Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/wm0LqEsrRtdicX1Aj3DIQZ75Xx4.roa
File: wm0LqEsrRtdicX1Aj3DIQZ75Xx4.roa (raw, json)
Hash identifier: qHegSMvUW67H8M90gcyt7MwYDymjMv4L3GRsfbbWySY=
Subject key identifier: C2:6D:0B:A8:4B:2B:46:D7:62:71:7D:40:8F:70:C8:41:9E:F9:5F:1E
Certificate issuer: /CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Certificate serial: 0196B6D00D9D7BA0D8D48711F2B6E0D4611D
Authority key identifier: 11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/wm0LqEsrRtdicX1Aj3DIQZ75Xx4.roa
Signing time: Fri 09 May 2025 20:50:10 +0000
ROA not before: Fri 09 May 2025 20:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215590
IP address blocks: 92.242.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 30 May 2025 16:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:d0:0d:9d:7b:a0:d8:d4:87:11:f2:b6:e0:d4:61:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Validity
Not Before: May 9 20:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c26d0ba84b2b46d762717d408f70c8419ef95f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8e:99:fe:88:cc:9b:0d:8a:fd:94:d7:d7:74:
a1:93:b6:27:1c:6d:b6:ae:7b:3a:17:7e:41:25:ea:
e3:a1:97:55:ce:d0:11:a4:15:50:13:fb:97:b9:9b:
e5:71:e0:5d:7a:f6:b2:fb:e4:e7:5e:04:75:f1:26:
5f:50:32:cf:7b:e6:ba:8d:40:74:41:50:5c:82:43:
12:b7:5f:c4:69:6f:98:30:52:20:1c:7a:c0:d7:fc:
51:f9:47:19:37:f6:d2:5d:e1:76:cd:98:0b:45:31:
16:84:03:d5:ce:97:91:12:d6:e5:e3:9d:97:e3:3a:
c4:f0:32:db:17:ac:6a:4a:1d:fb:88:9c:45:f7:3e:
8b:bb:8b:f2:a3:3d:a2:f9:ae:f9:a3:e2:f6:00:58:
fc:96:65:7c:89:95:3b:2e:b2:7e:99:59:22:5b:4f:
1c:49:ab:14:a1:ee:af:16:41:bd:c6:82:68:a7:73:
ea:d5:25:ea:5d:2f:14:63:b4:29:6f:e6:8b:3d:85:
f2:02:05:59:1f:35:4c:44:9c:0e:50:32:eb:41:99:
da:aa:b5:0b:a7:6e:79:fe:05:26:53:46:f4:df:5e:
7b:b0:d6:8d:98:59:72:c9:3c:8f:24:5c:d4:74:65:
5e:c7:da:e3:a7:75:bc:96:3d:25:67:d4:1b:ed:5c:
c1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:6D:0B:A8:4B:2B:46:D7:62:71:7D:40:8F:70:C8:41:9E:F9:5F:1E
X509v3 Authority Key Identifier:
keyid:11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/wm0LqEsrRtdicX1Aj3DIQZ75Xx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.242.165.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:80:de:86:7b:9a:e6:f7:c0:46:30:a9:06:6e:96:9b:04:12:
79:f6:c2:c9:89:88:31:ec:8a:bb:66:77:36:68:58:4d:d1:25:
76:07:65:6f:b4:ec:ad:f2:ab:30:a7:92:65:ab:ca:09:3a:ec:
49:07:bd:cd:1b:8a:52:f1:3b:a8:76:31:9b:07:39:ec:e5:01:
8f:a6:de:50:3a:41:96:3f:a1:bf:70:ab:7e:38:51:61:d0:65:
80:e5:7b:5e:69:28:88:b6:5f:a4:7c:a0:72:33:71:11:4a:c6:
4b:0f:ae:50:9b:1d:99:54:28:94:b2:d0:42:8a:44:7a:e6:f1:
40:b8:0e:38:53:36:1f:ec:f9:70:4f:f5:6c:93:53:65:ca:28:
ec:9d:1b:77:c3:2c:bf:81:71:4b:fb:bd:19:9d:cb:6a:8c:1a:
d4:f7:9c:5f:c3:2e:14:46:7b:9f:22:b0:4b:4b:c4:0f:e4:fd:
e3:fc:8d:1a:68:7b:53:58:ce:88:ef:0a:cb:97:6d:8e:18:ca:
04:79:52:a6:c7:fd:d4:0c:bd:16:a4:b5:ec:27:8a:48:eb:be:
78:cd:b7:0b:d6:57:e1:0f:92:0c:34:b7:6f:38:a2:3b:ce:aa:
8b:15:03:6a:27:5a:d8:4f:4f:f6:f4:5b:07:6f:c5:03:a9:fa:
09:12:a8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:45:35 2025 by rpki-client