Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/W1T-jySmF9YaDfYZKHxVFyj7Msk.roa
File: W1T-jySmF9YaDfYZKHxVFyj7Msk.roa (raw, json)
Hash identifier: qSDxKUfF/UduVvf33JUFjgJgo4ilPHh6zQN1nyItpzw=
Subject key identifier: 5B:54:FE:8F:24:A6:17:D6:1A:0D:F6:19:28:7C:55:17:28:FB:32:C9
Certificate issuer: /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Certificate serial: 0194A7C4E70B4ADB1ED6A43090A5D4311DD1
Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/W1T-jySmF9YaDfYZKHxVFyj7Msk.roa
Signing time: Mon 27 Jan 2025 12:38:06 +0000
ROA not before: Mon 27 Jan 2025 12:38:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210099
IP address blocks: 85.117.236.0/24 maxlen: 24
85.117.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Jan 2025 19:53:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a7:c4:e7:0b:4a:db:1e:d6:a4:30:90:a5:d4:31:1d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Validity
Not Before: Jan 27 12:38:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b54fe8f24a617d61a0df619287c551728fb32c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:39:77:44:02:dc:e1:b7:b7:b3:13:44:46:10:
1f:86:82:ea:dc:d9:49:58:5b:e2:a9:36:68:5b:7e:
bd:07:8b:a9:de:68:50:ad:c3:2c:a1:83:9c:b3:92:
44:5b:3c:d0:26:11:57:7b:d2:c3:c1:a8:51:e5:6d:
4d:cf:2a:42:46:90:26:dd:86:c8:4a:b3:ad:0c:b1:
53:e9:fe:d4:8f:ee:b2:f4:9f:fc:f4:f6:b8:e2:39:
d8:b9:44:8b:6c:6f:06:72:4f:e6:4f:d0:34:a6:29:
d2:09:2f:54:fd:5c:45:d9:83:8f:da:1b:31:6f:6e:
ca:3b:60:29:8c:9f:3e:03:30:00:cc:5f:9a:6b:23:
e3:c5:68:a2:f4:6e:1e:62:22:25:aa:93:35:a3:49:
7d:b9:34:1b:1a:59:59:72:c6:c1:00:63:ba:ce:e0:
a5:d9:26:ac:cf:da:90:b5:c5:ff:d6:89:81:1d:d1:
60:94:9a:0f:98:55:b4:f2:e5:f9:49:df:ed:cc:2b:
a0:b3:81:6b:d1:98:bc:3f:6a:73:c7:49:6f:15:86:
4a:71:b5:44:a0:2f:bc:01:78:6c:a0:d7:26:a2:d8:
49:99:8f:5a:6a:d8:5c:ba:1d:4d:d4:9c:03:20:b9:
21:c0:36:fd:72:47:cd:6d:45:b5:ee:38:fd:03:a3:
94:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:54:FE:8F:24:A6:17:D6:1A:0D:F6:19:28:7C:55:17:28:FB:32:C9
X509v3 Authority Key Identifier:
keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/W1T-jySmF9YaDfYZKHxVFyj7Msk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.236.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:42:67:80:8f:2b:53:8d:47:0a:52:31:d6:ef:8c:c7:dc:1d:
10:bf:40:db:10:25:9b:b9:df:b6:15:41:08:a6:50:5d:20:85:
96:79:b7:6e:2b:ab:d0:91:c8:74:73:b5:54:73:45:8f:ef:11:
1d:64:1a:ce:24:f9:79:93:61:21:01:83:d5:ac:62:78:a7:4c:
80:30:14:26:14:93:d7:01:a5:7d:ae:52:6d:c6:90:90:6b:88:
16:aa:2c:ee:a6:f6:90:b8:ae:97:70:1d:3e:4e:e9:03:d2:6e:
70:15:84:49:be:9b:5c:8b:07:2b:65:28:39:65:cb:9f:d7:a8:
21:a2:45:17:b7:8c:46:b7:e7:61:20:60:fc:18:67:ef:35:ca:
59:b2:be:b9:50:2f:62:20:9e:b1:84:e4:d6:7f:f5:d7:cd:01:
f8:96:a5:ad:57:45:bb:7d:03:4f:1a:e1:98:7e:9a:09:4f:0a:
f5:36:03:64:93:1a:53:0e:d5:c0:02:75:4a:94:ae:59:9d:21:
06:6d:9b:01:ba:35:a4:4b:2c:41:77:3f:87:a6:e6:1d:9a:d4:
c6:13:31:ae:2f:a2:a5:22:66:dc:b3:84:36:48:ff:cf:e7:a3:
b8:a6:8f:61:ef:b4:e4:0b:80:7e:ed:01:a4:ad:4d:a0:f3:14:
a3:44:ae:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 23:34:15 2025 by rpki-client