Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/WyqllVXL920Y1nmYgdOznwKEp-8.roa
File: WyqllVXL920Y1nmYgdOznwKEp-8.roa (raw, json)
Hash identifier: DGb39Ick9s/UAGs11AnJ6PMToQy44uPVMg9/P+2wOz4=
Subject key identifier: 5B:2A:A5:95:55:CB:F7:6D:18:D6:79:98:81:D3:B3:9F:02:84:A7:EF
Certificate issuer: /CN=6faae55613fc89586f7bd6de0edca097b8615a6a
Certificate serial: 01941CED91E2124BAEF54E04D5D9457478BB
Authority key identifier: 6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/WyqllVXL920Y1nmYgdOznwKEp-8.roa
Signing time: Tue 31 Dec 2024 13:35:18 +0000
ROA not before: Tue 31 Dec 2024 13:35:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31898
IP address blocks: 185.208.36.0/22 maxlen: 22
217.74.176.0/22 maxlen: 22
2001:1a30::/48 maxlen: 48
2001:1a30:c000::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1c:ed:91:e2:12:4b:ae:f5:4e:04:d5:d9:45:74:78:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6faae55613fc89586f7bd6de0edca097b8615a6a
Validity
Not Before: Dec 31 13:35:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b2aa59555cbf76d18d6799881d3b39f0284a7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d4:e0:1f:4a:2d:08:d8:e5:44:0b:68:42:eb:
58:44:5c:5e:9c:5f:4a:8e:d8:6f:84:b8:e2:94:3f:
07:71:ff:f0:7b:bc:dd:5c:c9:42:4b:18:76:3a:5a:
61:d8:f4:c1:d6:05:9a:33:41:6f:4f:31:6f:23:21:
94:0d:d4:15:70:18:a4:1d:8e:99:ad:d7:bd:57:dd:
d2:09:8c:10:e7:62:c5:a5:63:b0:92:1f:02:5e:9e:
9d:c2:34:df:cd:72:d6:95:1f:87:db:49:50:6d:af:
e2:24:73:b3:89:e9:5f:df:f0:f9:e2:d5:24:91:87:
79:9e:33:e7:9d:af:47:24:26:cf:73:91:4e:86:10:
4b:dc:93:67:4c:29:a3:6f:d9:9e:5b:3c:60:00:ca:
69:f6:57:99:a6:d4:77:2d:66:82:d3:8c:66:93:ce:
c1:d4:b8:20:8b:25:db:04:a6:6c:75:01:9c:02:2e:
4e:f0:f3:ac:be:4d:67:77:cd:da:e3:6c:2e:14:41:
5c:14:90:64:75:a8:34:2a:a5:eb:d3:56:7b:fc:0d:
fd:1b:1f:7e:cb:df:2e:0c:29:f0:2a:76:c2:7e:a7:
16:38:e2:53:1d:50:7f:ce:9f:e2:11:b7:c4:85:90:
88:66:75:d5:1a:e4:63:be:83:76:b9:2e:2b:67:28:
66:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2A:A5:95:55:CB:F7:6D:18:D6:79:98:81:D3:B3:9F:02:84:A7:EF
X509v3 Authority Key Identifier:
keyid:6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/WyqllVXL920Y1nmYgdOznwKEp-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.36.0/22
217.74.176.0/22
IPv6:
2001:1a30::/48
2001:1a30:c000::/48
Signature Algorithm: sha256WithRSAEncryption
97:be:d5:55:6e:6c:71:1e:b7:de:79:ce:b2:fd:06:c9:ee:06:
03:e9:0a:b2:78:24:61:58:ba:04:99:b3:6a:ef:f6:d1:97:1a:
6e:d8:30:5a:22:19:37:9a:96:19:61:97:97:32:5f:39:42:5c:
92:38:58:28:49:ec:d7:e2:5e:7a:29:14:14:15:fd:e1:6b:07:
a7:ed:0b:d2:6b:79:da:cf:76:24:80:52:39:70:62:f6:49:f2:
3e:cf:b4:f2:a0:05:3a:8d:62:e8:fd:1e:b6:ef:0e:2c:4d:79:
31:18:bc:54:6e:44:75:5c:c1:fe:b8:f5:45:b5:22:94:fa:4a:
eb:49:3f:cf:0b:2b:ab:97:07:66:d5:3b:56:3f:ed:ad:03:8d:
64:a5:e2:2e:e0:3a:b4:c5:40:4e:c9:35:00:b8:54:f2:68:88:
71:c0:e7:f4:ff:16:4e:7c:b9:b9:88:f5:77:ea:7b:89:38:86:
8f:bc:68:f0:5d:d2:8e:15:b1:4c:29:80:71:ec:af:97:7b:04:
a7:87:97:6d:22:17:0a:1f:46:da:64:67:91:d8:07:30:f7:93:
66:bf:7f:16:eb:68:9d:98:20:91:03:3d:9d:d4:5d:98:f0:39:
bb:a4:b4:6b:d8:66:57:61:bc:33:8c:c1:ab:8f:6d:ec:59:70:
6a:fb:e7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:15:19 2025 by rpki-client