Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/WqwKNSbiDG5xmLD09INNji47SXA.roa
File: WqwKNSbiDG5xmLD09INNji47SXA.roa (raw, json)
Hash identifier: XljFrSgONzu2ulhXtlwN+df+8F83l0kQ8GcNAyyimIw=
Subject key identifier: 5A:AC:0A:35:26:E2:0C:6E:71:98:B0:F4:F4:83:4D:8E:2E:3B:49:70
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 0194F93F4CC5E466ADC525FF509F0B4D5E8D
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/WqwKNSbiDG5xmLD09INNji47SXA.roa
Signing time: Wed 12 Feb 2025 08:21:02 +0000
ROA not before: Wed 12 Feb 2025 08:21:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 80.91.221.0/24 maxlen: 24
212.87.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Feb 2025 01:06:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f9:3f:4c:c5:e4:66:ad:c5:25:ff:50:9f:0b:4d:5e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Feb 12 08:21:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5aac0a3526e20c6e7198b0f4f4834d8e2e3b4970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:62:23:1e:ee:42:d2:c8:2b:e2:04:32:63:df:
ce:c1:28:54:99:8e:86:85:e1:6c:84:27:0a:32:16:
3e:d7:ed:2e:22:7c:46:b4:16:04:9d:50:b1:fe:fd:
6c:9a:b6:01:5c:4c:ab:3a:1e:6b:cb:ea:dc:5d:30:
52:8f:59:33:86:09:87:c2:f8:2f:f7:20:56:07:f0:
00:70:06:69:fd:e4:f0:3f:25:48:0b:70:35:0e:60:
e4:99:82:a3:62:0b:3d:1f:66:79:19:f6:b1:2c:c9:
ac:87:65:24:d1:32:b1:08:28:e1:7c:d6:38:b5:1c:
ab:c5:11:11:2b:1a:70:c3:1f:bf:80:48:15:d5:55:
32:67:19:d8:aa:3f:7c:0f:c5:e4:28:36:fd:d9:2a:
40:e0:5b:37:00:9a:65:b7:d7:b9:35:f9:20:28:0a:
2a:ed:0c:26:16:73:2f:15:0b:69:7b:47:8d:62:ea:
45:37:89:9a:87:ea:9a:3f:8f:70:3a:6c:6a:94:3d:
b7:17:07:e1:b0:1a:36:6b:a4:89:e8:97:84:d9:19:
cd:39:dd:97:c5:7d:8f:1e:22:57:34:9d:83:de:50:
43:3e:b6:01:4a:5b:ca:59:30:0a:19:78:33:2e:1c:
21:b4:72:ca:13:95:ba:5a:da:cf:7d:8e:9d:69:cf:
ad:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AC:0A:35:26:E2:0C:6E:71:98:B0:F4:F4:83:4D:8E:2E:3B:49:70
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/WqwKNSbiDG5xmLD09INNji47SXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.221.0/24
212.87.200.0/24
Signature Algorithm: sha256WithRSAEncryption
99:d4:12:92:a5:70:76:88:c6:34:ba:08:a4:9f:61:bf:50:29:
07:9c:57:00:3f:e5:c6:c5:ea:35:7b:b8:16:23:50:25:f9:48:
0b:09:24:0d:43:c2:4a:b9:a7:04:bc:a2:5b:c2:02:c7:c9:2e:
95:3e:3c:38:6c:bf:4d:88:b9:d1:d5:5a:da:1e:37:cf:3e:7b:
11:96:fe:0f:2d:cf:3f:11:78:17:ba:d6:ea:f8:40:f6:43:4b:
7e:f3:d8:60:72:ff:6e:fb:43:3c:59:92:84:78:a1:d4:bf:99:
dc:b7:53:74:69:df:62:a9:7f:fc:3c:48:87:62:c4:03:7d:03:
20:14:81:72:50:21:0e:1e:ee:02:4b:19:e2:9b:d3:2d:bc:58:
78:27:86:77:2b:fb:72:3b:a6:33:f5:f9:50:f5:67:d3:66:51:
be:bd:78:ed:df:35:29:e4:c0:01:d3:2f:45:cf:6e:ba:bf:95:
6f:8f:e8:82:32:10:37:b7:72:68:0e:c7:56:42:07:d7:08:9d:
0e:94:f1:76:e6:21:e3:14:ea:86:aa:08:69:dc:86:10:b0:cd:
b1:9f:14:b9:7c:14:3e:86:2b:ec:f0:af:82:6b:9f:44:83:ea:
81:7d:14:b4:1a:cd:1f:81:1e:d6:6b:fb:f1:ba:48:c7:9d:ad:
96:da:62:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:17 2025 by rpki-client