Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/wQtM4zBL-HYyW4ftOTDVN96L7JQ.roa
File: wQtM4zBL-HYyW4ftOTDVN96L7JQ.roa (raw, json)
Hash identifier: NxtWDoNtUVLXxdn61ALInewj2e/PwuWuTdIAvWt5SlA=
Subject key identifier: C1:0B:4C:E3:30:4B:F8:76:32:5B:87:ED:39:30:D5:37:DE:8B:EC:94
Certificate issuer: /CN=7d61b8378e8f368ae4998d51c3a9ace64148d6cd
Certificate serial: 0192D37116E42E3AC9376FB0DCD467591DAB
Authority key identifier: 7D:61:B8:37:8E:8F:36:8A:E4:99:8D:51:C3:A9:AC:E6:41:48:D6:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/wQtM4zBL-HYyW4ftOTDVN96L7JQ.roa
Signing time: Mon 28 Oct 2024 14:04:16 +0000
ROA not before: Mon 28 Oct 2024 14:04:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35790
IP address blocks: 185.31.140.0/22 maxlen: 22
185.31.143.0/24 maxlen: 24
185.57.84.0/22 maxlen: 22
185.105.244.0/22 maxlen: 22
185.217.224.0/22 maxlen: 22
213.204.192.0/20 maxlen: 20
213.204.192.0/23 maxlen: 23
213.204.193.0/24 maxlen: 24
213.204.198.0/23 maxlen: 23
213.204.198.0/24 maxlen: 24
213.204.200.0/22 maxlen: 22
213.204.208.0/20 maxlen: 20
213.204.215.0/24 maxlen: 24
213.204.216.0/23 maxlen: 23
213.204.218.0/24 maxlen: 24
213.204.219.0/24 maxlen: 24
213.204.221.0/24 maxlen: 24
213.204.222.0/24 maxlen: 24
213.204.224.0/20 maxlen: 20
213.204.232.0/24 maxlen: 24
213.204.233.0/24 maxlen: 24
213.204.237.0/24 maxlen: 24
213.204.240.0/21 maxlen: 21
213.204.244.0/24 maxlen: 24
213.204.245.0/24 maxlen: 24
213.204.247.0/24 maxlen: 24
213.204.248.0/22 maxlen: 23
213.204.248.0/23 maxlen: 23
213.204.252.0/22 maxlen: 22
2a0b:cdc0::/29 maxlen: 29
2a0b:cdc0::/32 maxlen: 32
2a0b:cdc1::/32 maxlen: 32
2a0b:cdc7::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 13 Nov 2024 09:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d3:71:16:e4:2e:3a:c9:37:6f:b0:dc:d4:67:59:1d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d61b8378e8f368ae4998d51c3a9ace64148d6cd
Validity
Not Before: Oct 28 14:04:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c10b4ce3304bf876325b87ed3930d537de8bec94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:dd:38:bf:e0:ea:dd:4d:33:5f:ea:03:db:a7:
5e:b2:58:4e:19:59:5a:6f:e3:eb:61:1d:86:4e:af:
f3:7d:c2:56:3f:3d:80:55:1a:88:ac:e4:1c:54:f7:
25:c4:d5:29:7e:c3:3f:8d:9c:87:10:19:d4:28:e4:
e3:87:00:33:dc:c4:75:a8:30:57:bc:ce:b6:d9:76:
dd:12:06:eb:e2:fd:48:0f:75:e2:7b:b6:9b:7b:4f:
7c:5e:d1:a3:24:29:1e:1c:ee:c0:04:c8:1d:54:b7:
3d:06:a3:94:90:84:bb:69:ff:5a:9e:da:b4:e1:79:
79:28:60:42:73:d8:21:04:46:1e:63:5f:dc:db:cc:
00:a8:49:62:bb:62:2b:b3:ee:5e:98:42:63:5a:a5:
05:b7:97:25:cb:14:24:de:c1:c4:2d:00:3c:0f:77:
c1:f1:22:3d:41:4e:e4:f2:a6:34:77:88:33:ab:57:
40:d6:53:52:00:8d:a5:d6:e6:42:40:e7:d0:5d:9b:
76:d0:c4:e2:66:f9:40:ab:86:76:bb:3e:46:c6:fd:
55:ff:c3:b5:35:f5:b7:50:b3:a7:07:94:57:40:f9:
92:17:ce:e5:e6:ef:15:5c:b3:0c:f9:cc:12:64:2c:
b3:22:71:70:22:7a:c4:5b:14:71:c1:12:70:3e:1e:
72:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0B:4C:E3:30:4B:F8:76:32:5B:87:ED:39:30:D5:37:DE:8B:EC:94
X509v3 Authority Key Identifier:
keyid:7D:61:B8:37:8E:8F:36:8A:E4:99:8D:51:C3:A9:AC:E6:41:48:D6:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/wQtM4zBL-HYyW4ftOTDVN96L7JQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.31.140.0/22
185.57.84.0/22
185.105.244.0/22
185.217.224.0/22
213.204.192.0/18
IPv6:
2a0b:cdc0::/29
Signature Algorithm: sha256WithRSAEncryption
52:13:47:50:c2:0d:22:e8:d8:3b:87:47:37:53:2d:42:00:bf:
ca:46:5b:31:8f:6d:80:54:10:d9:6a:4b:1f:6f:b8:1b:10:30:
14:81:2c:32:e1:70:3d:12:bd:5e:80:85:0c:2c:df:12:b4:82:
93:c5:16:0f:2b:91:39:3e:d2:63:f0:f3:39:19:05:46:c8:5e:
b4:27:eb:26:94:8f:15:6b:7e:ad:2e:e7:8b:d7:dc:2d:98:0c:
fb:89:ca:30:64:dc:e3:c0:fc:75:e8:ce:7a:85:7f:61:c9:8a:
c2:5c:24:9a:5d:4a:e1:e8:e7:ba:52:f0:2a:d5:45:e8:1a:83:
11:92:ba:f8:f2:4f:04:01:6e:a5:96:ed:0d:7f:b7:00:af:e2:
d3:48:ab:12:64:db:3c:ed:dc:1e:62:50:56:6b:bd:78:28:72:
84:2c:02:5c:2e:0d:a7:65:0e:c9:69:44:0d:2f:5f:c5:bf:f7:
19:7e:c3:e9:ac:6b:57:9e:1a:e8:1a:47:76:9d:d3:fc:a5:ad:
37:10:0e:f6:33:da:05:70:69:82:b5:3a:02:71:9b:ee:09:b9:
62:bb:a5:7b:86:08:9a:76:2e:69:65:c5:c8:61:71:43:a1:fc:
1b:4a:00:a0:0f:bf:ee:82:70:b9:44:67:d3:d5:de:9f:3e:58:
6a:06:e3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:23:31 2025 by rpki-client