Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/wK2a-cwtI4sjWHtFzfRLKEXDBFI.roa
File: wK2a-cwtI4sjWHtFzfRLKEXDBFI.roa (raw, json)
Hash identifier: GQSHiy2M1P9S/ifuIR0rSZ8GB0Cve7131P5EbtR59GE=
Subject key identifier: C0:AD:9A:F9:CC:2D:23:8B:23:58:7B:45:CD:F4:4B:28:45:C3:04:52
Certificate issuer: /CN=fc55e0533efaa5624f538b92ed1a973feff89751
Certificate serial: 0196B47ECA57D35EDBABF0BDDF567A35DF16
Authority key identifier: FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/wK2a-cwtI4sjWHtFzfRLKEXDBFI.roa
Signing time: Fri 09 May 2025 10:02:10 +0000
ROA not before: Fri 09 May 2025 10:02:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 185.84.116.0/24 maxlen: 24
185.84.118.0/24 maxlen: 24
185.84.119.0/24 maxlen: 24
185.132.188.0/24 maxlen: 24
185.132.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 May 2025 06:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:7e:ca:57:d3:5e:db:ab:f0:bd:df:56:7a:35:df:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc55e0533efaa5624f538b92ed1a973feff89751
Validity
Not Before: May 9 10:02:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0ad9af9cc2d238b23587b45cdf44b2845c30452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a2:b7:a0:33:75:7d:09:e7:2f:1e:f7:41:d5:
a9:ee:20:67:97:35:c2:9f:aa:34:0a:1b:77:2c:e0:
81:b0:74:9c:05:81:df:07:ec:52:43:65:ac:3f:95:
f6:3d:6b:dc:3d:64:3c:c2:67:82:ac:14:64:3f:81:
e3:72:a0:ad:82:85:c5:76:64:48:6b:59:58:16:08:
a4:c7:94:c3:1f:83:e5:c7:ae:3e:45:34:56:31:23:
b4:e7:a6:b7:b8:25:d1:a1:cf:13:f0:9b:fc:ad:4b:
06:2d:76:2f:01:70:a3:93:bd:15:ce:a8:85:31:02:
81:a7:90:74:de:a4:d6:77:f9:b3:78:a3:50:62:11:
b5:13:d8:bd:82:63:ad:e6:7b:07:c8:36:d8:1b:46:
82:2d:6c:80:dd:d1:84:d4:62:24:1e:08:21:21:34:
d9:75:85:59:8e:85:ad:ce:57:2e:21:48:45:2d:71:
9e:c5:fb:13:46:73:42:38:da:00:6d:f0:00:3c:9b:
99:2e:7a:c6:d0:c3:d9:6d:f1:a2:6b:be:47:9c:a6:
a6:75:84:ec:e0:dd:0c:2f:fc:9c:9a:ed:8f:03:a3:
8a:4e:a0:10:78:4e:0a:6f:0f:20:66:c7:59:f0:b9:
a4:ff:05:83:b3:01:9c:eb:f7:72:d6:52:2f:72:69:
9a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:AD:9A:F9:CC:2D:23:8B:23:58:7B:45:CD:F4:4B:28:45:C3:04:52
X509v3 Authority Key Identifier:
keyid:FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/wK2a-cwtI4sjWHtFzfRLKEXDBFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.116.0/24
185.84.118.0/23
185.132.188.0/23
Signature Algorithm: sha256WithRSAEncryption
78:d1:78:d7:3a:dc:09:db:df:52:94:83:6f:cd:df:05:81:33:
6f:70:db:fd:01:ca:06:62:34:71:cb:f5:42:ef:52:f7:75:05:
58:d8:fb:55:60:af:fd:83:67:26:7d:84:61:65:17:a1:4b:68:
bc:48:f8:e0:7f:c6:93:7a:ca:2e:01:be:53:ba:69:40:bc:4e:
43:97:dc:cb:60:c1:9f:e4:55:25:5f:a0:0e:33:bf:30:7e:1a:
50:de:c6:3c:80:db:6b:07:87:2f:d3:ea:d1:5e:c3:72:28:5b:
89:29:41:6f:ee:ee:8f:03:7b:85:c8:f0:9c:cc:f4:ad:03:3a:
32:c2:a0:2c:5d:69:2a:e2:3e:b5:c4:06:e5:d3:4a:43:58:01:
c0:f9:a6:31:fc:f3:53:90:5b:2e:37:5a:06:3a:ea:0c:e9:73:
9a:af:26:03:e2:e6:6a:64:42:a8:55:72:59:55:0a:27:55:41:
d8:93:65:ed:09:7c:55:3d:09:32:f8:84:02:e6:fa:1c:e6:c0:
48:e5:e3:55:d8:3e:1b:44:66:8f:59:43:57:c1:f1:cd:f5:94:
eb:44:1f:56:15:96:ba:9e:8f:00:02:4f:0d:3c:0a:9c:3c:6e:
d2:74:2f:af:85:c7:28:2e:c2:2d:65:16:c2:6b:b6:cf:f2:18:
bd:20:ea:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:44:33 2025 by rpki-client