Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/wvkBinnzC0JAYJBWziS0IgdV5SU.roa
File: wvkBinnzC0JAYJBWziS0IgdV5SU.roa (raw, json)
Hash identifier: DSkae/JBBwBX25TbL1ku9pY1IfV4bCiFqIWV0X0rjx0=
Subject key identifier: C2:F9:01:8A:79:F3:0B:42:40:60:90:56:CE:24:B4:22:07:55:E5:25
Certificate issuer: /CN=464dcfa96399716692d245a804887c09da451f8f
Certificate serial: 0194D04BA7E86EDCF1D6E649E5E7553875C6
Authority key identifier: 46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/wvkBinnzC0JAYJBWziS0IgdV5SU.roa
Signing time: Tue 04 Feb 2025 09:30:06 +0000
ROA not before: Tue 04 Feb 2025 09:30:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206663
IP address blocks: 185.94.46.0/24 maxlen: 24
185.94.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Feb 2025 13:39:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d0:4b:a7:e8:6e:dc:f1:d6:e6:49:e5:e7:55:38:75:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464dcfa96399716692d245a804887c09da451f8f
Validity
Not Before: Feb 4 09:30:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2f9018a79f30b4240609056ce24b4220755e525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:31:3c:20:95:08:43:5c:ed:c2:e3:e7:b8:60:
90:2f:b7:45:15:2c:65:9d:64:2b:5b:e3:c1:f6:67:
98:2e:98:c8:0c:1d:74:7d:a6:62:5e:f3:3b:68:a2:
b9:f8:29:9b:6e:8b:8f:dd:72:a4:f8:c9:55:9f:7d:
65:71:4e:81:77:53:71:7e:22:07:ee:2d:be:9a:8d:
4f:8a:24:b3:09:3a:9a:b5:00:85:50:d5:74:45:e6:
04:ec:c9:e8:86:1b:10:3e:11:d9:58:49:4f:01:75:
a0:a0:d4:88:a4:e7:4b:b3:ab:c7:5d:48:22:35:98:
4d:19:d0:9e:af:e7:72:9f:7f:10:de:c5:4a:ca:ce:
f9:80:1e:9d:19:10:3c:24:11:39:78:3d:f5:be:d2:
a4:89:5e:9e:7b:61:a3:39:e3:ac:8e:4d:d6:98:0d:
05:89:1d:4d:2f:2a:15:11:a8:ab:9d:b2:66:06:83:
f2:1d:bf:49:c0:ec:0d:e2:77:00:b3:7d:79:13:50:
6b:f6:c4:13:ed:02:59:d1:9d:6d:48:ba:79:c1:11:
2c:10:fe:51:39:b3:96:f5:25:31:4c:17:07:56:d7:
ac:43:9b:20:a5:b1:fb:1e:c3:00:8e:0f:4d:ed:d4:
68:6b:f3:7c:b8:c9:d6:dc:69:33:cb:b7:2f:e5:c8:
15:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F9:01:8A:79:F3:0B:42:40:60:90:56:CE:24:B4:22:07:55:E5:25
X509v3 Authority Key Identifier:
keyid:46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/wvkBinnzC0JAYJBWziS0IgdV5SU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.46.0/23
Signature Algorithm: sha256WithRSAEncryption
20:35:c2:df:0d:22:bd:e7:81:ec:c6:ea:66:42:26:29:26:3e:
5b:f1:26:69:ec:f0:5a:2c:40:13:1b:02:8c:cf:b7:b0:ab:0e:
66:62:51:60:df:05:67:84:26:52:f8:00:23:bb:64:ce:ed:d0:
b8:89:e0:b5:03:f0:ba:40:6a:5a:3a:2b:3c:1f:83:d5:b0:28:
70:a8:64:a6:24:38:2f:0a:27:29:65:f1:b7:b3:30:11:ad:5c:
b7:34:04:2b:fe:c5:f3:1c:ac:44:e1:d5:e0:aa:73:ab:55:71:
be:39:ad:30:d3:b1:54:57:8a:b4:36:2b:aa:5c:a2:0f:b9:e2:
28:df:6b:bf:c9:c3:8c:13:d5:f6:be:fc:0e:8a:09:50:16:b1:
25:a1:24:57:49:82:e3:69:97:34:e5:ce:cc:69:a6:7e:a5:5a:
35:9a:99:72:df:44:70:29:d2:d2:3a:ca:51:8c:d5:59:fd:d1:
9b:50:d5:33:d0:11:7f:1c:f5:58:ff:88:53:0f:99:f3:4e:c2:
d1:f8:40:6b:f7:9c:99:73:ba:fb:84:ae:1e:40:b8:1d:f1:85:
7d:fb:b7:62:fa:cb:8e:e0:c1:18:e9:d9:d7:8b:e1:b1:3e:28:
05:22:68:30:4d:58:44:2d:1e:c4:c2:5b:86:b0:30:97:77:59:
e7:32:36:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:51:51 2025 by rpki-client