Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/wtRi_FKwPkDYgWr1uteaX55t9ak.roa
File: wtRi_FKwPkDYgWr1uteaX55t9ak.roa (raw, json)
Hash identifier: zZGspqF2cMGhtmSDoRdmOPP4kjVxGw0SbeObP9FzopE=
Subject key identifier: C2:D4:62:FC:52:B0:3E:40:D8:81:6A:F5:BA:D7:9A:5F:9E:6D:F5:A9
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0196B01073C62A4933130DD69D05B0DC23F3
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/wtRi_FKwPkDYgWr1uteaX55t9ak.roa
Signing time: Thu 08 May 2025 13:23:10 +0000
ROA not before: Thu 08 May 2025 13:23:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 81.22.136.0/24 maxlen: 24
81.22.142.0/23 maxlen: 24
89.185.0.0/22 maxlen: 22
109.72.116.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 May 2025 16:51:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:10:73:c6:2a:49:33:13:0d:d6:9d:05:b0:dc:23:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: May 8 13:23:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2d462fc52b03e40d8816af5bad79a5f9e6df5a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:08:ac:86:f9:13:80:7c:36:8e:c4:dd:58:9a:
28:31:5b:83:4e:1e:df:9d:e5:06:89:3a:60:75:69:
72:0b:f4:3d:b6:29:56:0a:5e:56:10:99:96:23:9b:
2a:71:6e:48:c2:ab:fa:03:4b:0e:34:58:ce:98:8b:
5c:58:53:5c:ee:04:de:9e:26:4f:94:ec:4c:d6:c0:
b1:2d:e5:dd:89:7b:e5:e6:3f:53:6c:71:c0:8c:f2:
93:42:36:49:90:63:a2:82:dd:45:62:ed:91:8f:a8:
28:a3:c9:7f:d4:99:21:3f:ee:96:81:43:d7:d2:72:
30:53:da:29:42:f6:ea:ef:62:57:48:9d:61:bb:1d:
91:2c:d6:83:cd:83:a8:76:18:b5:ac:0e:e6:42:a2:
fc:d7:00:99:59:ef:f5:28:9f:60:8f:74:4c:1a:3a:
20:83:7f:a5:f7:04:3f:05:a4:88:60:bd:c4:6a:4f:
6b:b9:11:cd:3b:2a:f9:2b:83:04:ed:b9:91:a1:50:
79:77:3e:04:09:d5:58:25:dc:6a:a3:6c:9d:0e:d6:
e3:ed:20:4f:45:d0:03:69:8c:cd:30:81:69:0e:99:
13:b1:c3:20:37:cb:5a:30:de:e3:4e:0d:12:bb:12:
95:64:eb:d1:b7:4d:38:a4:5b:56:6e:ea:46:a9:3c:
98:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D4:62:FC:52:B0:3E:40:D8:81:6A:F5:BA:D7:9A:5F:9E:6D:F5:A9
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/wtRi_FKwPkDYgWr1uteaX55t9ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.136.0/24
81.22.142.0/23
89.185.0.0/22
109.72.116.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:01:01:24:32:bf:71:7b:90:45:a1:0b:fb:f4:32:51:ae:b6:
a9:87:8b:29:62:93:6f:61:47:5b:c4:5e:94:f3:d7:d0:0a:12:
f0:4e:91:66:4f:8a:d9:8c:5c:48:cb:df:3c:69:e9:28:ee:4a:
19:13:ab:43:9c:0f:a4:8a:ce:13:0e:d5:34:e8:a3:61:1c:ed:
96:a4:ec:f2:7d:64:b3:c9:18:26:82:c3:14:b9:67:75:11:5d:
7a:7d:72:09:4a:97:44:c1:75:c5:69:da:b3:90:fd:07:72:65:
b3:96:35:e1:f2:d0:49:af:6b:c2:0a:36:da:8d:60:53:ad:db:
4d:67:c5:81:55:f1:96:46:30:4b:d3:2d:b2:98:9b:f2:15:f6:
70:a9:1e:49:d0:c5:49:76:19:0c:77:77:dc:88:fe:37:78:b0:
00:6a:a0:b7:b3:2d:0f:68:7a:d3:b9:e2:c1:c5:59:8d:7d:4d:
ef:67:17:63:21:f5:39:e4:c7:60:59:26:89:61:22:05:5f:89:
c6:72:55:4d:d5:91:3b:c9:2f:ad:fd:48:1c:b0:27:7b:3c:33:
0f:f0:0e:23:2f:bf:92:0f:fa:6f:ba:1a:02:cd:36:88:fb:00:
13:25:4c:33:32:66:4b:c0:89:cd:a2:dc:d0:3d:58:31:1c:35:
91:fa:af:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:05:57 2025 by rpki-client