bb:b5:e3:
ac:2b:82:5f:52:d9:7b:64:ae:7b:81:e7:1e:04:1e:
e8:74:58:dd:8d:ab:c8:c3:6a:60:4d:63:f1:ed:a5:
fd:11:20:46:54:39:77:c0:01:bd:c1:c9:74:c6:e6:
6c:ee:d0:b2:0d:4f:00:35:31:ab:d5:86:0c:1c:d1:
50:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:61:BE:A2:43:3E:7E:8D:73:F7:7C:AA:17:93:C4:DF:E7:2A:A2:9D
X509v3 Authority Key Identifier:
keyid:90:52:DE:C7:B7:61:7F:E3:9C:85:50:EE:20:C3:82:20:1A:B9:AF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFLex7dhf-OchVDuIMOCIBq5ryo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/mWG-okM-fo1z93yqF5PE3-cqop0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.249.0/24
IPv6:
2a06:f40::/29
Signature Algorithm: sha256WithRSAEncryption
a5:2d:36:66:ac:36:e8:87:f8:04:e0:b9:e9:cd:70:4a:97:d1:
2c:14:91:79:ba:79:4c:be:bc:08:28:aa:f9:94:9d:86:81:4b:
a3:4b:c7:d1:90:ed:55:c2:3b:25:53:ac:d8:89:86:48:73:6f:
53:49:66:02:69:ae:66:5b:0f:db:54:5c:b2:c1:b7:40:0c:07:
de:eb:b8:7c:79:dc:75:87:c7:2b:7e:bc:22:61:f0:43:a7:fb:
04:bf:f7:5f:e3:8f:02:0b:6f:76:c9:04:2f:ee:df:4d:39:aa:
fb:b4:c5:ba:05:09:53:e7:c5:99:46:19:7c:22:31:1e:57:09:
48:9b:4b:e2:6a:49:f5:1d:55:da:12:97:11:7a:f7:e9:2e:a2:
f5:61:12:a1:a0:6f:db:1e:90:22:89:4b:2b:fb:84:aa:a1:64:
e3:5b:1c:5a:73:03:60:e1:e8:b1:bf:b9:25:85:c3:48:94:03:
b9:4f:d2:d2:4a:02:57:1a:d3:2e:81:55:4c:69:b2:5f:e3:e7:
97:98:30:51:0d:68:e6:c5:59:bd:a4:74:4b:44:eb:9e:36:ad:
90:ce:a9:a8:ae:a8:75:a4:6f:93:65:0e:5c:65:77:25:61:5c:
1c:6a:df:9f:b8:93:c6:2a:1c:58:6a:a7:87:4d:a8:03:48:1a:
3a:21:d5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:32:45 2025 by rpki-client