Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/wJwMQUitcMs5NQ5r-2YxisGHXvU.roa
File: wJwMQUitcMs5NQ5r-2YxisGHXvU.roa (raw, json)
Hash identifier: K6Zev4AgJ0M/wlwPXG9j42GFt+Zg+63ht2rIxuyZmT0=
Subject key identifier: C0:9C:0C:41:48:AD:70:CB:39:35:0E:6B:FB:66:31:8A:C1:87:5E:F5
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019421B2303058318AA700E06458B88A10A7
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/wJwMQUitcMs5NQ5r-2YxisGHXvU.roa
Signing time: Wed 01 Jan 2025 11:48:33 +0000
ROA not before: Wed 01 Jan 2025 11:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8100
IP address blocks: 5.253.38.0/24 maxlen: 24
45.15.143.0/24 maxlen: 24
45.92.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Feb 2025 18:35:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:30:30:58:31:8a:a7:00:e0:64:58:b8:8a:10:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 11:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c09c0c4148ad70cb39350e6bfb66318ac1875ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:63:92:28:fe:d1:94:79:3e:6f:bc:06:c3:26:
e6:e1:2d:a7:13:3b:4a:35:1d:df:5e:18:08:83:84:
e9:73:6c:b3:c5:78:7f:37:f3:3a:f6:e7:6b:7a:2a:
80:32:2c:62:47:9d:d3:07:a4:64:d9:a7:1e:18:e6:
c6:18:79:3c:cd:2f:47:7b:2b:0e:73:2e:8e:10:af:
00:d5:90:25:3f:ef:68:60:39:c1:b5:52:dd:60:37:
eb:91:25:29:2c:e0:cf:1b:e4:71:68:f2:80:79:c5:
97:ba:8f:ef:39:3e:73:22:15:e7:e9:da:21:a5:36:
a4:6b:f8:66:28:41:08:c1:42:70:c2:ce:33:45:f1:
29:94:47:3e:68:42:14:a4:59:bc:44:1d:cc:ed:b0:
64:f6:e8:11:d2:8a:28:67:c5:c0:62:96:09:47:25:
14:9d:36:96:66:75:97:6f:d4:06:ea:f3:72:df:17:
7c:e4:ea:d5:02:5e:d4:f9:39:17:17:75:0c:f6:1c:
4d:52:88:97:e3:d8:85:df:c4:40:e6:ab:41:cb:ed:
d0:78:b4:01:17:a1:b0:ca:5e:b9:16:30:81:29:e4:
20:21:f1:b3:86:e4:99:f3:39:b1:a4:70:6b:4e:65:
0b:eb:95:14:f5:87:ae:b1:55:53:5c:8e:3a:30:cd:
8a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:9C:0C:41:48:AD:70:CB:39:35:0E:6B:FB:66:31:8A:C1:87:5E:F5
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/wJwMQUitcMs5NQ5r-2YxisGHXvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.38.0/24
45.15.143.0/24
45.92.195.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:d1:cd:51:77:a2:04:93:ad:2c:0a:c8:fd:65:51:37:8b:58:
cf:19:4f:47:4c:9d:72:79:99:92:46:e9:23:53:8a:dd:af:89:
9a:75:81:4d:01:13:44:76:95:9c:17:c7:9a:83:21:29:cb:5e:
5f:25:24:21:38:58:d5:c3:da:4a:f9:51:cc:40:12:11:89:3d:
68:ea:6f:d0:27:85:4a:40:72:e9:05:f3:2e:02:58:c6:3a:0e:
6f:47:30:60:b8:c7:e6:6f:5c:39:78:53:43:a1:97:27:9c:18:
74:29:6c:f1:57:7f:05:64:f5:c9:93:e7:6f:dd:91:4b:d7:1a:
08:27:cb:18:f6:c0:d0:2b:7a:de:30:93:07:1c:e0:69:74:d4:
63:38:72:1c:11:00:88:f6:df:77:4f:c4:e6:51:d1:c3:82:49:
5a:5b:43:f7:0a:58:da:4b:f3:ce:03:c8:3c:12:cb:ba:7d:94:
d1:31:7a:b1:10:0d:09:e1:7b:3b:a8:4d:96:1b:86:40:aa:0c:
d7:a3:bf:ef:fa:89:46:42:e5:4b:1c:0d:f8:fe:f9:65:d3:8d:
5a:0e:fa:e2:1d:75:5b:a7:6f:c5:33:45:d8:ff:47:6c:ea:88:
82:78:2b:ab:9d:aa:e5:83:e7:0d:15:79:4e:ad:b7:8d:d9:7a:
10:c0:fc:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:37:06 2025 by rpki-client