Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/wb-crwr0fg4-xVcJu4X_gpvIK4U.roa
File: wb-crwr0fg4-xVcJu4X_gpvIK4U.roa (raw, json)
Hash identifier: 4Yct4RKIOxIXOo0xf27ZBduhIFvoaOlkUs7BCP8Cs2g=
Subject key identifier: C1:BF:9C:AF:0A:F4:7E:0E:3E:C5:57:09:BB:85:FF:82:9B:C8:2B:85
Certificate issuer: /CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
Certificate serial: 019420D5F286726903D384070F5732D7FE66
Authority key identifier: E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/wb-crwr0fg4-xVcJu4X_gpvIK4U.roa
Signing time: Wed 01 Jan 2025 07:47:59 +0000
ROA not before: Wed 01 Jan 2025 07:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212036
IP address blocks: 185.226.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 12 Jan 2025 04:37:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:f2:86:72:69:03:d3:84:07:0f:57:32:d7:fe:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
Validity
Not Before: Jan 1 07:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1bf9caf0af47e0e3ec55709bb85ff829bc82b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e5:d3:cf:a4:ea:cd:4c:04:a3:f7:ff:24:15:
01:51:c8:85:1f:29:87:16:5e:fd:35:6f:da:8b:11:
f7:a6:44:a2:5d:d1:c0:b2:3d:65:97:77:b3:6a:13:
fa:58:92:30:1b:bb:e8:97:b4:a8:c1:7a:22:86:7c:
ed:19:13:65:d8:c1:d3:f8:78:23:4d:45:a6:5b:d1:
fc:97:a4:47:f1:dc:00:b1:b2:58:5f:46:08:b9:35:
ae:cd:13:e0:d0:4b:b2:7e:50:3e:3b:7b:19:dd:0d:
26:40:b3:a4:f0:92:2c:93:ff:fb:0a:b9:ee:82:78:
fd:5a:45:6b:df:e8:82:97:a8:ec:23:c6:49:bd:7c:
22:c9:f4:b7:27:1d:43:9c:db:c6:a3:51:fe:a9:57:
e3:84:a2:19:af:17:ea:68:9c:4c:6c:ca:77:91:7a:
33:8c:b7:38:fb:14:fd:cf:1e:76:f9:ab:30:fb:f4:
e8:95:a1:f2:c9:c0:57:3d:90:69:eb:ed:be:89:e5:
0c:92:c4:ca:23:d5:54:3b:03:a3:06:7a:0d:23:bf:
4a:41:16:b9:91:a2:7b:6f:4b:1f:91:db:a6:f6:ce:
cf:ac:73:46:7c:2d:aa:dc:6e:66:29:56:09:27:58:
8a:98:1d:16:04:c4:dc:46:8d:93:2d:54:38:ff:cf:
d0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:BF:9C:AF:0A:F4:7E:0E:3E:C5:57:09:BB:85:FF:82:9B:C8:2B:85
X509v3 Authority Key Identifier:
keyid:E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/wb-crwr0fg4-xVcJu4X_gpvIK4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.97.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:37:5e:74:bf:6b:40:36:f2:35:b5:28:03:29:4b:0f:12:9b:
f6:34:a1:94:42:67:bd:a1:95:33:5f:e0:fd:b7:6b:ea:d9:7d:
83:ea:7f:2f:bb:40:fa:7d:44:e9:e7:e2:b0:2d:cc:6a:27:7f:
c9:40:53:30:0e:61:74:0d:b9:98:fd:43:e7:9e:6c:40:27:2a:
35:54:97:fc:a0:95:90:8c:10:5f:c2:5b:bc:de:9e:15:4f:07:
cd:31:6c:74:37:b2:57:4a:fc:ea:c5:ec:d1:ba:3f:d8:c9:5f:
8e:fc:1b:46:e3:48:c6:af:54:20:f4:48:f8:80:63:5f:01:51:
9b:f5:a9:74:cc:4d:0c:4e:d9:89:bf:79:7d:ba:56:3f:68:de:
46:ba:29:da:d8:d6:61:e2:c8:73:28:01:11:7a:75:b2:7e:42:
6b:c5:d1:80:1c:42:21:9d:dc:bd:5c:48:40:71:55:c5:cd:0d:
9f:ee:22:92:47:55:a9:cf:65:97:bb:04:ca:f7:96:d5:31:92:
1d:41:e8:ba:71:a4:80:f2:0d:a8:07:4e:7f:9e:ed:48:e0:da:
de:b7:0d:a9:91:e1:0f:45:91:0e:01:bd:52:b4:f8:7a:18:50:
f1:af:88:14:fb:9c:60:f9:ca:aa:6e:05:33:0d:47:0d:1f:a9:
7f:96:ab:a2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1fKGcmkD04QHD1cy1/5mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNjkxZGJhZmEzYThkZTA3MGIwNzAyMmRlOWFkZjc0MzQx
ZmI0ZjIwHhcNMjUwMTAxMDc0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWJmOWNhZjBhZjQ3ZTBlM2VjNTU3MDliYjg1ZmY4MjliYzgyYjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+XTz6TqzUwEo/f/JBUBUciFHymH
Fl79NW/aixH3pkSiXdHAsj1ll3ezahP6WJIwG7vol7SowXoihnztGRNl2MHT+Hgj
TUWmW9H8l6RH8dwAsbJYX0YIuTWuzRPg0EuyflA+O3sZ3Q0mQLOk8JIsk//7Crnu
gnj9WkVr3+iCl6jsI8ZJvXwiyfS3Jx1DnNvGo1H+qVfjhKIZrxfqaJxMbMp3kXoz
jLc4+xT9zx52+asw+/TolaHyycBXPZBp6+2+ieUMksTKI9VUOwOjBnoNI79KQRa5
kaJ7b0sfkdum9s7PrHNGfC2q3G5mKVYJJ1iKmB0WBMTcRo2TLVQ4/8/QXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMG/nK8K9H4OPsVXCbuF/4KbyCuFMB8GA1UdIwQY
MBaAFOBpHbr6Oo3gcLBwIt6a33Q0H7TyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEdrZHV2bzZqZUJ3c0hBaTNwcmZkRFFmdFBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9mNzVjN2QtZTViMy00NDJmLWEwODQt
ZmQ0OWViM2YxOWIxLzEvd2ItY3J3cjBmZzQteFZjSnU0WF9ncHZJSzRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9mNzVjN2QtZTViMy00NDJmLWEwODQtZmQ0OWViM2YxOWIx
LzEvNEdrZHV2bzZqZUJ3c0hBaTNwcmZkRFFmdFBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueJhMA0G
CSqGSIb3DQEBCwUAA4IBAQAcN150v2tANvI1tSgDKUsPEpv2NKGUQme9oZUzX+D9
t2vq2X2D6n8vu0D6fUTp5+KwLcxqJ3/JQFMwDmF0DbmY/UPnnmxAJyo1VJf8oJWQ
jBBfwlu83p4VTwfNMWx0N7JXSvzqxezRuj/YyV+O/BtG40jGr1Qg9Ej4gGNfAVGb
9al0zE0MTtmJv3l9ulY/aN5Guina2NZh4shzKAERenWyfkJrxdGAHEIhndy9XEhA
cVXFzQ2f7iKSR1Wpz2WXuwTK95bVMZIdQei6caSA8g2oB05/nu1I4Nretw2pkeEP
RZEOAb1StPh6GFDxr4gU+5xg+cqqbgUzDUcNH6l/lqui
-----END CERTIFICATE-----
Generated at Sun Jun 8 01:45:27 2025 by rpki-client