Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/DWP2YYwop8Ty-tHQJowWnh-WPm4.roa
File: DWP2YYwop8Ty-tHQJowWnh-WPm4.roa (raw, json)
Hash identifier: YP0WVOcd334W2nTIMTpD7bKALOSh7X3d8+PmhNDQLgc=
Subject key identifier: 0D:63:F6:61:8C:28:A7:C4:F2:FA:D1:D0:26:8C:16:9E:1F:96:3E:6E
Certificate issuer: /CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Certificate serial: 019416B837B7E4553C486F8A664BF643CF9C
Authority key identifier: 77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/DWP2YYwop8Ty-tHQJowWnh-WPm4.roa
Signing time: Mon 30 Dec 2024 08:39:19 +0000
ROA not before: Mon 30 Dec 2024 08:39:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49711
IP address blocks: 91.215.176.0/22 maxlen: 24
91.220.250.0/24 maxlen: 24
176.118.152.0/21 maxlen: 21
2001:67c:57c::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:49:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:16:b8:37:b7:e4:55:3c:48:6f:8a:66:4b:f6:43:cf:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Validity
Not Before: Dec 30 08:39:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d63f6618c28a7c4f2fad1d0268c169e1f963e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:01:54:75:73:d7:0b:00:55:94:85:91:46:6a:
ad:1e:75:45:19:3d:28:41:ca:7a:a5:d2:47:32:a4:
ec:b8:a2:b0:5f:6b:6e:97:66:8b:f2:10:82:7b:fc:
29:1d:f1:dc:1b:11:cf:d4:28:b8:17:8a:f7:50:56:
0b:bc:df:31:c2:35:56:29:c8:54:70:1a:66:18:ff:
dc:0a:aa:62:0f:b9:60:1a:9e:86:c7:18:bb:36:7a:
83:01:bb:c6:51:b7:ec:ac:43:99:4e:be:2d:d6:a3:
02:3f:8c:3e:9c:66:fa:67:3d:2b:1b:b2:c5:74:39:
a4:76:e7:33:65:5d:82:0f:e9:b2:ae:99:8b:c7:a1:
24:10:c9:1c:3f:d6:53:be:e9:71:eb:46:6c:8b:30:
90:ee:19:2c:f9:df:3d:de:61:3f:ee:a0:ad:8f:c9:
76:42:9a:91:17:f4:16:b8:04:70:ba:65:07:cf:7d:
e0:7c:8c:3f:52:74:a8:5c:ed:2e:19:c6:f8:03:a2:
6d:d4:78:c8:a9:22:ff:10:ed:75:9a:a5:51:58:44:
a6:f1:17:16:c4:26:7b:ee:71:4a:bf:5c:fe:b5:78:
b9:f6:87:13:a5:a4:22:1b:82:0d:e7:1b:9d:ad:4f:
15:69:de:1e:4b:8c:71:cc:de:80:a1:6b:8c:b4:94:
84:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:63:F6:61:8C:28:A7:C4:F2:FA:D1:D0:26:8C:16:9E:1F:96:3E:6E
X509v3 Authority Key Identifier:
keyid:77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/DWP2YYwop8Ty-tHQJowWnh-WPm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.215.176.0/22
91.220.250.0/24
176.118.152.0/21
IPv6:
2001:67c:57c::/48
Signature Algorithm: sha256WithRSAEncryption
7d:45:73:49:c9:df:df:a3:65:90:26:4b:d7:70:a4:41:f3:79:
47:b9:b4:34:eb:a1:4f:5d:c4:66:8d:56:1e:18:c7:e4:47:29:
63:75:d6:99:da:40:39:2a:27:7c:e4:86:4a:16:60:6b:05:32:
8c:77:81:c7:d0:e7:dc:c3:71:a2:a3:e4:cf:85:c2:b8:ce:48:
3d:c1:3f:d2:04:2e:7c:c8:d8:83:58:e7:2f:dc:20:c0:93:50:
9f:b6:1b:5c:34:9a:59:a9:fd:90:50:f1:13:04:81:cb:24:21:
0c:46:1a:6c:6e:f6:93:8c:6d:8d:69:f6:99:84:b6:96:34:d7:
ec:be:1f:dc:f7:bc:78:97:7b:a4:96:23:66:54:21:6c:d3:7a:
dd:db:aa:94:b9:a4:46:ad:d1:66:a6:8b:19:cd:95:61:0e:ae:
be:7b:91:7d:56:80:b4:27:cb:1a:bb:cb:17:0f:73:62:40:25:
3e:80:d3:5b:70:ad:50:2b:a0:59:1c:9e:f0:bf:06:2a:62:21:
d9:cc:59:17:75:99:f9:7e:db:e8:af:af:fc:2d:55:ab:8b:d2:
31:7e:89:c3:dc:34:62:fd:0d:7f:2e:c0:46:1b:b1:ba:b0:98:
4d:b9:c8:a2:04:c4:a3:6b:77:51:53:0f:87:fb:a6:53:dc:ad:
a8:e9:f4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:15:22 2025 by rpki-client