Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/WGz__Rvi5xClthwIa0wfusiTeqo.roa
File: WGz__Rvi5xClthwIa0wfusiTeqo.roa (raw, json)
Hash identifier: ILFQDscWIxwWaw7t8T6BUyEjEfkbiWozvMlwvyZ1QK8=
Subject key identifier: 58:6C:FF:FD:1B:E2:E7:10:A5:B6:1C:08:6B:4C:1F:BA:C8:93:7A:AA
Certificate issuer: /CN=e3786587ad47205a81128e578c90caee1e48828b
Certificate serial: 018CC493892DEACDCA5157EE5A8FA61DD2B1
Authority key identifier: E3:78:65:87:AD:47:20:5A:81:12:8E:57:8C:90:CA:EE:1E:48:82:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/WGz__Rvi5xClthwIa0wfusiTeqo.roa
Signing time: Mon 01 Jan 2024 10:30:52 +0000
ROA not before: Mon 01 Jan 2024 10:30:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200978
IP address blocks: 185.89.228.0/22 maxlen: 22
91.227.98.0/23 maxlen: 23
2a05:d980::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:48:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:89:2d:ea:cd:ca:51:57:ee:5a:8f:a6:1d:d2:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3786587ad47205a81128e578c90caee1e48828b
Validity
Not Before: Jan 1 10:30:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=586cfffd1be2e710a5b61c086b4c1fbac8937aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f1:59:17:95:78:5c:a2:b7:b5:ac:81:93:75:
39:bd:e3:78:fe:78:c4:b4:9e:29:fc:25:fd:85:65:
1a:08:d5:28:36:af:af:51:25:2a:bd:b1:7e:28:48:
39:de:5b:cd:d2:1f:71:c8:0b:d3:5c:5b:bc:25:a9:
b0:85:88:13:cd:60:32:67:1f:a5:07:ed:4e:2a:d6:
21:32:6f:2a:58:24:1d:bb:0d:d6:50:71:64:00:59:
5b:80:18:04:77:66:ec:dc:04:ed:4b:91:c7:9b:1a:
b3:3c:65:d2:25:f2:b9:a8:de:ff:e7:66:b2:53:a2:
c2:57:d6:36:4d:7c:6c:d6:a3:e4:e2:8c:63:11:3f:
28:b7:b5:c1:3a:a6:5f:81:8d:d1:ce:23:d6:1e:ad:
53:39:1c:78:69:cc:fa:c6:ac:27:97:5b:0f:b9:1f:
89:e2:e7:73:9c:79:61:b9:fa:39:e5:9d:76:40:05:
36:fb:c2:cf:a0:f0:75:f3:0f:33:ea:fb:ea:1d:2e:
57:d4:fd:05:70:5d:fd:ba:24:24:ed:92:e6:aa:3b:
4b:fc:90:c5:23:fa:d0:82:df:a1:51:2d:39:8b:64:
21:ee:53:37:93:1b:7d:d8:3c:88:60:90:3f:10:7b:
6d:20:ac:f3:41:e9:bb:00:95:91:cd:d1:d6:2c:70:
4d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6C:FF:FD:1B:E2:E7:10:A5:B6:1C:08:6B:4C:1F:BA:C8:93:7A:AA
X509v3 Authority Key Identifier:
keyid:E3:78:65:87:AD:47:20:5A:81:12:8E:57:8C:90:CA:EE:1E:48:82:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/WGz__Rvi5xClthwIa0wfusiTeqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.98.0/23
185.89.228.0/22
IPv6:
2a05:d980::/29
Signature Algorithm: sha256WithRSAEncryption
0a:7b:bd:f7:ed:35:2f:92:40:a3:fc:d6:1e:fc:2c:fe:6a:50:
12:f3:67:8c:c5:05:66:4a:61:fc:81:17:82:18:21:cb:0f:20:
87:9c:b7:cb:90:47:11:e9:1f:7b:bd:9e:ef:9c:f9:cd:00:d3:
29:07:20:ae:d8:71:74:3f:1c:5a:1b:4d:8a:0b:87:b3:2b:f3:
ad:4a:e1:65:53:0b:f1:2c:c4:35:6a:d7:d5:bb:da:08:0c:b9:
ed:d9:29:8d:f6:59:81:b7:0f:ad:c0:21:c6:f6:4b:dd:2d:91:
bc:d2:3c:02:b2:7c:b1:a4:4e:d6:cb:48:cc:a1:46:e3:4c:39:
97:b5:d3:ed:5d:b0:2e:07:7b:5d:11:79:4c:80:9b:d8:f3:a6:
04:7c:63:ea:06:38:bf:f8:60:23:20:b0:b4:f8:2f:b3:0e:d4:
96:2c:76:62:d1:d3:8b:12:0c:09:3d:50:5c:e6:43:12:f0:87:
f3:27:ca:d5:a6:e5:4a:cc:4f:f4:4f:d7:db:33:22:32:7f:87:
e4:59:85:8e:f3:f1:cc:b2:49:3b:b0:88:fd:f9:d3:9b:15:0d:
ba:8a:03:13:16:bd:b8:83:aa:9d:3c:39:d0:cd:24:34:e7:0f:
1c:a9:ef:85:f3:4b:17:c4:e2:ce:96:1e:e8:4b:c4:97:12:6c:
80:3c:33:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:22:31 2025 by rpki-client