Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/wbBa6kq84wlAZCi2sw9XVDGlU4Y.roa
File: wbBa6kq84wlAZCi2sw9XVDGlU4Y.roa (raw, json)
Hash identifier: ojHeuXjdy0HfY/N5u8dGFLgNKoSvLkC1MNOhG4aofk0=
Subject key identifier: C1:B0:5A:EA:4A:BC:E3:09:40:64:28:B6:B3:0F:57:54:31:A5:53:86
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01947911071F665CF39499E7B39C98367A8E
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/wbBa6kq84wlAZCi2sw9XVDGlU4Y.roa
Signing time: Sat 18 Jan 2025 10:59:06 +0000
ROA not before: Sat 18 Jan 2025 10:59:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204650
IP address blocks: 5.57.35.0/24 maxlen: 24
5.57.36.0/24 maxlen: 24
37.32.42.0/24 maxlen: 24
37.32.44.0/24 maxlen: 24
37.32.45.0/24 maxlen: 24
178.239.156.0/24 maxlen: 24
178.239.159.0/24 maxlen: 24
185.26.34.0/23 maxlen: 24
185.212.48.0/24 maxlen: 24
185.243.49.0/24 maxlen: 24
185.243.50.0/24 maxlen: 24
2a00:7040::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 25 Feb 2025 11:54:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:79:11:07:1f:66:5c:f3:94:99:e7:b3:9c:98:36:7a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jan 18 10:59:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1b05aea4abce309406428b6b30f575431a55386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a7:5b:5a:94:e9:f6:82:9f:23:7b:f4:30:ab:
ad:c7:f6:e5:b7:40:59:03:3c:10:86:0f:bc:d5:f5:
e2:87:2a:58:37:dc:8d:5e:a5:02:25:c5:1d:21:93:
72:e4:b5:5a:67:9c:31:16:36:b5:83:e2:47:b5:7f:
a3:07:d8:bc:f5:f2:6b:8e:2e:84:ff:bf:f6:3c:95:
cd:f4:40:3a:a4:60:25:94:93:ec:a0:35:ec:e2:58:
29:5e:8d:4c:02:9a:62:7a:d5:c3:05:29:3e:5f:dd:
f1:2a:b7:ed:98:dc:12:de:88:c7:6b:90:04:54:5e:
d1:30:63:81:b0:9d:c6:51:0f:bb:8f:58:33:9f:c2:
a6:d7:50:77:23:5f:e8:a0:23:69:2a:41:cc:b0:a6:
7a:f4:01:b0:e5:30:29:51:5c:d1:ca:eb:43:ce:b8:
34:2d:66:ac:af:58:30:1a:d1:7a:4e:3d:f3:11:51:
08:35:0a:16:ef:e2:7d:14:5c:02:a8:d7:cc:08:68:
44:7d:62:c3:0a:27:2c:4d:06:20:45:fe:71:ef:5a:
b7:a7:93:c5:57:11:e1:09:ba:e5:f0:af:e6:1a:be:
73:31:69:64:90:b6:14:ac:07:16:5d:ef:85:05:3c:
ff:45:80:f8:94:e6:14:33:0a:13:f6:af:b6:87:fa:
d1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B0:5A:EA:4A:BC:E3:09:40:64:28:B6:B3:0F:57:54:31:A5:53:86
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/wbBa6kq84wlAZCi2sw9XVDGlU4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.35.0-5.57.36.255
37.32.42.0/24
37.32.44.0/23
178.239.156.0/24
178.239.159.0/24
185.26.34.0/23
185.212.48.0/24
185.243.49.0-185.243.50.255
IPv6:
2a00:7040::/32
Signature Algorithm: sha256WithRSAEncryption
55:31:06:f5:ab:97:02:8a:44:47:15:62:15:2a:6b:56:67:e2:
44:7c:c0:8c:58:f8:f4:5a:16:d6:79:e8:ab:a3:41:d0:ed:c2:
68:96:db:39:1e:62:ef:82:14:4d:40:4f:74:a1:44:a8:19:5e:
b6:85:b0:10:86:9d:39:23:29:5a:55:11:b0:c0:30:b5:38:e5:
a8:ab:0a:3d:19:cd:d1:56:66:54:7a:8d:23:ff:f0:2a:d6:20:
6c:0e:a3:f8:b0:ea:c2:cd:05:03:09:33:cb:e5:71:cb:14:01:
12:4f:21:a1:a8:b5:a6:f7:4e:4f:53:d8:03:29:ec:af:0f:49:
64:23:99:05:67:10:53:45:91:b4:3a:c0:16:72:d4:58:7b:34:
da:73:86:9f:ae:38:c1:e0:24:4d:96:2e:3e:0e:4c:60:a9:b4:
5a:08:18:93:80:31:52:b5:9a:14:da:40:90:ee:12:4a:ef:22:
9b:91:86:31:71:8a:a1:0f:35:3c:39:2a:25:51:f2:2c:75:be:
61:db:c0:ea:0f:f4:de:7e:d4:75:bb:8b:83:21:d0:0a:f5:df:
9f:a0:0e:51:d6:d7:b6:02:9b:4d:81:61:84:33:3d:44:ac:23:
ec:0d:55:78:d5:d1:8d:ef:6f:37:52:5a:fd:52:a8:22:b8:b6:
dc:ed:01:e1
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgISAZR5EQcfZlzzlJnns5yYNnqOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0
ZDY0NjQwHhcNMjUwMTE4MTA1OTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWIwNWFlYTRhYmNlMzA5NDA2NDI4YjZiMzBmNTc1NDMxYTU1Mzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA66dbWpTp9oKfI3v0MKutx/blt0BZ
AzwQhg+81fXihypYN9yNXqUCJcUdIZNy5LVaZ5wxFja1g+JHtX+jB9i89fJrji6E
/7/2PJXN9EA6pGAllJPsoDXs4lgpXo1MAppietXDBSk+X93xKrftmNwS3ojHa5AE
VF7RMGOBsJ3GUQ+7j1gzn8Km11B3I1/ooCNpKkHMsKZ69AGw5TApUVzRyutDzrg0
LWasr1gwGtF6Tj3zEVEINQoW7+J9FFwCqNfMCGhEfWLDCicsTQYgRf5x71q3p5PF
VxHhCbrl8K/mGr5zMWlkkLYUrAcWXe+FBTz/RYD4lOYUMwoT9q+2h/rRdwIDAQAB
o4ICUjCCAk4wHQYDVR0OBBYEFMGwWupKvOMJQGQotrMPV1QxpVOGMB8GA1UdIwQY
MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt
OTg5MTY2ODgxOTY5LzEvd2JCYTZrcTg0d2xBWkNpMnN3OVhWREdsVTRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5
LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGgGCCsGAQUFBwEHAQH/BFkwVzBGBAIAATBAMAwDBAAFOSMD
BAAFOSQDBAAlICoDBAElICwDBACy75wDBACy758DBAG5GiIDBAC51DAwDAMEALnz
MQMEALnzMjANBAIAAjAHAwUAKgBwQDANBgkqhkiG9w0BAQsFAAOCAQEAVTEG9auX
AopERxViFSprVmfiRHzAjFj49FoW1nnoq6NB0O3CaJbbOR5i74IUTUBPdKFEqBle
toWwEIadOSMpWlURsMAwtTjlqKsKPRnN0VZmVHqNI//wKtYgbA6j+LDqws0FAwkz
y+VxyxQBEk8hoai1pvdOT1PYAynsrw9JZCOZBWcQU0WRtDrAFnLUWHs02nOGn644
weAkTZYuPg5MYKm0WggYk4AxUrWaFNpAkO4SSu8im5GGMXGKoQ81PDkqJVHyLHW+
YdvA6g/03n7UdbuLgyHQCvXfn6AOUdbXtgKbTYFhhDM9RKwj7A1VeNXRje9vN1Ja
/VKoIri23O0B4Q==
-----END CERTIFICATE-----
Generated at Wed Apr 23 02:44:53 2025 by rpki-client