Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/XWEFqzn9Kqqmy6sYA0pFFtPLRiY.roa
File: XWEFqzn9Kqqmy6sYA0pFFtPLRiY.roa (raw, json)
Hash identifier: 0/aZpRNztct9Dyg0sAK26/RS/in7DnbxuelzwG1Gl+g=
Subject key identifier: 5D:61:05:AB:39:FD:2A:AA:A6:CB:AB:18:03:4A:45:16:D3:CB:46:26
Certificate issuer: /CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19
Certificate serial: 018CC500432C8F31EC314BDF80F034791B41
Authority key identifier: 5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/XWEFqzn9Kqqmy6sYA0pFFtPLRiY.roa
Signing time: Mon 01 Jan 2024 12:29:37 +0000
ROA not before: Mon 01 Jan 2024 12:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29374
IP address blocks: 195.149.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:43:2c:8f:31:ec:31:4b:df:80:f0:34:79:1b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19
Validity
Not Before: Jan 1 12:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d6105ab39fd2aaaa6cbab18034a4516d3cb4626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:9e:88:62:7f:dd:68:fe:ff:c6:f5:30:4d:f1:
95:04:05:b5:51:91:1f:e9:90:28:75:cd:5a:5c:a4:
ec:08:81:63:58:47:de:b0:86:53:bb:d3:98:d0:10:
eb:75:e4:b3:fe:6d:0c:6c:a4:a2:37:b6:39:75:df:
31:4d:57:1f:17:0c:5e:76:1b:9c:7a:c6:b5:7d:c6:
47:d2:ff:c1:07:57:04:5f:be:e7:47:68:02:28:4a:
e4:ee:23:75:8e:93:a5:11:e5:e0:e9:5a:26:2f:8e:
84:83:93:7e:2c:9a:08:e7:b6:ee:c3:fe:49:96:42:
8b:25:a8:24:a4:ad:46:29:de:f7:3d:0d:cd:5f:bc:
10:2e:ef:4f:95:e8:e5:7a:cc:25:c6:dd:b7:f5:2b:
a0:03:42:f5:f9:53:dd:f2:67:90:5f:fa:4f:0f:db:
d6:88:de:a7:8c:3e:f3:eb:6f:39:56:3b:99:8f:af:
60:b2:db:39:4f:d3:07:74:9d:df:30:e8:ff:94:7a:
fb:5a:9b:e2:67:5a:b2:1f:d4:ea:c1:46:17:53:a0:
99:ff:ad:df:5f:45:74:a8:cc:fd:94:39:1f:52:05:
8e:86:e6:a0:3a:90:d8:8a:bf:50:67:4a:5a:f9:44:
fa:3e:c4:ee:24:5f:7c:99:c6:2b:24:d9:6c:9a:39:
8d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:61:05:AB:39:FD:2A:AA:A6:CB:AB:18:03:4A:45:16:D3:CB:46:26
X509v3 Authority Key Identifier:
keyid:5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/XWEFqzn9Kqqmy6sYA0pFFtPLRiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.149.94.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:a0:7d:18:2e:f3:49:78:4c:0b:24:f5:5d:42:7b:46:8e:dc:
d0:4d:a9:a5:79:99:34:ed:6d:71:59:25:75:58:cb:6a:46:ff:
69:1c:c8:95:49:91:e8:3b:7a:a2:45:74:ac:ab:b1:22:5a:2f:
08:26:8c:98:36:07:41:55:ab:1a:9f:16:c8:3d:0e:64:27:50:
69:ef:23:50:dc:73:44:81:19:5c:36:9f:83:8f:be:0c:3e:1e:
ab:f5:b6:c6:49:75:8e:a2:1b:b1:07:70:eb:52:5f:ac:a4:b9:
a0:87:38:1e:4c:f9:a7:05:ff:d7:16:66:81:2e:31:20:d2:23:
f9:53:f6:e7:8e:6e:05:60:6d:36:de:e2:14:38:3d:91:8c:91:
34:ee:5f:50:89:50:5a:65:a6:c9:33:ee:cb:0b:03:2f:78:15:
fc:c5:bc:d7:64:f9:e4:90:35:13:50:4e:20:b5:10:8b:1a:75:
20:fb:a5:2f:c4:9d:42:d4:09:17:eb:39:d4:c2:ac:0f:74:c8:
af:4c:18:45:50:c6:bb:06:07:0f:be:cc:70:a3:aa:65:65:cd:
33:c9:22:6e:ce:fe:96:82:d4:c2:8c:20:a5:cd:a1:cd:6d:c3:
b8:29:93:1d:11:c7:f2:e7:ae:fa:43:7a:74:8d:da:b3:ff:bc:
5f:91:e1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:59:11 2025 by rpki-client