Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/wpcUm2Y11BqIKRGcBhErCo4q9-o.roa
File: wpcUm2Y11BqIKRGcBhErCo4q9-o.roa (raw, json)
Hash identifier: qBcW1m4SptituPEVlCAS2QBnR36biXVUMUFg2D1FDnk=
Subject key identifier: C2:97:14:9B:66:35:D4:1A:88:29:11:9C:06:11:2B:0A:8E:2A:F7:EA
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019423D6B81986DDDCE69E80619A28992133
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/wpcUm2Y11BqIKRGcBhErCo4q9-o.roa
Signing time: Wed 01 Jan 2025 21:47:41 +0000
ROA not before: Wed 01 Jan 2025 21:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 89.42.87.0/24 maxlen: 24
93.113.183.0/24 maxlen: 24
93.119.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Feb 2025 20:51:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:b8:19:86:dd:dc:e6:9e:80:61:9a:28:99:21:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 21:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c297149b6635d41a8829119c06112b0a8e2af7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a1:76:b5:68:6f:0d:0f:8a:3f:43:a0:24:e7:
7f:c0:68:0e:9d:aa:7d:41:c4:35:fc:eb:ae:e3:5b:
7a:f8:96:d6:29:16:4f:ff:21:a3:d6:ec:96:ce:a1:
3c:16:6f:31:4a:ab:56:09:67:59:94:ba:bb:87:fd:
d9:1f:be:e8:83:9b:f7:73:8b:67:85:e7:93:12:91:
d0:32:87:f3:47:ea:f3:63:de:69:d2:b9:93:4b:cc:
9b:c2:be:5f:e3:6d:c7:53:08:0a:be:99:c6:cb:4d:
2d:9a:b0:2f:34:e5:5b:e0:bd:d7:ea:70:8f:12:d2:
85:89:5e:8b:f2:ac:41:3f:68:87:42:30:76:53:92:
77:b5:29:7a:91:e0:c0:02:0f:c5:a6:2b:30:e7:20:
30:56:84:91:56:c0:c2:75:b3:5e:8d:c3:15:43:d3:
95:cc:17:8b:b6:5c:b0:b9:0d:57:1b:12:f0:2e:c1:
5c:fd:5f:29:69:ce:c2:4d:40:89:c4:39:7b:3e:ae:
05:a9:d9:54:ac:73:83:a1:97:d4:bd:47:6b:2f:9b:
1e:22:2e:54:13:01:23:e8:d9:78:b7:93:f9:05:c4:
10:db:78:f2:3d:6b:92:0b:2a:05:56:30:c0:f7:69:
6c:54:1f:3e:d9:d9:c6:f3:91:a5:e3:12:28:81:2c:
83:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:97:14:9B:66:35:D4:1A:88:29:11:9C:06:11:2B:0A:8E:2A:F7:EA
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/wpcUm2Y11BqIKRGcBhErCo4q9-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.87.0/24
93.113.183.0/24
93.119.106.0/24
Signature Algorithm: sha256WithRSAEncryption
61:4e:c7:bd:d9:8d:66:54:c0:ae:46:e4:5b:3c:50:f7:c4:07:
d7:0f:2f:ec:b4:cd:e9:da:a0:ee:9d:51:37:bd:a7:3e:f2:6c:
4c:07:f1:d8:f6:b2:75:78:7f:c1:e3:3d:68:a5:a3:29:e8:ed:
0c:43:5d:d2:e8:4c:3c:e8:19:4a:56:55:db:cb:eb:9c:3c:87:
59:6d:72:ae:5f:db:54:88:78:c3:2a:50:44:86:c0:a3:65:a3:
d9:8d:5f:66:e4:0c:e3:22:15:c5:30:88:f2:23:9b:3d:fc:f7:
a6:42:27:2b:7f:03:52:05:9d:e5:00:b0:b5:52:8f:ac:2c:d6:
71:2d:06:6d:47:70:af:dc:e7:27:3e:7e:ce:fc:d6:e7:f5:e6:
42:a9:13:24:84:75:ff:c5:2f:58:37:a7:0d:40:59:25:21:2e:
19:77:e0:f7:b8:5c:7a:e2:46:24:2b:26:19:13:8c:13:8e:cb:
d0:90:f7:cd:ca:e6:8e:b6:a8:7c:4c:82:b8:13:94:cd:d3:6c:
11:90:f4:c5:5e:6c:1c:1d:79:ff:97:59:45:7b:4a:9e:a6:de:
4f:12:64:be:59:99:73:c9:62:83:ce:d7:0d:5f:54:2f:ec:72:
7e:56:42:ff:65:a5:63:d4:78:f0:8f:a4:62:78:2e:c1:04:f4:
52:bf:f5:1a
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQj1rgZht3c5p6AYZoomSEzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjUwMTAxMjE0NzQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjk3MTQ5YjY2MzVkNDFhODgyOTExOWMwNjExMmIwYThlMmFmN2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6F2tWhvDQ+KP0OgJOd/wGgOnap9
QcQ1/Ouu41t6+JbWKRZP/yGj1uyWzqE8Fm8xSqtWCWdZlLq7h/3ZH77og5v3c4tn
heeTEpHQMofzR+rzY95p0rmTS8ybwr5f423HUwgKvpnGy00tmrAvNOVb4L3X6nCP
EtKFiV6L8qxBP2iHQjB2U5J3tSl6keDAAg/Fpisw5yAwVoSRVsDCdbNejcMVQ9OV
zBeLtlywuQ1XGxLwLsFc/V8pac7CTUCJxDl7Pq4FqdlUrHODoZfUvUdrL5seIi5U
EwEj6Nl4t5P5BcQQ23jyPWuSCyoFVjDA92lsVB8+2dnG85Gl4xIogSyDVQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMKXFJtmNdQaiCkRnAYRKwqOKvfqMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvd3BjVW0yWTExQnFJS1JHY0JoRXJDbzRxOS1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWSpXAwQA
XXG3AwQAXXdqMA0GCSqGSIb3DQEBCwUAA4IBAQBhTse92Y1mVMCuRuRbPFD3xAfX
Dy/stM3p2qDunVE3vac+8mxMB/HY9rJ1eH/B4z1opaMp6O0MQ13S6Ew86BlKVlXb
y+ucPIdZbXKuX9tUiHjDKlBEhsCjZaPZjV9m5AzjIhXFMIjyI5s9/PemQicrfwNS
BZ3lALC1Uo+sLNZxLQZtR3Cv3OcnPn7O/Nbn9eZCqRMkhHX/xS9YN6cNQFklIS4Z
d+D3uFx64kYkKyYZE4wTjsvQkPfNyuaOtqh8TIK4E5TN02wRkPTFXmwcHXn/l1lF
e0qept5PEmS+WZlzyWKDztcNX1Qv7HJ+VkL/ZaVj1Hjwj6RieC7BBPRSv/Ua
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:51:58 2025 by rpki-client