Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wJ5tUDg1JYf8n2IQbaSze4xn_5Q.roa
File: wJ5tUDg1JYf8n2IQbaSze4xn_5Q.roa (raw, json)
Hash identifier: YFz00iFb3BIAP2IeuncJBUq0qo6WtNA5xamMrzuX5yk=
Subject key identifier: C0:9E:6D:50:38:35:25:87:FC:9F:62:10:6D:A4:B3:7B:8C:67:FF:94
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 0194DFF3D6EF5DD4BC72FC92804377C13B64
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wJ5tUDg1JYf8n2IQbaSze4xn_5Q.roa
Signing time: Fri 07 Feb 2025 10:28:06 +0000
ROA not before: Fri 07 Feb 2025 10:28:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209372
IP address blocks: 91.108.192.0/24 maxlen: 24
91.108.193.0/24 maxlen: 24
91.108.194.0/24 maxlen: 24
91.108.195.0/24 maxlen: 24
91.108.196.0/22 maxlen: 22
91.108.200.0/22 maxlen: 22
91.108.204.0/22 maxlen: 22
91.108.208.0/22 maxlen: 22
91.108.208.0/24 maxlen: 24
91.108.212.0/22 maxlen: 22
91.108.216.0/22 maxlen: 22
91.108.220.0/22 maxlen: 22
91.108.224.0/24 maxlen: 24
91.108.236.0/24 maxlen: 24
91.108.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Feb 2025 12:27:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:df:f3:d6:ef:5d:d4:bc:72:fc:92:80:43:77:c1:3b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Feb 7 10:28:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c09e6d5038352587fc9f62106da4b37b8c67ff94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e2:9a:10:12:91:8d:3b:48:06:f3:b3:24:42:
11:28:05:5b:0d:cf:f7:eb:1b:b2:20:cb:e9:a8:dd:
ad:7a:6b:fa:94:34:2e:06:1e:bb:7e:d5:80:1d:9e:
2f:46:4a:a6:91:9c:60:4f:ad:a5:a3:6f:8c:e9:09:
8a:b0:7e:d0:e0:31:57:88:8f:72:d8:54:7d:bf:9f:
22:cf:d5:dd:cd:2f:2b:fd:12:12:13:04:be:de:a0:
c7:33:ee:b0:36:c9:d4:8a:a0:db:7c:ac:fa:5d:91:
9f:83:cc:da:53:a2:86:0d:aa:4f:7d:99:85:2e:1c:
e0:4b:95:81:1a:4c:bc:b0:3e:f1:28:8f:76:d6:c2:
cf:ab:73:33:f2:95:40:4f:e4:dc:50:b6:f2:1f:a8:
b7:18:d4:ee:83:af:8b:17:a0:00:7f:c6:84:33:e4:
7b:7e:39:22:08:6f:0a:1a:77:a2:16:b5:14:3c:98:
13:68:9f:99:53:c1:07:0e:5e:d2:61:06:60:c4:a8:
41:22:5b:ac:58:b4:a0:78:4b:ea:33:8c:48:f7:0f:
fa:2b:65:2b:9f:d1:ee:55:5f:e1:3e:bf:e1:26:0c:
6d:f8:7a:b7:ee:89:b4:60:e1:b1:1d:9c:d7:30:c7:
dc:49:4f:07:81:0c:5f:6d:49:24:fa:c2:e4:c1:70:
af:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:9E:6D:50:38:35:25:87:FC:9F:62:10:6D:A4:B3:7B:8C:67:FF:94
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wJ5tUDg1JYf8n2IQbaSze4xn_5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.192.0-91.108.224.255
91.108.236.0/24
91.108.238.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:11:97:71:f2:9a:c0:0d:73:e4:f2:8f:95:cb:08:ac:3c:51:
18:45:61:19:90:15:64:11:71:d0:90:c7:d0:df:7d:6a:94:dd:
67:27:ba:4c:da:3c:9f:ac:e9:12:dd:55:a4:7a:01:82:7a:96:
dd:82:9e:2e:9a:91:a0:d8:cc:5a:4f:19:96:30:70:29:79:22:
4c:72:23:c8:02:fd:98:18:6f:55:a6:dd:f3:00:2a:09:65:6f:
b1:95:4d:a5:6d:c1:ad:e3:ad:6a:a3:4e:74:e2:46:c6:77:53:
96:e8:9f:0e:09:c4:d4:cb:0e:76:de:cf:cf:d3:e1:0a:0c:3c:
a0:7d:05:c0:87:c2:32:db:c8:cb:7c:ea:ea:0d:2e:62:3f:cc:
c5:ba:06:75:70:a7:eb:ea:0a:06:76:05:4d:e7:16:f2:9c:9a:
85:f2:72:2b:b5:bc:a9:9b:af:f5:2b:bb:b7:bf:ff:2a:c1:27:
8b:b8:8d:bf:c0:f5:a6:bf:9f:b0:56:d6:03:c2:68:d3:a2:65:
67:61:09:6d:29:02:29:fb:ed:36:be:d1:d0:06:a3:78:85:1d:
aa:cf:fd:0e:62:a5:cb:39:e2:04:56:5f:56:9d:cf:32:ac:e4:
18:b7:d1:24:e5:9e:3d:ce:78:80:e9:65:27:3a:92:34:14:cb:
f4:db:40:75
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZTf89bvXdS8cvySgEN3wTtkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZWU0NTQyNmUxMmU1MGZlMzBlOGZmYzM5ZTA0NDg1ZDhm
NzMzMzkwHhcNMjUwMjA3MTAyODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDllNmQ1MDM4MzUyNTg3ZmM5ZjYyMTA2ZGE0YjM3YjhjNjdmZjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+KaEBKRjTtIBvOzJEIRKAVbDc/3
6xuyIMvpqN2temv6lDQuBh67ftWAHZ4vRkqmkZxgT62lo2+M6QmKsH7Q4DFXiI9y
2FR9v58iz9XdzS8r/RISEwS+3qDHM+6wNsnUiqDbfKz6XZGfg8zaU6KGDapPfZmF
LhzgS5WBGky8sD7xKI921sLPq3Mz8pVAT+TcULbyH6i3GNTug6+LF6AAf8aEM+R7
fjkiCG8KGneiFrUUPJgTaJ+ZU8EHDl7SYQZgxKhBIlusWLSgeEvqM4xI9w/6K2Ur
n9HuVV/hPr/hJgxt+Hq37om0YOGxHZzXMMfcSU8HgQxfbUkk+sLkwXCvcQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFMCebVA4NSWH/J9iEG2ks3uMZ/+UMB8GA1UdIwQY
MBaAFMLuRUJuEuUP4w6P/DngRIXY9zM5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUt
ZGE3NTQzMGIxNmY2LzEvd0o1dFVEZzFKWWY4bjJJUWJhU3plNHhuXzVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUtZGE3NTQzMGIxNmY2
LzEvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAZbbMAD
BABbbOADBABbbOwDBABbbO4wDQYJKoZIhvcNAQELBQADggEBAJ0Rl3HymsANc+Ty
j5XLCKw8URhFYRmQFWQRcdCQx9DffWqU3WcnukzaPJ+s6RLdVaR6AYJ6lt2Cni6a
kaDYzFpPGZYwcCl5IkxyI8gC/ZgYb1Wm3fMAKgllb7GVTaVtwa3jrWqjTnTiRsZ3
U5bonw4JxNTLDnbez8/T4QoMPKB9BcCHwjLbyMt86uoNLmI/zMW6BnVwp+vqCgZ2
BU3nFvKcmoXyciu1vKmbr/Uru7e//yrBJ4u4jb/A9aa/n7BW1gPCaNOiZWdhCW0p
Ain77Ta+0dAGo3iFHarP/Q5ipcs54gRWX1adzzKs5Bi30STlnj3OeIDpZSc6kjQU
y/TbQHU=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:20:54 2025 by rpki-client