Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/wwYS773eF8f5hV4ohepyOO-ifB0.roa
File: wwYS773eF8f5hV4ohepyOO-ifB0.roa (raw, json)
Hash identifier: dVUhq/eAJdu372f2XZI+TaIvLid8//8pFvKUxAiEBzM=
Subject key identifier: C3:06:12:EF:BD:DE:17:C7:F9:85:5E:28:85:EA:72:38:EF:A2:7C:1D
Certificate issuer: /CN=3936daf03756baf83ba4f38dbe5d68cb9baceff9
Certificate serial: 0194228D8758F7E5C42BE78A5FAFB4A02853
Authority key identifier: 39:36:DA:F0:37:56:BA:F8:3B:A4:F3:8D:BE:5D:68:CB:9B:AC:EF:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/wwYS773eF8f5hV4ohepyOO-ifB0.roa
Signing time: Wed 01 Jan 2025 15:48:08 +0000
ROA not before: Wed 01 Jan 2025 15:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133153
IP address blocks: 195.190.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Apr 2025 08:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:87:58:f7:e5:c4:2b:e7:8a:5f:af:b4:a0:28:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3936daf03756baf83ba4f38dbe5d68cb9baceff9
Validity
Not Before: Jan 1 15:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c30612efbdde17c7f9855e2885ea7238efa27c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:74:86:08:94:95:69:5d:e9:4a:53:4d:27:aa:
18:eb:c6:d4:b7:f6:e1:9d:48:41:2b:5b:14:7b:f9:
79:58:65:c3:fa:c2:4f:2f:e4:fb:86:b9:80:76:5b:
f2:9d:40:83:6f:57:cf:73:9b:a9:db:67:cc:be:6b:
48:94:74:e6:b1:8d:4a:39:53:36:2b:bb:55:88:69:
50:c6:20:fd:5f:bb:e7:08:bd:09:be:88:4e:9f:8b:
a8:52:94:11:5d:8e:01:38:c8:1f:cb:01:27:a3:d5:
07:62:48:2e:90:bd:14:90:06:7e:99:3f:01:6d:22:
e3:96:a8:87:62:54:80:70:c1:8e:6d:16:50:41:8c:
fb:1d:30:40:f7:45:cb:99:75:21:8d:2d:0b:70:41:
51:73:b7:db:48:1b:20:c9:80:e9:da:9e:78:b2:28:
f5:09:19:30:3c:65:81:11:16:1e:9e:9d:8f:d0:05:
41:1e:3a:ac:ec:5b:87:a5:2e:bc:8a:95:65:ea:1a:
cf:d8:8c:2b:a7:41:ae:06:63:89:cd:26:03:9d:1d:
3f:b2:3f:4a:69:95:89:24:35:aa:44:3d:d2:89:a7:
a2:b7:37:b8:08:8f:9b:f3:dc:5a:5c:c3:f1:a1:67:
64:d0:1a:ff:16:3f:20:9d:0b:78:d4:9f:49:c7:e2:
f6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:06:12:EF:BD:DE:17:C7:F9:85:5E:28:85:EA:72:38:EF:A2:7C:1D
X509v3 Authority Key Identifier:
keyid:39:36:DA:F0:37:56:BA:F8:3B:A4:F3:8D:BE:5D:68:CB:9B:AC:EF:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/wwYS773eF8f5hV4ohepyOO-ifB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.190.139.0/24
Signature Algorithm: sha256WithRSAEncryption
68:9a:de:3d:83:89:f1:6f:2e:55:f9:b4:bd:89:ea:39:04:a0:
43:02:38:88:7e:47:6a:38:3e:7a:78:f6:85:fe:1f:24:6f:65:
2d:95:26:57:e3:ed:50:44:1c:1e:35:5e:fc:f4:66:ae:0c:45:
5c:7a:8e:20:ea:64:34:ef:3f:a2:8e:9f:1f:f1:e9:1e:34:79:
fb:9f:85:2d:ce:ad:26:4a:f6:0c:c0:cf:86:92:c5:7f:a0:24:
68:9a:e9:7a:0c:fb:73:52:27:b2:be:cc:0e:9f:0a:30:21:d2:
44:71:2e:1a:96:ec:c1:ea:65:a2:2f:b1:fe:4d:63:f5:2b:14:
94:39:97:64:56:a6:a3:ff:74:1a:67:fa:c4:af:0e:df:88:28:
79:c9:68:62:0c:8c:48:60:b8:1c:1c:6d:ca:ba:f9:7e:60:35:
04:89:09:b5:76:e8:04:0d:40:a6:0e:98:ae:a1:93:3f:14:c9:
3d:64:61:90:4b:d5:ce:d1:39:35:a2:bc:1a:f7:2a:e0:8e:5b:
6e:f8:29:7d:16:6c:0d:9e:6d:62:54:a1:4b:da:fe:09:10:e6:
89:e9:dd:b1:75:ad:82:5f:fd:62:5f:ae:c5:5e:4c:be:24:da:
9d:89:fa:0e:7f:4d:14:9a:c9:69:26:a2:a9:04:13:59:14:40:
49:ad:df:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:31:46 2025 by rpki-client