Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/Wdr_SkFuLN4GBL4ee-gy-Y4jZVc.roa
File: Wdr_SkFuLN4GBL4ee-gy-Y4jZVc.roa (raw, json)
Hash identifier: w/wPinp8Kvv7g5wlrw0ISmup7PyxK6QypVHK8dQ3JcU=
Subject key identifier: 59:DA:FF:4A:41:6E:2C:DE:06:04:BE:1E:7B:E8:32:F9:8E:23:65:57
Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Certificate serial: 018CC8DECC99A4267A59D644E37F6B57DDC6
Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/Wdr_SkFuLN4GBL4ee-gy-Y4jZVc.roa
Signing time: Tue 02 Jan 2024 06:31:33 +0000
ROA not before: Tue 02 Jan 2024 06:31:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39346
IP address blocks: 85.204.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:48:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:cc:99:a4:26:7a:59:d6:44:e3:7f:6b:57:dd:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Validity
Not Before: Jan 2 06:31:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59daff4a416e2cde0604be1e7be832f98e236557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ee:55:ec:ab:9d:9a:d2:5b:4c:fb:25:55:53:
bc:79:7b:c6:ad:1d:73:cd:3a:6d:a9:d2:fd:94:78:
cf:b3:88:9e:55:72:0a:35:99:a0:37:9f:33:86:d9:
31:41:9d:4a:35:5c:b6:06:97:1d:0e:d6:0e:26:8f:
14:0c:7a:23:94:7e:51:24:20:37:fc:dd:a8:74:1d:
01:16:3a:6e:43:0c:68:dc:ea:03:7f:8e:13:21:8a:
1b:f8:5e:b6:3c:15:61:ae:b5:72:fa:7e:b6:a7:04:
ee:1c:8c:4f:e5:57:0a:c4:20:51:9e:a6:18:ba:45:
a5:ee:e6:95:bf:9d:78:34:e2:0c:5c:4a:6c:0b:6f:
4b:cc:71:30:d7:d1:62:3c:21:7c:85:0b:a7:e9:cc:
27:26:fb:ef:ac:a1:35:9d:8a:7f:b1:24:17:5c:dc:
12:fa:9c:fb:79:2e:b2:b9:1d:67:00:0b:dd:9b:7f:
38:9e:47:8b:2a:17:15:7f:52:04:01:ae:c0:36:99:
8d:f6:74:5a:7a:89:34:07:22:04:b4:76:93:26:71:
85:33:b2:eb:5c:1e:cb:9a:71:0a:72:40:9c:71:74:
3d:ce:41:8b:1c:b5:e6:90:b0:b1:b0:ac:11:9e:02:
fe:86:86:86:a4:f7:02:31:8f:79:30:55:05:35:ce:
1d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DA:FF:4A:41:6E:2C:DE:06:04:BE:1E:7B:E8:32:F9:8E:23:65:57
X509v3 Authority Key Identifier:
keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/Wdr_SkFuLN4GBL4ee-gy-Y4jZVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.139.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:c9:22:02:5c:88:8b:bc:76:41:64:65:fa:44:be:a7:83:d5:
b9:e8:f0:b9:f9:91:7c:c7:d8:71:c6:99:54:85:af:51:b7:dd:
2b:8b:30:87:f8:7e:5c:d2:c5:14:7f:53:dd:cb:9d:e2:72:5f:
74:34:f9:82:b7:f9:49:de:be:2c:e2:23:f0:52:dd:96:75:c4:
00:a7:9b:90:74:dd:9e:10:d4:24:a6:24:85:70:ad:85:9e:c5:
ae:84:ce:d1:b5:08:c7:f1:ba:b9:f8:0d:21:c3:c6:b3:a5:f8:
8e:77:c2:42:cc:d2:9f:6e:85:8c:36:ce:42:9f:3d:2c:25:3a:
d3:61:e8:bc:65:50:d5:26:50:84:b0:32:ef:45:f5:ac:27:ff:
71:3a:f4:ab:28:58:be:b8:0b:ac:6d:a5:1b:76:77:8b:ad:c1:
c6:f5:51:e1:e8:03:57:fd:58:49:da:1f:aa:4a:38:f2:89:ed:
b8:e1:a7:84:c4:d5:b1:ba:c0:1c:59:1b:82:6b:2d:09:0c:54:
0b:5b:64:4c:11:4a:0c:07:96:ce:87:c5:f9:19:a6:cb:45:d9:
c6:61:21:24:8c:c4:59:ad:e9:fa:3a:c0:54:b9:e4:71:a5:14:
a4:01:fa:a8:93:37:f1:ee:ac:19:ec:41:47:7a:58:66:27:f8:
50:5c:1f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:31:27 2025 by rpki-client