Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/wdbW1K9R_tAmwXaRDDggmX_OMQE.roa
File: wdbW1K9R_tAmwXaRDDggmX_OMQE.roa (raw, json)
Hash identifier: zU9Lms+PbaqEUDdBDIQiLg8JuFe7Ja69P9kz/7Q8Z4g=
Subject key identifier: C1:D6:D6:D4:AF:51:FE:D0:26:C1:76:91:0C:38:20:99:7F:CE:31:01
Certificate issuer: /CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Certificate serial: 01947F76E85964CA51D34A30695BD3568FCA
Authority key identifier: 0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/wdbW1K9R_tAmwXaRDDggmX_OMQE.roa
Signing time: Sun 19 Jan 2025 16:48:06 +0000
ROA not before: Sun 19 Jan 2025 16:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 89.150.49.0/24 maxlen: 24
185.162.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Feb 2025 20:37:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:7f:76:e8:59:64:ca:51:d3:4a:30:69:5b:d3:56:8f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Validity
Not Before: Jan 19 16:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1d6d6d4af51fed026c176910c3820997fce3101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:58:2e:39:21:3c:ce:ab:b8:3c:3e:4b:da:52:
94:60:88:e0:dd:61:75:59:a5:b3:93:67:b1:14:f3:
db:b1:b4:2a:52:07:8d:5b:4f:f1:b1:78:13:a0:94:
6f:5a:5a:de:70:83:a1:fd:dc:4c:eb:41:ff:dd:1c:
c1:91:89:f4:0a:ad:07:cc:f3:bb:60:6b:65:2c:ed:
0d:4d:aa:17:10:8f:6c:be:e8:20:4f:48:ba:71:5b:
c4:c3:61:59:e2:c9:2a:d4:ce:22:83:6f:ce:98:96:
a7:93:08:3f:1c:19:24:a8:14:b3:be:de:c5:8a:c6:
36:7f:59:a9:c0:24:a5:f8:29:17:b2:21:0a:0c:34:
15:11:c4:cc:86:bb:c1:c8:8f:09:eb:af:76:6d:26:
e4:a2:ea:a4:26:da:5a:2e:e7:9d:11:3c:f7:0d:91:
cd:b2:a3:a7:42:e2:39:c7:fa:5e:f3:ea:d1:53:06:
e1:72:fa:81:13:93:d8:68:16:2e:f5:c4:0e:80:d0:
21:02:2e:e5:5c:ff:45:2c:4b:0c:c2:16:d3:21:e9:
e9:73:61:3d:d1:3e:8a:c7:fa:39:03:10:32:43:d6:
bf:22:b9:90:0b:c4:b6:75:bb:0c:49:04:14:34:8a:
1c:2b:5e:59:50:5c:11:ff:9b:42:65:21:04:4f:bc:
90:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D6:D6:D4:AF:51:FE:D0:26:C1:76:91:0C:38:20:99:7F:CE:31:01
X509v3 Authority Key Identifier:
keyid:0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/wdbW1K9R_tAmwXaRDDggmX_OMQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.150.49.0/24
185.162.176.0/24
Signature Algorithm: sha256WithRSAEncryption
55:a9:f0:1e:2c:2d:c5:20:ff:db:15:92:0c:b1:e6:e0:9f:2d:
5a:e4:fe:40:5e:7d:73:0a:4e:29:62:42:e6:dd:62:e2:ae:1c:
7c:4c:8c:f0:a3:7a:15:d7:95:0b:a6:c6:18:29:c0:1d:de:ab:
9c:57:99:e8:6a:1c:36:84:16:4a:11:0c:82:d6:42:9b:d6:dc:
00:85:7c:ff:dc:35:16:64:36:b6:54:e2:23:df:66:cb:95:ad:
46:b9:e5:6d:5c:61:ca:00:bc:2f:e3:0d:dc:92:7f:01:eb:e8:
10:f9:7f:2a:fa:d0:55:d1:17:27:75:1d:37:7d:c7:9e:2d:b0:
af:88:1c:79:74:da:d7:d1:3c:4c:13:c5:10:78:e7:35:16:8a:
cb:70:ad:4f:a4:4a:0e:3a:6f:5a:e2:2b:06:45:28:5b:89:46:
4e:d2:67:4f:40:ca:a6:51:40:71:d1:53:95:7f:82:b2:7f:0f:
92:99:32:01:93:46:e4:32:25:61:39:df:e8:78:3a:5b:4e:04:
32:af:3a:50:4d:5c:14:a8:45:5e:3c:de:ae:1c:18:85:fc:1d:
50:a2:a4:90:ae:12:35:dd:1e:22:19:4d:65:22:37:ee:de:e8:
1d:b4:8e:bd:76:a2:99:af:17:73:6e:ed:0c:59:e0:be:44:95:
a8:4d:2b:b2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZR/duhZZMpR00owaVvTVo/KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNWY4Yzk0NDdkNjE0Yjg2MTgyNzYzZDkzMzMyNTBlMmQ5
NDEyZTIwHhcNMjUwMTE5MTY0ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWQ2ZDZkNGFmNTFmZWQwMjZjMTc2OTEwYzM4MjA5OTdmY2UzMTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1guOSE8zqu4PD5L2lKUYIjg3WF1
WaWzk2exFPPbsbQqUgeNW0/xsXgToJRvWlrecIOh/dxM60H/3RzBkYn0Cq0HzPO7
YGtlLO0NTaoXEI9svuggT0i6cVvEw2FZ4skq1M4ig2/OmJankwg/HBkkqBSzvt7F
isY2f1mpwCSl+CkXsiEKDDQVEcTMhrvByI8J6692bSbkouqkJtpaLuedETz3DZHN
sqOnQuI5x/pe8+rRUwbhcvqBE5PYaBYu9cQOgNAhAi7lXP9FLEsMwhbTIenpc2E9
0T6Kx/o5AxAyQ9a/IrmQC8S2dbsMSQQUNIocK15ZUFwR/5tCZSEET7yQlwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMHW1tSvUf7QJsF2kQw4IJl/zjEBMB8GA1UdIwQY
MBaAFAtfjJRH1hS4YYJ2PZMzJQ4tlBLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzEtTWxFZldGTGhoZ25ZOWt6TWxEaTJVRXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mN2Y2YzAtMDlkMC00OTJjLTkyZTYt
OGE5NWU2Mzc3MzMyLzEvd2RiVzFLOVJfdEFtd1hhUkREZ2dtWF9PTVFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9mN2Y2YzAtMDlkMC00OTJjLTkyZTYtOGE5NWU2Mzc3MzMy
LzEvQzEtTWxFZldGTGhoZ25ZOWt6TWxEaTJVRXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWZYxAwQA
uaKwMA0GCSqGSIb3DQEBCwUAA4IBAQBVqfAeLC3FIP/bFZIMsebgny1a5P5AXn1z
Ck4pYkLm3WLirhx8TIzwo3oV15ULpsYYKcAd3qucV5noahw2hBZKEQyC1kKb1twA
hXz/3DUWZDa2VOIj32bLla1GueVtXGHKALwv4w3ckn8B6+gQ+X8q+tBV0RcndR03
fceeLbCviBx5dNrX0TxME8UQeOc1ForLcK1PpEoOOm9a4isGRShbiUZO0mdPQMqm
UUBx0VOVf4Kyfw+SmTIBk0bkMiVhOd/oeDpbTgQyrzpQTVwUqEVePN6uHBiF/B1Q
oqSQrhI13R4iGU1lIjfu3ugdtI69dqKZrxdzbu0MWeC+RJWoTSuy
-----END CERTIFICATE-----
Generated at Wed Apr 16 00:30:24 2025 by rpki-client